At Braw Branding we understand that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of all of our data subjects and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.
For purposes of this notice “Site” refers to the website www.brawbranding.com
“Service” refers to the services accessed via the Site.
The terms “we,” “us,” and “our” refer to Braw Branding.
“You” refers to you, as a user of our Site or our Service.
By accessing our Site or our Service, you accept our Privacy Policy and Terms of Use and you consent to our collection, storage, use and disclosure of your Personal Information as described in this Privacy Policy.
1. About
Beata Szewczyk
email: hello@brawbranding.com
2. What Does This Notice Cover?
This Privacy Notice explains how we use your personal data: how it is collected, how it is held, and how it is processed. It also explains your rights under the law relating to your personal data.
3. What is Personal Data?
Personal data is defined by the UK General Data Protection Regulation (UK GDPR) as:
“any information relating to an identifiable natural person (‘data subject’) who can be identified, directly or indirectly, in particular by reference to an identifier.”
Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.
The personal data that we use is set out below.
4. What Personal Data Do You Collect and What Are Legal Basis for Collection and Processing of Data ?
We may collect some or all of the following personal data (this may vary according to your relationship with us);
Communication Data includes any communications you send to us via our website contact form, email, text, social media, or other channels. We process this data to communicate with you, maintain records, and establish, pursue, or defend legal claims. Our lawful basis for processing is our legitimate interests in responding to inquiries, maintaining records, and protecting our legal rights.
Customer Data includes information you provide in relation to our services, such as your name, title, contact details, business information, billing address, service details, and payment information. We process this data to deliver our services, issue invoices, and maintain client records. Our lawful basis for processing is the performance of a contract between you and us or steps taken at your request to enter into such a contract.
Professional Data includes information such as your job title, profession, business name, industry, qualifications, biography, or any other professional background details you provide to us in the course of working together. We process this data to understand your business or personal brand, tailor our services to your needs, and create relevant project content such as website, profiles, or marketing materials. Our lawful basis for this processing is the performance of a contract between you and us, or our legitimate interests in providing personalised, effective services that meet your professional goals.
User Data includes information about how you use our website and any data you submit for publication on it. We process this data to operate and maintain our website, ensure its security, provide relevant content, and manage backups. Our lawful basis for this processing is our legitimate interests in administering and improving our website and business.
Technical Data includes information such as your IP address, browser type, time zone settings, pages visited, length of visits, and other details about your device and interaction with our website. This data is collected through analytics tools to help us understand how visitors use our site. We process this data to maintain and improve our website, ensure its security, and inform our business decisions. Our lawful basis for this processing is our legitimate interests in administering and enhancing our website and business.
Marketing Data includes information about your preferences in receiving marketing communications from us and your communication preferences. We process this data to send you relevant updates about our services and to manage your marketing preferences. Our lawful basis for this processing is either your consent (where required) or our legitimate interests in promoting and growing our business.
Sensitive Data includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health, and genetic or biometric data. We will only collect sensitive data where it is strictly necessary for the project, for example, if understanding your gender or age is required to tailor website content or social media creatives to your target audience. Our lawful basis for this processing is your explicit consent, which you may withdraw at any time. We will always handle sensitive data with the highest level of confidentiality and in compliance with applicable data protection laws.
5. How Do You Collect My Personal Data?
We may collect data about you by you providing the data directly to us (for example by filling in Contact form on our site or by sending us emails, or messages on social media). We may automatically collect certain data from you as you use our website by using cookies and similar technologies.
We may also receive data from publicly availably sources such as Companies House and the Electoral Register based inside the EU.
6. How Do You Use My Personal Data?
We will only use your personal data for the purposes for which it was collected, or for a reasonably compatible purpose if necessary. This may include processing your data to provide our services, issue invoices, respond to your enquiries, and manage our client relationships. We do this because it is necessary to fulfil our contract with you, because you have given your consent, or because it is in our legitimate business interests to operate and maintain our services.
We will not share your data with any third parties or send any unlawful marketing or spam. We are committed to fully protecting your rights and complying with our obligations under the UK GDPR, EU GDPR (where applicable), and the Privacy and Electronic Communications (EC Directive) Regulations 2003. You will always have the opportunity to opt out of communications at any time.
7. International Transfers
As a UK-based business, we are subject to the UK General Data Protection Regulation (UK GDPR). If we process personal data of individuals located in the EU, we also comply with the EU GDPR.
In some cases, your personal data may be transferred to service providers or platforms located outside of the UK or European Economic Area (EEA). When we do this, we ensure that appropriate safeguards are in place to protect your data to a standard equivalent to UK and EU data protection laws. These safeguards may include:
- Transferring data to countries that have been officially recognised as providing an adequate level of data protection
- Using standard contractual clauses approved by the UK or European Commission
- Working with providers that implement approved certification mechanisms or binding corporate rules
If no appropriate safeguard is available, we will seek your explicit consent before making such a transfer. You will always have the right to withdraw your consent at any time.
8. Disclosure of Your Personal Data
We do not currently share your personal data with any third parties for marketing or unrelated purposes. However, we may need to disclose your data in limited circumstances where necessary to operate our business or comply with legal obligations. This may include sharing data with:
- IT and website support providers who assist with system maintenance or security
- Professional advisers such as accountants, lawyers, or insurers
- Government or regulatory bodies where required by law (e.g. tax reporting)
Any third parties who process personal data on our behalf are required to do so securely, lawfully, and only according to our instructions. We ensure that your data is protected and only used for the specified purposes for which it was shared.
9. Data Security
We have put in place security measures to prevent your personal data from being accidentally lost, used, altered, disclosed, or accessed without authorisation. We also allow access to your personal data only to those partners who have a business need to know such data. They will only process your personal data on our instructions and they must keep it confidential.
We only store a digital copy of your data. We do not store any hard copies of your data.
We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach if we are legally required to.
10. How Long Will You Keep My Personal Data?
We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including to provide our services, comply with legal, accounting, or reporting obligations, and resolve any disputes. Your personal data will therefore be kept:
- Financial Records for up to 6 years from the end of the financial year in which the transaction took place, in accordance with HMRC requirements.
- Client and Project Data for up to 6 years after a project launch/sign off with us, upon which it will be deleted.
When deciding what the correct time is to keep the data for we look at its amount, nature and sensitivity, potential risk of harm from unauthorised use or disclosure, the processing purposes, if these can be achieved by other means and legal requirements.
11. What Are My Rights?
Under data protection laws you have rights in relation to your personal data that include the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data and (where the lawful ground of processing is consent) to withdraw consent.
You can see more about these rights at: ICO website.
If you wish to exercise any of the rights set out above, contact me at hello@brawbranding.com
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, if your request is ‘manifestly unfounded or excessive’ (for example, if you make repetitive requests) a fee may be charged to cover our administrative costs in responding.
We will respond to your subject access request within 30 days or less. Normally, we aim to provide a complete response, including a copy of your personal data within that time. In some cases, however, particularly if your request is more complex, more time may be required up to a maximum of three months from the date we receive your request. You will be kept fully informed of our progress.
If you are not happy with any aspect of how we collect and use your data, you have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk). We should be grateful if you would contact us first if you do have a complaint so that we can try to resolve it for you.
12. Changes to this Privacy Notice
We may change this Privacy Notice from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection.
Any changes will be made available via our website.
Cookies Policy
What are Cookies?
Cookies are small files saved to the user’s computer hard drive that track, save and store information about the user’s interactions and usage of the website. This allows the website, through its server, to provide the user with a tailored experience when navigating the website. Session cookies may be used to validate your access to different parts of the website.
Disabling Cookies
If you are uncomfortable with the use of cookies, you can disable cookies on your device by changing the settings in the preferences or options menu in your browser. You can set your browser to reject or block cookies or to tell you when a website tries to put a cookie on your device. You can also delete any cookies that are already stored on your device. However, please be aware that if you do delete and block all cookies from our website, parts of the site my not fully function.
How we use cookies
The BrawBranding website uses cookies to help us identify and track visitors, their usage of the website, and their website access preferences. Where applicable this website uses a cookie control system allowing the user on their first visit to the website to allow or disallow the use of cookies on their computer or device. This complies with UK legislation which requires that explicit consent is given by users before reading files are left, or applied, on a user’s computer or device.
We do not use cookies to collect any information that identifies you personally.
Analytics
BrawBranding uses tracking software provided by Google Analytics to monitor its visitors, and to better understand how they use the site. The software will save a cookie to the user’s hard drive in order to track and monitor engagement and usage of the website. The cookie will not store, save or collect personal information.
Google’s privacy policy is available at http://www.google.com/privacy.html. Users may opt-out from having their data collected by disabling the tracking.
This website is hosted by Lyrical Host and its use is subject to Lyrical’s Terms of Use and Privacy Policy.