What personal data we collect
We collect personal data in the following ways.
Information you give us directly. When you complete a form on our website, contact us by email or telephone, or correspond with us in other ways, we may collect your name, email address, telephone number, company name, job title and any information you include in your message.
Information we collect automatically when you visit our website. This includes your IP address, browser type and version, operating system, the pages you visit, the time and duration of your visit, the website you came from, and similar standard analytics data. This is collected through Google Analytics and similar tools.
Information from cookies and similar technologies. See the Cookies section below for full detail.
Why we use your personal data and our lawful basis
Under UK GDPR we must have a lawful basis for using your personal data. The bases we rely on are as follows.
Responding to your enquiries. When you submit a form or contact us, we use your information to respond to you and provide the services or information you have asked about. Our lawful basis is your consent (UK GDPR Article 6(1)(a)) for general enquiries, and our legitimate interests (UK GDPR Article 6(1)(f)) in responding to potential customers and managing our business relationships.
Providing our services to clients. Where you are a client or representing a client, we use your personal data to deliver the services we have been engaged to provide. Our lawful basis is the performance of a contract (UK GDPR Article 6(1)(b)) or our legitimate interests in delivering and managing those services.
Understanding how our website is used. We use analytics tools to monitor how visitors interact with our website, so we can improve it and identify any issues. Our lawful basis is your consent, given through our cookie banner.
Marketing. Where we send marketing communications, we do so on the basis of your consent or, where permitted, our legitimate interests in promoting our services. You can opt out of marketing at any time using the unsubscribe link in any marketing email, or by emailing hello@brand12.co.uk.
Legal obligations. We may use your personal data where we are required to by law, for example to comply with tax or accounting obligations. Our lawful basis is our legal obligations under UK law (UK GDPR Article 6(1)(c)).
Our legitimate interests are limited to managing and growing our business as a digital agency, responding to enquiries and delivering our services. We balance our interests against your rights and freedoms, and you have the right to object to processing on this basis (see Your rights below).
Who we share your personal data with
We do not sell your personal data. We share it only with the following.
Service providers we use to run our business. This includes Google Workspace (email and document storage), Cloudflare (website security and content delivery), our hosting provider, our analytics provider (Google Analytics) and similar essential business tools. These providers process personal data on our behalf under written agreements that require them to protect it.
Professional advisers. Accountants, legal advisers and similar professionals where necessary.
Authorities. Law enforcement, regulators, courts or other public authorities, where we are legally required to share information.
We do not share your personal data with third parties for their own marketing purposes.
International data transfers
Some of our service providers, including Google, are based outside the UK. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as transfers to countries with adequacy decisions, or transfers covered by Standard Contractual Clauses or the UK International Data Transfer Agreement. You can request more details on these safeguards by contacting hello@brand12.co.uk.
How long we keep your personal data
We only keep your personal data for as long as we need it for the purposes set out in this policy.
Enquiry form data: Up to 12 months from your enquiry, unless we go on to work with you. Client data: For the duration of our engagement and for seven years afterwards, in line with UK accounting and tax requirements. Marketing data: Until you unsubscribe or otherwise withdraw consent. Analytics data: Google Analytics retains user-level data for 26 months by default. Email correspondence: Retained for as long as we reasonably need it to manage the relationship and meet our legal obligations.
When we no longer need your personal data, we securely delete or anonymise it.
How we keep your personal data secure
We take the security of your personal data seriously. Our website uses HTTPS, with data encrypted in transit using TLS. Our internal systems are protected by access controls, authentication and routine security practices. We use trusted service providers (including Google Workspace and Cloudflare) that maintain industry-standard security measures. Despite these protections, no system can be guaranteed completely secure, but we work to limit risk wherever we can.
Your rights
Under UK GDPR you have the following rights in relation to your personal data.
- Access: You can ask us for a copy of the personal data we hold about you.
- Rectification: You can ask us to correct personal data that is inaccurate or incomplete.
- Erasure: You can ask us to delete personal data, in certain circumstances.
- Restriction: You can ask us to restrict the processing of your personal data, in certain circumstances.
- Objection: You can object to the processing of your personal data where we rely on legitimate interests. You have a separate and clear right to object to direct marketing at any time.
- Data portability: Where you have provided personal data based on your consent or under a contract, you can ask for that data in a portable format.
- Withdraw consent: Where we process personal data on the basis of your consent, you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, email hello@brand12.co.uk. We will respond within one month.
Your right to complain
If you are unhappy with how we have handled your personal data, please tell us first by emailing hello@brand12.co.uk so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.
Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF Telephone: 0303 123 1113 Website: ico.org.uk
Cookies and similar technologies
Our website uses cookies and similar technologies. A cookie is a small text file that is placed on your device when you visit a website.
We use the following categories of cookies.
Strictly necessary cookies. These are essential for the website to work and are set without your consent, as permitted under PECR. They include cookies that keep our website secure and remember your cookie preferences.
Analytics cookies. We use Google Analytics to understand how visitors interact with our website. These cookies are only set if you give your consent through our cookie banner. The information is processed in a way that does not directly identify you, and we do not allow Google to use this data to identify you.
Functional cookies. Where used, these enable enhanced functionality on our website. They are only set with your consent.
Marketing cookies. Where used, these support our marketing activity, including retargeting. They are only set with your consent.
You can change your cookie preferences at any time by clicking the cookie settings link in the website footer. You can also block or delete cookies through your browser settings, though this may affect how the website works for you.
For more information on cookies and your choices, see ico.org.uk/your-data-matters/online/cookies/.
Children
Our website and services are not directed at children, and we do not knowingly collect personal data from children under 13. If you believe we have collected personal data from a child, please contact us at hello@brand12.co.uk so we can remove it.
Changes to this policy
We may update this privacy policy from time to time to reflect changes in how we use personal data, changes in the law, or improvements in our practices. When we make significant changes, we will update the "Last updated" date at the top of this policy, and where appropriate notify you directly.
Contact
If you have any questions about this privacy policy or our use of your personal data, please contact us.
Email: hello@brand12.co.uk
Telephone: 0161 820 0555
Post:
Brand Twelve Ltd
Ashton Old Baths
Stamford Street West
Ashton-under-Lyne
Lancashire
OL6 7FW