Bright Eye Intelligence Customer Privacy Notice

Foreword

As Open Source Intelligence practitioners, we understand the importance of privacy to our customers and users – they know best the impacts that data and personally identifiable information has on every day life. That’s why we retain as little information as possible about our users.

For those that are not interested in reading legal jargon, the below policy contains the following key points:

  • We retain registration information about you for as long as your account is active within our service. We only collect the data that you give us on registration, according to which authorisation provider you use to create an account.
  • We retain all searches, queries and tool usages that you conduct, as to allow users to review their previous searches whilst avoiding incurring further costs.
  • All information and data generated by users is stored within the United Kingdom through the Vercel platform, which is hosted on Amazon Web Services infrastructure.
  • We will, and do, actively use search metric data to determine which tools are of the most interest to users, to allow us to continuously improve our services. We do not evaluate individual accounts or users for usage metrics.
  • We will, upon legal request and obligation, handover the details of any account and its associated service usage if so required by law enforcement agencies within the United Kingdom. This data will be provided to law enforcement “as is” and will not be pre-processed, inspected or refined before being handed over.
  • We will never release any details of any accounts or related service usage to any organisation or individual that does not have a correct and legal premise upon which to be authorised to request this data.

For those interested in legal jargon, the explicit legal terms of our privacy policy can be found below.


This privacy notice tells you what to expect us to do with your personal information.

  • Contact details
  • What information we collect, use, and why
  • Lawful bases and data protection rights
  • Where we get personal information from
  • How long we keep information
  • Who we share information with
  • How to complain

Contact details

Email

hello@brighteyeintel.co.uk

What information we collect, use, and why

We collect or use the following information to provide and improve products and services for clients:

  • Names and contact details
  • Transaction data (including details about payments to and from you and details of products and services you have purchased)
  • Usage data (including information about how you interact with and use our website, products and services)
  • Account access information
  • Website user information

We collect or use the following personal information for the operation of client or customer accounts:

  • Names and contact details
  • Purchase or service history
  • Account information, including registration details
  • Information used for security purposes
  • Technical data, including information about browser and operating systems

We collect or use the following personal information for the prevention, detection, investigation or prosecution of crimes:

  • Names and contact information

We collect or use the following personal information for information updates or marketing purposes:

  • Names and contact details
  • Profile information
  • Website and app user journey information

We collect or use the following personal information for research or archiving purposes:

  • Names and contact details
  • Addresses
  • Purchase or client account history
  • Website and app user journey information
  • IP addresses

We collect or use the following personal information to comply with legal requirements:

  • Name
  • Contact information

We collect or use the following personal information for dealing with queries, complaints or claims:

  • Names and contact details
  • Account information
  • Purchase or service history
  • Correspondence

Lawful bases and data protection rights

Under UK data protection law, we must have a “lawful basis” for collecting and using your personal information. There is a list of possible lawful bases in the UK GDPR. You can find out more about lawful bases on the ICO’s website.

Which lawful basis we rely on may affect your data protection rights which are set out in brief below. You can find out more about your data protection rights and the exemptions which may apply on the ICO’s website:

If you make a request, we must respond to you without undue delay and in any event within one month.

To make a data protection rights request, please contact us using the contact details at the top of this privacy notice.

Our lawful bases for the collection and use of your data

Our lawful bases for collecting or using personal information to provide and improve products and services for clients are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • Through the collection of tool usage, search queries, website user behaviour and determining topics of interest, we are able to focus the development of tooling and capabilities to ensure improve robustness, accuracy, efficiency, speed and overall impact of the tool suite that we offer. By determining the types of information that users are attempting to collect through our tools, we are able to prioritise conducting further research and development of our OSINT tooling, and ensure the best possibly quality of service is being provided.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information for the operation of client or customer accounts are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Contract – we have to collect or use the information so we can enter into or carry out a contract with you. All of your data protection rights may apply except the right to object.

Our lawful bases for collecting or using personal information for the prevention, detection, investigation or prosecution of crimes are:

  • Public task – we have to collect or use your information to carry out a task laid down in law, which the law intends to be performed by an organisation such as ours. All of your data protection rights may apply, except the right to erasure and the right to portability.

Our lawful bases for collecting or using personal information for information updates or marketing purposes are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for research or archiving purposes:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.
  • Legitimate interests – we’re collecting or using your information because it benefits you, our organisation or someone else, without causing an undue risk of harm to anyone. All of your data protection rights may apply, except the right to portability. Our legitimate interests are:
    • Collection of service usage data allows us to prioritise research into data acquisition methods that may be of interest for our users. This information will also be used to direct publicly released research articles, which are aimed to benefit knowledge sharing and understanding throughout the OSINT community.

For more information on our use of legitimate interests as a lawful basis you can contact us using the contact details set out above.

Our lawful bases for collecting or using personal information to comply with legal requirements:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Our lawful bases for collecting or using personal information for dealing with queries, complaints or claims are:

  • Consent - we have permission from you after we gave you all the relevant information. All of your data protection rights may apply, except the right to object. To be clear, you do have the right to withdraw your consent at any time.

Where we get personal information from

  • Directly from you

How long we keep information

Information regarding your registration to and usage of our services is retained for as long as your account is active with our services. To deactivate your account, and thus have this data removed from our systems, you may contact us on hello@brighteyeintel.co.uk.

Who we share information with

Others we share personal information with

  • Emergency services
  • Organisations we’re legally obliged to share personal information with

How to complain

If you have any concerns about our use of your personal data, you can make a complaint to us using the contact details at the top of this privacy notice.

If you remain unhappy with how we’ve used your data after raising a complaint with us, you can also complain to the ICO.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF


Helpline number: 0303 123 1113

Website: https://www.ico.org.uk/make-a-complaint

Last updated