Draft for review.

Privacy policy

Last updated: [date]

This policy explains how Bright Future Insolvency Limited collects and uses your personal information when you visit this website, get in touch, or work with us. We keep it as plain as we can. If anything is unclear, just ask.

Who we are

Bright Future Insolvency Limited (company number 750246) is the data controller for the personal information described here. JP Donelon is a Personal Insolvency Practitioner authorised by the Insolvency Service of Ireland (PG00307).

Address: Stables Lane, Tuam, Co. Galway, H54 T026
Email: [email protected]
Phone: 086 859 9134

What we collect

When you request a callback or book a call: your name, mobile number, email address if you give it, your answers to the short questions on the form, and your preferred time to call.
When we talk and if you become a client: information about your financial circumstances, debts, mortgage, income and household, and any other details you choose to share with us. Sometimes this can include information about your health or family situation, where it's relevant to your case.
When you use this website: with your consent, information about how you found and used the site, such as the pages you visited, the ad you clicked and the type of device you used. See "Cookies and advertising" below.

How and why we use it

What we do	Our legal basis
Respond to your enquiry and arrange a call	Your consent, given when you submit the form, and taking steps at your request before any engagement
Assess your situation and provide personal insolvency services	Performing our engagement with you, and complying with our legal obligations as a Personal Insolvency Practitioner
Keep records required by law and by our regulator	Legal obligation
Any health or other sensitive information you share	Your explicit consent, or where needed to establish or defend legal claims
Measure our website and advertising	Your consent, through the cookie banner
Keep our systems secure and improve our service	Our legitimate interests, balanced against your rights

We will never sell your information.

Who we share it with

We only share what's needed, with:

Service providers who help us run the practice: our website and contact management platform (HighLevel), our booking tool (Calendly), email and document storage providers, and our marketing agency, who helps run our advertising. They act on our instructions and must keep your information secure.
Google and Meta (Facebook and Instagram), for advertising measurement, as explained below.
If you become a client: your creditors, the Insolvency Service of Ireland, the courts and others involved in your case, as the process requires and as we agree with you.
Regulators, professional advisers and authorities where we are legally required to.

Cookies and advertising

With your consent, we use cookies and similar technologies on this website to understand how visitors use it and to measure how well our advertising on Google and Meta (Facebook and Instagram) works. These include Google Analytics, Google Ads and the Meta Pixel.

When you send us an enquiry after clicking one of our ads, we may share limited information with Google and Meta, such as the ad click reference and a scrambled (hashed) version of your email address or phone number. This lets them tell us which ads led to enquiries. They cannot read your details from the hashed version, and we never share the content of your enquiry.

You can accept or reject non-essential cookies using the banner when you first visit, and change your choice at any time using the cookie settings button on each page. Our legal basis for this processing is your consent.

Transfers outside the EEA

Some of our service providers, including HighLevel, Google, Meta and Calendly, may process information in the United States. Where that happens, transfers are protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

Enquiries that don't go further: [12 months] from our last contact, then deleted.
Client files: for as long as our legal and regulatory obligations require, which is [6 years] after your case closes.
Website and advertising data: up to 14 months in Google Analytics, and in line with Google's and Meta's own retention periods.

Your rights

You have the right to:

ask for a copy of the information we hold about you
ask us to correct anything that's wrong
ask us to delete your information, unless we need to keep it by law
object to, or ask us to restrict, how we use it
ask us to move it to another provider
withdraw your consent at any time, without affecting anything we did before

To use any of these rights, email [email protected]. We'll reply within one month.

If you're unhappy with how we've handled your information, you can complain to the Data Protection Commission at dataprotection.ie. We'd appreciate the chance to sort it out with you first.

Keeping it safe

We use secure, access-controlled systems and only the people who need your information can see it.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.