Privacy Policy

Last updated: 29 October 2026

1. Who we are

Bright Bridge is a trading name of Conceptbox Consulting Limited, registered in England and Wales, company number 14426371, registered office 22 Sydenham Hill, London SE26 6AJ. Build From Abroad is a programme by Bright Bridge.

Conceptbox Consulting Limited is the controller of the personal information collected through this website, its forms, our programmes and direct communications. In this policy, “we”, “us” and “our” mean Conceptbox Consulting Limited.

Contact us about privacy at davinia@buildfromabroad.com, or write to us at the registered office above. You can also message us on WhatsApp, but please do not send sensitive information that way.

2. Information we collect

• Newsletter, resources and classes: your name and email address when you join the newsletter, request a resource or access a class, and which resources or classes you choose.
• Registration source: when you register, we save campaign labels (platform, traffic type, campaign and content) and your entry-page path alongside your registration in MailerLite. If you accept Analytics, we also save the referring domain and use short-lived session storage to carry the source across pages. If you have not made a choice in Cookie settings, nothing is stored on your device; we only read the campaign labels in the web address of the page you sign up on. If you reject Analytics, we do not save campaign labels. If you choose to answer our optional “How did you hear about us?” question, we save your answer separately. Where source information is unavailable we record it as unknown; we do not reconstruct your past browsing. We use this only to understand which channels bring registrations (our legitimate interest in running our promotion sensibly), and we do not share it with advertising platforms. You can object at any time by rejecting Analytics or by contacting us.
• Messages: what you tell us when you contact us.
• Purchases: order details from Payhip, such as your name, email, what you bought and payment status. We never see or store your full card details.
• Technical information: security and server logs, including a spam-prevention check that runs when you submit one of our forms (see Cloudflare Turnstile below), and, only if you consent to marketing cookies, website and campaign activity collected through the Meta Pixel and TikTok Pixel. If you consent to marketing cookies and submit one of our forms, your email address and first name may be shared with Meta or TikTok in a hashed (scrambled) form, so they can measure which adverts led to a registration. They cannot read the original details from the hashed version. To make this measurement reliable, some of these events (a registration, or a click on a checkout button) are sent to Meta directly from our server as well as from your browser, using the same identifiers. This only happens if you have accepted marketing cookies.
• Business Lab applications and participation: see section 3.

3. The Business Lab

If you apply for or join the Business Lab, we also collect the following:

• Your application, submitted through Jotform: your name, email, country and time zone, business stage and context, availability, and your answers about the decision you want to work on. Please do not include customer records, staff details, passwords or confidential financial documents.
• Access arrangements, if you choose to tell us about an adjustment that would help you take part. We use this only to arrange support, and only with your explicit consent. You never need to share a diagnosis or medical details.
• Optional question calls, booked through Calendly: your name, email and booking time.
• Participation records: attendance, your Evidence Gate submissions, our written feedback, your decisions at each gate, and any requests you make for specialist referrals.
• Submissions you send by email or direct WhatsApp message.
• Live sessions on Zoom. We record facilitator-led teaching and demonstrations only. We pause recording for participant questions, peer discussion, clinics and personal feedback. We will ask for your separate, explicit permission before recording any individual contribution.
• The cohort WhatsApp group, if you join it. Other members of the group can see your phone number. You can ask us for another way to receive updates instead.

4. Why we use it

We use your information to deliver the resources, classes, products and programmes you ask for, including reviewing applications, running the Business Lab and giving feedback. We also use it to respond to your messages, keep the website secure, measure website performance and advertising (only with your consent), improve our programmes, and meet our legal and accounting obligations.

5. Our lawful bases

• Consent: optional email marketing, analytics and advertising cookies, and any access-arrangement information you share. You can withdraw consent or unsubscribe at any time.
• Contract: delivering a purchase or programme you have paid for, and steps you ask us to take before a contract, such as reviewing your Business Lab application.
• Legitimate interests: running and securing our website and business, answering enquiries, and improving our programmes.
• Legal obligation: keeping tax and accounting records.

6. Service providers

We use trusted providers who process information on our behalf, under their own privacy terms:

• MailerLite for email
• Netlify for website hosting
• Cloudflare Turnstile for spam and bot protection on our forms. When you submit a form, Cloudflare briefly checks your browser and connection details (such as your IP address) to confirm you are a real person. It does not use advertising cookies and is used only to keep our forms secure.
• Payhip for checkout and digital delivery
• Jotform for applications
• Calendly for call bookings
• Zoom for live sessions
• WhatsApp (Meta) for cohort messages
• Meta Platforms Ireland Limited for the Meta Pixel, where you consent
• TikTok Information Technologies UK Limited for the TikTok Pixel, where you consent
• our business email and technical providers

Business setup and implementation

When you enquire, we use your contact details, business stage, location and requested support to respond and take steps towards a possible service agreement. If you commission work, we also use the scope, approvals, payment status, necessary business records and delivery updates to perform and administer that agreement. Please do not send identity documents, passwords, candidate records or confidential financial files in an initial enquiry.

If specialist delivery is needed, we explain the intended provider and what information is required before arranging the handover. We share only what is necessary for the requested service, with appropriate contractual and security arrangements. Specialists may act as our processors or as separate controllers, depending on their role; their own privacy information is supplied where relevant. A service enquiry does not subscribe you to marketing or authorise us to share your details for partners' marketing.

Enquiry information is kept only as long as needed to handle and follow up your request. The engagement records any different retention requirements for commissioned work. Identity checks and staff or candidate records require a separately agreed secure collection route and retention schedule.

7. International transfers

Some providers, including specialists involved in Nigerian implementation, may need to access information outside the United Kingdom. We assess the destination, recipient and transfer before access is enabled and put the applicable safeguards in place where required, such as adequacy regulations or approved contractual protections. We can explain the arrangements relevant to your engagement on request. Agreement to receive a service is not treated as a blanket waiver of data protection requirements.

8. How long we keep information

9. Your rights

You can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or transfer it. You can also withdraw consent at any time. Contact davinia@buildfromabroad.com. If you are unhappy with how we handle your information, you can complain to the UK Information Commissioner's Office at ico.org.uk.

10. Children

We do not knowingly collect personal information from children under 16.

11. Changes

We may update this policy as our tools, providers or legal obligations change. The current version will always be on this page.