Privacy policy
What we collect, why, who processes it, and the rights you have. Short, because we collect very little.
Last updated 10 July 2026
This policy explains how Bright Learning ("we", "us") handles personal information when you read the site or subscribe to our newsletter. Bright Learning is a small, unincorporated publication produced by Sam Naji, who is the person responsible for the personal information described here. We are a reading publication, not an advertising business, so we collect as little as we can.
1. Information we collect
| What | Why we have it | Legal basis (GDPR) |
|---|---|---|
| Newsletter email address and signup date | To confirm your subscription and send you the newsletter | Consent |
| Messages you send us (contact form content, name/email if you provide them) | To read and reply to you, and to act on tips or corrections | Legitimate interests (responding to you) |
| Aggregate, cookieless usage stats (pages viewed, performance) | To understand what is read and keep the site fast | Legitimate interests (running the site) |
| Standard server logs (IP address, browser type, timestamps) held briefly by our host | Security, abuse prevention, and delivering the site | Legitimate interests (security) |
We do not ask you to create an account, and we do not knowingly collect special-category or sensitive personal information.
2. The newsletter
If you subscribe, we store your email address and signup date so we can send you the newsletter. The list is managed by Buttondown, our email provider, which processes it on our behalf under its own terms and privacy policy. We use double opt-in: we only add you after you click the confirmation link we email you. Every newsletter has a one-click unsubscribe link, and unsubscribing removes you from the list.
3. Analytics
We use privacy-friendly analytics (Vercel Analytics and Vercel Speed Insights) to see which pages are read and how quickly the site loads for you. They count visits and measure page performance without cookies and without building an advertising profile of you, and we do not use them to identify individual readers.
4. Who we share it with
We share personal information only with the service providers we need to run the publication, and only so they can perform that service for us: our email provider (Buttondown), our hosting and analytics provider (Vercel), and our database provider for storing contact-form messages. We may also disclose information if the law requires it, or to protect our rights and the safety of others. We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
5. How long we keep it
We keep your newsletter email address until you unsubscribe or ask us to delete it. We keep contact-form messages for as long as we need them to handle your enquiry and our records. Server logs are short-lived and held by our host. Aggregate analytics are not tied to you.
6. Your rights
Depending on where you live, you may have some or all of these rights over your personal information:
- to know what we hold and to get a copy of it;
- to correct information that is wrong;
- to delete your information;
- to object to or restrict how we use it, and to withdraw consent (for the newsletter, at any time);
- to receive your information in a portable form;
- not to be discriminated against for exercising these rights.
To exercise any of these, send us a message through our contact form. We will respond within the time the law allows. If you are in the EU or UK and think we have mishandled your data, you also have the right to complain to your local data protection authority.
7. California residents
We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act, and we have not done so in the past 12 months. California residents have the rights described above, including the right to know, delete, and correct, and the right not to receive discriminatory treatment for exercising them. Use the same contact routes above to make a request.
8. Children
The site is intended for adults and education professionals. It is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us their information, contact us and we will delete it.
9. International transfers
We and our providers may process your information in the United States and other countries. Where information is transferred across borders, we rely on our providers' safeguards and appropriate legal mechanisms for those transfers.
10. Security
We take reasonable measures to protect personal information, and we work with established providers who do the same. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
11. Changes
If we change how we handle data, we update this page and the date at the top. Please check back from time to time.
12. Contact
Questions about your privacy, or want to make a request? Send us a message through our contact form.