Your information

Privacy Policy

This policy explains what personal information BIG Scotland collects, why we use it, how long we keep it and the choices you have.

Last updated: 12 October 2026

Who we are

BIG Scotland is a trading name of Brightmind Group Ltd, a company registered in England and Wales. Brightmind Group Limited is the data controller responsible for the personal information described in this Privacy Policy.

Registered Office: 20-22 Wenlock Road, London, N1 7GU
Registered in England and Wales · Company No. 17481250
VAT registration no. 530 9131 18
Email: hello@bigscotland.co.uk

What information we collect

We collect information you choose to give us when you contact BIG Scotland through our website, by email, telephone or another direct communication. This may include:

  • your name and contact details;
  • your business or organisation name;
  • your website address;
  • information you provide about your business, circumstances or enquiry;
  • meeting notes and subsequent correspondence; and
  • information needed to administer a client relationship if we agree to work together.

When you submit an enquiry through our website form, the details you enter are received and processed on our behalf by Formspark so that the enquiry can be delivered to us.

Our website and service providers may also process limited technical information necessary to deliver, secure and operate the website.

Confidentiality and commercially sensitive information

This Privacy Policy primarily explains how we handle personal information under UK data-protection law. During an enquiry or client relationship, you may also share confidential commercial information that is not personal data, such as financial figures, margins, pricing, supplier arrangements, business plans, internal processes or other commercially sensitive information.

Before we discuss or ask you to share any confidential or commercially sensitive information, we provide our NDA for both parties to sign.

Once the NDA is in place, information covered by it is handled in accordance with its terms. We do not share confidential client information with another client or competitor. We do not identify a business as a BIG Scotland client, publish its results or use its information in a case study without explicit permission, except where disclosure is required by law or otherwise permitted under the NDA.

Data protection and commercial confidentiality are related but different. This Privacy Policy explains how we handle personal information. Our NDA and, where applicable, our engagement terms govern confidential commercial information shared with us.

How we use your information

We may use personal information to:

  • respond to an enquiry you send us;
  • understand your business and what you would like to achieve;
  • decide whether BIG Scotland may be able to help;
  • arrange and conduct conversations, meetings and reviews;
  • prepare proposals and provide agreed services;
  • administer client relationships, invoices and business records;
  • protect our website, systems and business; and
  • meet legal, regulatory, tax and accounting obligations.

We do not sell your personal information. We do not provide your details to another organisation for that organisation’s own marketing.

Our lawful bases for processing

The lawful basis depends on why we are using the information. The bases most likely to apply to BIG Scotland are:

  • Legitimate interests — for example, responding to a business enquiry, administering our relationship with you and operating our business in ways you would reasonably expect.
  • Contract — where processing is necessary to take steps at your request before entering into a contract or to provide services we have agreed with you.
  • Legal obligation — where we must process or retain information to comply with law, tax, accounting or regulatory requirements.
  • Consent — where the law requires us to obtain your consent for a particular activity. Where we rely on consent, you can withdraw it.

Who we share information with

We may use reputable service providers to support website hosting, email, form processing, IT, accounting and other business administration. They may process personal information only to the extent reasonably necessary to provide those services to us.

Our contact form is configured to use Formspark. You can read its privacy information at the provider’s privacy page.

We may also disclose information where required by law, to professional advisers where reasonably necessary, or in connection with a sale, restructuring or transfer of all or part of our business.

International transfers

Some technology and service providers may process information outside the United Kingdom. Where personal information is transferred internationally, we take reasonable steps to ensure an appropriate legal transfer mechanism and safeguards are in place where required.

How long we keep your information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for any applicable legal, accounting or regulatory requirements.

Enquiries that do not lead to an active client relationship would normally be retained for up to two years. If you become a client, relevant records may need to be retained for longer to meet contractual, tax, accounting and legal requirements.

Cookies, analytics and similar technologies

Strictly necessary

Our website uses cookies and similar technologies that are strictly necessary to operate, secure and deliver the site. These do not require your consent. Our website platform, Framer, also provides us with aggregated visitor statistics.

Advertising measurement (only with your consent)

We advertise on ChatGPT and Google. With your permission, we use measurement technologies from OpenAI and Google to understand whether those adverts lead to enquiries. They only run if you choose “Accept ad measurement” in our cookie banner. We rely on your consent for these technologies.

OpenAI (ChatGPT adverts): sets first-party cookies called __oppref, an ad click reference kept for up to 30 days, and __obref, a browser reference kept for up to 365 days. OpenAI receives measurement information, such as an ad click reference and the fact that an enquiry was made. If OpenAI advanced matching is enabled, this can also include hashed contact details.

Google (Google Ads): sets first-party cookies such as _gcl_au and _gcl_aw, kept for up to 90 days, to connect an enquiry with an earlier ad click. We do not allow Google to use this information for personalised advertising.

Both providers may process information outside the UK under their own safeguards for international transfers. For how they handle data, see the OpenAI Privacy Policy and the Google Privacy Policy.

Your choices

You can use our website and contact us without accepting. Your choice is saved in your browser for 180 days, and you can change it at any time using Cookie settings in the website footer. Rejecting stops future measurement and removes these cookies from our website. It does not automatically erase information already sent; to ask about that, email hello@bigscotland.co.uk.

Your data-protection rights

Depending on the circumstances, UK data-protection law may give you rights to:

  • ask for access to personal information we hold about you;
  • ask us to correct inaccurate or incomplete information;
  • ask us to erase personal information;
  • ask us to restrict how information is processed;
  • object to particular processing;
  • receive certain information in a portable format where applicable; and
  • withdraw consent where processing is based on consent.

These rights are not absolute in every situation. To make a request, email hello@bigscotland.co.uk.

Security

We take reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure. No method of transmitting or storing information can be guaranteed to be completely secure.

Complaints

If you have concerns about how we use your personal information, please contact us first so we can try to resolve them.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection: ico.org.uk.

Changes to this policy

We may update this Privacy Policy where our website, services, providers or legal obligations change. The latest version will be published on this page and the date at the top will be updated.

Contact us

BIG Scotland
A trading name of Brightmind Group Ltd
20-22 Wenlock Road, London, N1 7GU
Registered in England and Wales · Company No. 17481250
hello@bigscotland.co.uk

Boldness Inspires Greatness
Based in Scotland. Open to possibility.