Privacy Policy
Data Controller: Onebright Limited, First Floor West Wing, Holgate Park Drive, York, United Kingdom, YO26 4GN
This privacy notice explains what personal data Onebright Limited collects and processes from this website and other subdomains owned and run by the Onebright Group. This includes websites for Onebright Group Limited (company number 11791999), Onebright Limited (company number 09507950), Onebright Efficacy Limited (company number 06245547), Moving Minds Psychological Management and Rehabilitation Limited (company number 4353657), Onebright Systems & Training Limited (company number 7037705), Expert Psychological Reports Limited (company number 8073738) and Onebright Psychiatric Services Limited (company number 14014785); all with registered offices at First Floor, West Wing, Holgate Park Drive, York, United Kingdom, YO26 4GN. References to the “organisation” in this privacy notice means one or more of the Onebright Group. It also describes how we use that data and explains your rights concerning your personal data and how to contact us or a relevant regulator if you have a complaint about how we process and use the personal data we collect about you.
Where we collect, use and are responsible for certain personal data about you, we are subject to the UK General Data Protection Regulation (“UK GDPR”) and as supplemented by the Data Protection Act 2025. We are also subject to the EU General Data Protection Regulation (“EU GDPR”) in relation to Services we offer to individuals in the European Economic Area (“EEA”). We may also be subject to other data protection laws where we offer Services to individuals based outside of the UK and the EEA or if we provide Services from outside of the UK or the EEA.
This privacy notice is divided into the following sections:
- Information we collect about you
- How and why we use your personal information
- Who we share your personal information with
- Data security and protection
- Retention of your personal information
- Your privacy rights
- How to contact us
- How to complain
- Changes to this privacy notice
Information we collect
When you submit an online form we collect your name and email address.
How and why we use your personal information
We collect your contact information to be able to respond to your queries raised via our online form.
Who we share your personal information with
- Information may be shared across the Onebright Group as detailed in data controller section.
- Other parties in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency—usually, information will be anonymised but this may not always be possible, however, the recipient of the information will be bound by confidentiality obligations.
If Onebright does share your personal information, we will make sure suitable protection is in place to protect your personal information in line with applicable law.
Where we use third parties to process your personal information, we will ensure that third parties do so in accordance with GDPR, including by way of data processing agreements and appropriate technical and organisational security measures.
Data security and protection
The organisation takes the security of your data seriously. We have internal policies and controls in place to ensure that your data is not lost, accidentally destroyed, misused or disclosed, and is not accessed except by our employees in the proper performance of their duties.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
Retention of your personal information
Onebright operates a retention schedule that details how the data we hold is retained for our different processing purposes. Personal data will be retained in the website form for 30 days. If you have any questions about how long we keep your data, please contact us using the details below.
Your privacy rights
If you are in the EEA or the United Kingdom you have certain privacy rights and protections under the EU GDPR or the UK GDPR. These are the following:
- Rectify inaccurate or outdated information
- Request to move your data (data portability)
- Object to data processing
- Withdraw your data consent at any time
- Be forgotten
- Ask for a copy of your data via a Subject Access Request (SAR)
- Lodge a complaint with the UK’s Information Commissioner’s Office (ICO) or other relevant supervisory authority
If you think that there are any inaccuracies in your data then let us know and we will amend your records. We also provide reasonable access to our visitors for reviewing the data that you have provided to this website. In this instance please contact marketing@onebright.com with your request.
How to contact us
You can contact our Data Protection Officer by post, email or telephone if you have any questions about this Privacy Notice or the information we hold about you, to exercise a right under data protection law or to make a complaint.
Our Data Protection Officer’s contact details are shown below:
- email: DPO@onebright.com
- telephone: 01904 620781
- address: Onebright Limited, First Floor West Wing, Holgate Park Drive, York, United Kingdom, YO26 4GN attention: Data Protection Officer
How to complain
Please contact us if you have any queries or concerns about our use of your personal information (see above ‘How to contact us’). We hope we will be able to resolve any issues you may have.
You also have the right to lodge a complaint with:
- the Information Commissioner in the UK, OR
- a relevant data protection supervisory authority in the EEA state of your habitual residence, place of work or of an alleged infringement of data protection laws in the EEA
- The UK’s Information Commissioner may be contacted at https://ico.org.uk/make-a-complaint or by telephone: 0303 123 1113.
Changes to this Privacy Notice
We reserve the right to update this privacy notice at any time.