Privacy Policy

1. Who we are

Brands & Comms Ltd is the data controller for the personal data described in this policy. You can reach our data protection contact at info@brandandcomms.com, or by post at either studio address listed on our contact page.

2. What we collect

We collect only what we need to respond to you and to run the site.

• Enquiry details you submit: name, company, work email, service interest, budget range and the message itself.
• Newsletter subscriptions: your email address and subscription status.
• Aggregate analytics: pages viewed, referrer, approximate region, device class and performance timings, collected without cookies that identify you individually.
• Server logs: IP address and user agent, retained for security and abuse prevention.

3. Why we process it

Enquiry data is processed to respond to your request and, if we go on to work together, to perform the contract between us. Newsletter data is processed on the basis of your consent, which you can withdraw at any time from the link in every email.

Analytics and server logs are processed on the basis of our legitimate interest in keeping the site secure, fast and useful. We do not build advertising profiles and we do not sell data.

4. Cookies and similar technologies

This site sets no advertising or cross-site tracking cookies. Strictly necessary cookies may be used to remember interface preferences and to protect forms from automated abuse. Where we later introduce any non-essential cookie, we will ask for your consent first and it will be off by default.

5. Who we share it with

We share personal data only with processors that help us operate: our hosting provider, our email delivery provider and our customer relationship system. Each is bound by a data processing agreement and may only act on our instructions.

Some processors operate outside the UK and EEA. Where that happens, transfers are covered by the UK International Data Transfer Addendum or Standard Contractual Clauses.

6. How long we keep it

Enquiries that do not become engagements are deleted after 24 months. Client records are retained for seven years after the end of the engagement to meet accounting obligations. Newsletter data is kept until you unsubscribe. Server logs are kept for 30 days.

7. Your rights

You have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to processing, and to receive it in a portable format. To exercise any of these, email us and we will respond within one month.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office in the UK, or to your local supervisory authority in the EEA.

8. Changes to this policy

We update this policy when our practices change. The date at the top reflects the most recent revision, and material changes will be announced to newsletter subscribers before they take effect.