privacy policy

Effective Date: 22/01/2025

Last Updated: 22/01/2025

At Brandfulness ("we," "our," or "us"), we value your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and applicable United States privacy laws, including the California Consumer Privacy Act (CCPA).

1. Information We Collect

1.1 Information You Provide Directly

We collect personal information when you:

  • Subscribe to our mailing list:

    • Email address (processed via Squarespace, our current newsletter provider)

  • Purchase a product or service, or sign up for a membership:

    • Name

    • Email address

    • Payment information (processed via Stripe; we do not store payment details ourselves)

    • Social media handles (optional)

    • Website URL (optional)

    • Business information (optional; you may choose to enter "N/A" if preferred)

1.2 Automatically Collected Information

When you interact with our website, we may automatically collect certain information to better understand your interaction with our site. This includes:

  • IP address

  • Browser type and version

  • Operating system

  • Time and date of access

  • Referring website address

  • Usage data and interactions with the site, collected through Google Analytics (integrated via Squarespace). For more information about Google Analytics, please see Google’s Privacy Policy.

1.3 Third-Party Payment Processing

We use Stripe to process payments. Stripe may collect and store payment information. For more details, please review Stripe's privacy policy: Stripe Privacy Policy.

2. How We Use Your Information

We use your information for the following purposes:

  • Providing Services: To fulfil your requests for products or services and process payments.

  • Communication: To send newsletters, updates, and marketing emails (with your consent).

  • Customer Support: To respond to inquiries and provide customer service.

  • Improvement: To analyze website usage and improve our offerings.

  • Legal Compliance: To comply with applicable laws, regulations, or legal obligations.

3. Legal Basis for Processing (UK/EU GDPR)

We process your personal data based on the following legal grounds:

  • Consent: When you subscribe to our mailing list or agree to receive marketing communications.

  • Contractual Necessity: To fulfill a contract with you, such as processing a product purchase.

  • Legitimate Interests: To analyse and improve our services, ensuring our business runs smoothly.

  • Legal Obligation: To comply with laws or regulations.

4. Sharing Your Information

We do not sell or rent your personal information to third parties. We may share your data:

  • With Service Providers: Such as Stripe for payment processing, Squarespace for email communications, and Google Analytics for website analysis.

  • For Legal Reasons: If required by law or to protect our rights, users, or others.

5. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy or as required by law. You may request deletion of your data at any time (see Section 8).

6. Your Rights

6.1 UK/EU Residents

Under the UK and EU GDPR, you have the following rights:

  • Access: Request a copy of your data.

  • Correction: Request corrections to inaccurate data.

  • Erasure: Request deletion of your data.

  • Restriction: Request limited processing of your data.

  • Data Portability: Receive your data in a structured, machine-readable format.

  • Objection: Object to data processing based on legitimate interests.

  • Withdraw Consent: Withdraw consent at any time.

6.2 US Residents

If you are a California resident, you have rights under the CCPA, including:

  • Access: Request to know what personal data we collect.

  • Deletion: Request deletion of your personal data.

  • Opt-Out: Opt-out of the sale of personal data (we do not sell personal data).

To exercise your rights, please contact us at hello@brandfulness.co.uk.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Your Choices

  • Email Communications: You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in our emails or contacting us directly. For our specific newsletter Privacy Notice for “The Brand Within”, click here.

  • Data Requests: You can request access to, correction of, or deletion of your data by emailing hello@brandfulness.co.uk.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review the privacy policies of these websites.

10. International Data Transfers

If you are located outside the United Kingdom, your data may be transferred to and processed in the United Kingdom or other countries. By providing your information, you consent to such transfers.

11. Changes to This Privacy Policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice on our website or contacting you directly.

12. Contact Us

If you have questions or concerns about this privacy policy or our data practices, please contact us at:

Brandfulness
Email: hello@brandfulness.co.uk