Brightlix is an advisory brand operated by Yemen Jaafar. It provides advisory services to food manufacturers and other organizations in Canada and internationally. The website is primarily intended for business and commercial use.
Brightlix respects your privacy and is committed to handling personal information responsibly and transparently. This Privacy Policy explains how Yemen Jaafar, operating under the Brightlix brand (“Brightlix,” “we,” “us,” or “our”), collects, uses, discloses, protects, and retains personal information when you visit brightlix.com, communicate with us, or interact with us in connection with our advisory services.
1. Information we collect
We collect only the information reasonably necessary for the purposes described in this Privacy Policy.
Information you provide to us
When you submit our contact form or communicate with Brightlix, we may collect:
- your name;
- the name of your business or organization;
- your business email address;
- your telephone number, if you choose to provide it;
- the information contained in your message or request; and
- any other information you voluntarily provide.
Please limit the information you submit to what is necessary to process your request. Avoid sending sensitive personal information or confidential business information through the contact form. If such information is necessary, please contact us first to agree on an appropriate method of transmission.
Technical Information Required for Website Operation
When you visit the website, Brightlix and its technology providers may process certain technical information required for website operation and security, including your Internet Protocol (IP) address, information about your browser and device, and access and error logs.
Analytics Information Collected With Your Consent
Brightlix uses Google Analytics 4 (GA4) to understand how visitors use the website and to improve its content, performance, and user experience. GA4 is activated after you consent to analytics cookies.
The information processed for this purpose may include:
- pages viewed and browsing paths;
- visit dates and times, as well as duration and engagement metrics;
- the referring website or traffic source;
- interactions with website content;
- general information about the browser, device type, and operating system;
- approximate geographic location, such as country or region; and
- browser and session identifiers associated with analytics cookies.
Features that would collect precise device or geographic data are disabled in the settings of our GA4 property.
Google may temporarily use the IP address to maintain service security, optimize routing, and establish approximate geographic location. Google states that raw IP addresses are not retained in Google Analytics or associated with a user identifier in Analytics reports.
Brightlix does not intentionally send names, email addresses, telephone numbers, contact-form content, or other information that directly identifies an individual to Google Analytics.
You may refuse analytics cookies or withdraw your consent through the cookie-management tool available on the website. Section 5 describes these choices, and Section 8 explains the applicable retention periods.
2. How we use information
Brightlix may use personal information to:
- respond to requests and questions;
- communicate regarding potential or existing business engagements;
- assess whether Brightlix’s services may be relevant to an organization;
- provide and manage advisory services;
- maintain appropriate business and client records;
- understand website use and improve its content and performance, only through analytics technologies activated in accordance with consent choices;
- protect the website and our systems against misuse or security incidents;
- comply with legal, regulatory, tax, or accounting requirements; and
- establish, exercise, or defend our legal rights where necessary.
We will not use personal information for materially different purposes without providing appropriate notice and obtaining consent where required by law.
3. Consent
Where consent is required, Brightlix seeks consent appropriate to the nature, purpose, and sensitivity of the information concerned.
By submitting the contact form, you request that Brightlix use the information provided to respond to and follow up on your request. This processing is separate from consent to analytics cookies.
When you withdraw your consent to analytics cookies, Google Analytics 4 is no longer loaded and no new analytics collection takes place. Withdrawal of consent does not automatically erase information collected before the withdrawal.
Optional analytics technologies will be used only in accordance with the consent choices available on the website where consent is required.
You may withdraw your consent where processing is based on consent. Withdrawal does not affect uses carried out before withdrawal and may be limited where retention is required by law or contract.
4. Marketing communications
Submitting a request through the Brightlix website does not automatically subscribe you to a marketing mailing list.
Brightlix does not send commercial electronic messages without the required consent or without relying on an exception permitted by law.
If Brightlix launches newsletters or other promotional electronic communications, each communication will identify the sender and include an unsubscribe mechanism.
Brightlix will act on valid unsubscribe requests.
5. Cookies and similar technologies
Brightlix may use cookies and similar technologies to support the operation, security, and functionality of the website, as well as to perform analytics and measure website performance.
Essential technologies
Essential technologies may be used where necessary to provide website functionality, security and technical operation.
Analytics and traffic-measurement technologies
With your consent where required, Brightlix uses Google Analytics 4 to measure and understand website use.
Google Analytics may collect information such as:
- pages visited;
- navigation and session activity;
- device and browser characteristics;
- approximate geographic location;
- traffic source; and
- interactions with website content.
Brightlix uses this information to understand website performance, identify possible improvements, and assess the effectiveness of its content.
Google Analytics 4 is used only to measure website traffic and improve the website. Analytics data is not currently used for behavioural advertising, remarketing, or ad personalization.
Visitors may accept or refuse optional analytics technologies through the cookie-management options provided on the website. They may also modify their preferences when this functionality is available.
After consent to analytics cookies, Google Analytics 4 may set cookies including:
_ga: used to distinguish users;_ga_ZKG3E4QQTV, or an equivalent name linked to the measurement ID: used to maintain session state.
According to the current Usercentrics settings, these cookies may have a maximum duration of 731 days. This period concerns browser cookie duration and does not correspond to the retention period for data in Google Analytics.
Preferences may be changed at any time through the privacy icon displayed on the website.
6. Service providers and disclosure of information
Messages submitted through the contact form are sent to the business email address used by Brightlix and may be stored and processed by Google, including in Gmail or Google Workspace, for receiving, managing, and retaining business communications.
Brightlix does not sell personal information.
We may provide limited information to service providers that support our activities, including providers of:
- website hosting and web-form services;
- website analytics and performance measurement;
- email and business communications;
- data storage and security; and
- professional, legal, accounting or technical services.
We use Webflow for website hosting, website functionality, and form processing; Google Analytics 4 for traffic analytics; Google and Gmail for receiving and managing communications; and Usercentrics for cookie-consent management.
Brightlix remains responsible for personal information entrusted to its service providers and takes reasonable measures to oversee their processing.
Service providers are required to process information only to the extent necessary to provide their services, subject to applicable contractual and legal requirements.
Information may also be disclosed where required or permitted by law, including to comply with legal requests, protect rights or safety, investigate suspected misconduct, or complete a legitimate business transaction subject to appropriate safeguards.
7. Processing outside Canada
Some of Brightlix’s technology and service providers may process or store information outside Canada, including in the United States, Ireland, or other countries where those providers operate their infrastructure. Processing locations may vary depending on the service used and its configuration.
Information processed in another jurisdiction may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement agencies, or other government authorities in accordance with applicable law.
Brightlix takes reasonable measures to select appropriate service providers and protect personal information under its control.
8. Retention
Brightlix retains personal information only for as long as necessary to fulfil the purposes for which it was collected or to meet legitimate legal, regulatory, accounting, or business requirements.
Information relating to requests that do not result in an ongoing business relationship will generally be retained for up to 24 months after the last significant interaction, unless a longer period is reasonably necessary.
This period also applies to messages and information retained in Brightlix’s business inbox, subject to legal, tax, contractual, or rights-defence obligations.
Client and contractual records may be retained for longer periods where required for legal, tax, contractual, or professional record-keeping purposes.
User data and event data retained in Google Analytics 4 are currently configured for a retention period of 14 months. This period does not necessarily apply to aggregated Google Analytics reports or to the duration of cookies stored in the browser.
When information is no longer required, Brightlix takes reasonable measures to delete, destroy, or anonymize it.
9. Security
Brightlix uses reasonable administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of the personal information under its control.
However, the absolute security of Internet transmissions, electronic communications, and data-storage systems cannot be guaranteed.
Brightlix maintains procedures to respond to privacy and security incidents and carries out notifications or reports required by applicable law.
In the event of a security breach involving personal information, Brightlix will assess the risk of significant harm, take appropriate corrective measures, and provide any notices or reports required by applicable law. Incidents will be documented in accordance with applicable requirements.
10. Automated decision-making
Brightlix does not use personal information collected through this website to make decisions producing legal or similarly significant effects based exclusively on automated processing.
11. Your privacy rights
Subject to applicable laws, you may request:
- details about the personal information Brightlix holds about you;
- access to that information;
- correction of inaccurate or incomplete information;
- withdrawal of consent where processing is based on consent; and
- information about Brightlix’s privacy practices.
You may also raise a concern or file a complaint regarding the handling of your personal information.
To submit a request, please use the Contact page and clearly describe its nature. Brightlix may request reasonable information to verify your identity before responding to certain requests.
Brightlix will process requests within the time limits required by applicable laws. If your concern is not resolved, you may also contact the Office of the Privacy Commissioner of Canada or, where applicable, the relevant provincial authority.
12. Privacy Contact
Yemen Jaafar is responsible for overseeing Brightlix’s privacy practices and responding to requests relating to personal information.
Privacy Contact: Brightlix
Privacy questions, access or correction requests, consent withdrawals, and complaints may be submitted through the Brightlix Contact page.
To facilitate processing, please write “Privacy Request” in your message.
13. Changes to this Privacy Policy
Brightlix may update this Privacy Policy to reflect changes to its practices, services, technologies, or legal obligations.
Any updated version will be posted on this page, and the last-updated date will be revised accordingly. If a change requires your consent, we will obtain it before implementing the relevant processing.