Who BrightSite is
BrightSite is Michael McMahon's consultancy for websites and digital marketing. The public website is brightsite.digital. BrightSite is registered and tax resident in Tbilisi, Georgia, and works with clients in different countries.
BrightSite also runs BrightSite CMS, a sign-in application at cms.brightsite.digital.
This policy explains how personal information is handled on the website and in BrightSite CMS. Personal information means information that identifies you, or that could reasonably be used to identify you.
What this policy covers
It covers personal information collected through:
- brightsite.digital, including the contact form, booking links, and the client intake form
- BrightSite CMS at cms.brightsite.digital
It does not cover a website BrightSite builds or hosts for a client. That site is run by the client, under the client's own policy. A live preview of a client site on the work page is described under The website.
You can read the website without giving your name. The contact form needs your name and email so Michael can reply. BrightSite CMS needs an account.
The website and BrightSite CMS are for businesses and the people who work with them. BrightSite does not knowingly collect personal information from children.
The website
Browsing
The site is hosted by a hosting and content-delivery provider. When your browser loads a page, and the files needed to display it, that provider receives the connection details for the request: your IP address, the page address, the time, and the browser's user-agent string.
The site code does not include analytics or advertising tags. It does not set its own cookies, and it does not show a cookie banner.
Photographs and other images are loaded from the content management system. Your browser requests those files from that system. The words on the page are built into the site before it is published, so reading a page does not send a content query to the content management system.
On a larger screen, the work page loads the live website of each featured project inside the page. That site belongs to the client. It can receive your IP address and may use its own cookies and analytics, which BrightSite does not control. On a smaller screen the page shows a screenshot, and a link that opens the live site.
A link that leaves brightsite.digital, such as a link in the footer or a link to a client's site, is covered by that other site's privacy policy.
Contact form
The form at /contact is how a new enquiry is sent. It asks for:
- your name
- email address
- phone number, if you provide one
- how you prefer to be contacted: email, phone, or either
- business name
- location, if you provide one
- your current website, if you provide one
- a message about the project
- how you heard about BrightSite, if you choose to say
- any service, retainer, billing period, or strategy-review option you selected
The form does not ask for sensitive information, such as health details, government identity numbers, or identity documents. If you type that into the message, it will be in the email BrightSite receives.
A submission is sent to BrightSite by an email delivery service. The website does not save the submission in its own database. BrightSite uses it to reply, to prepare a quote, and to do the work you asked about. Sending the form does not add you to a mailing list.
Booking a call
The Get Sorted and Digital Strategy Review pages link to an external scheduling service, where you book a time. You leave brightsite.digital to do that. The scheduling service collects what its booking form asks for and shares the booking with BrightSite. What you enter there is also covered by that service's privacy policy.
Site redevelopment intake
A client starting a website rebuild can use the intake form at /clients/site-redevelopment-intake. The form is provided by a form service. It asks about design direction, scope, and priorities. You can skip a question and cover it on a call.
The form can receive details that are already in the page address, when the link contains them. The form service processes the submission, and BrightSite receives the responses. That page is not listed for search engines.
BrightSite CMS
BrightSite CMS at cms.brightsite.digital is separate from the public website. You can sign in with email, or with a third-party account such as Google or GitHub.
Whichever way you sign in, the CMS stores your name, email address, and profile image.
If you sign in with Google, the app asks Google only for openid (the sign-in identifier), email, and profile. Those are used to sign you in and to show your name and profile image. They do not include Gmail, Google Drive, contacts, or calendar. BrightSite does not use that account information for advertising, and does not sell it.
The CMS keeps that information with these kinds of providers:
- Account data is stored in a cloud database.
- Media files are stored in cloud file storage.
- Transactional email about the CMS is sent through an email delivery service.
Those services use servers in Australia and in other countries.
Why it is collected
BrightSite collects personal information only for these purposes:
- to answer an enquiry, prepare a quote, and do the work you asked for
- to book a call and follow it up
- to create your BrightSite CMS account and sign you in
- to send a transactional message you triggered, such as a CMS account email
- to keep the website and the CMS secure and working
- to meet a legal duty, where one applies
BrightSite does not sell personal information.
How long it is kept
Enquiry information is kept for as long as it is needed to reply, do the work, and keep ordinary business records, and is then deleted. BrightSite CMS account details are kept while the account exists. The website code does not set a retention period for connection logs held by the hosting provider.
Your rights
You can ask BrightSite to:
- give you access to the personal information it holds about you
- correct that information
- delete it, where BrightSite no longer needs it for the work or for a legal duty
- stop a use of it that is not needed to answer you or to provide what you asked for
Email [email protected] and include enough detail to find the record. BrightSite will respond in a reasonable time.
You can also complain to the data protection authority where you live. People in the European Union and the United Kingdom have rights under the GDPR. People in Australia have rights under Australian privacy law. People in Georgia have rights under Georgian law. Those local rights sit alongside this policy.
Security
brightsite.digital is served over HTTPS. Access to enquiry email and to BrightSite CMS records is limited to Michael. No method of sending or storing information is perfectly secure.
Changes
Updates are posted on this page, and the date at the top is changed. This version is dated 14 November 2026.
Contact
Privacy questions, and requests about your information:
[email protected]
Michael McMahon
BrightSite
Tbilisi, Georgia