Privacy. What we collect and why

• Controller: Matthew Terrell, trading as My Brand Marketing
• Email: hello@mybrandmarketing.co.uk
• Postal address: available on request
• ICO registration number: available on request, if registered

If you have any questions about this policy or about how we handle your data, please contact us using the details above.

We may collect and process the following categories of personal data:

• Contact and enquiry data. Your name, email address, telephone number, company name, and anything you tell us when you complete a form, book a call, or email us.
• Client and engagement data. Information we need to deliver our services and manage our relationship with you, including billing details and correspondence.
• Marketing data. Your preferences for receiving marketing from us, and your engagement with our emails and content.
• Technical and usage data. Your IP address, browser type, device information, and how you use our website, collected through cookies and similar technologies.

We do not intentionally collect special category data (such as data about health, race, or political opinions) through this website. Please do not send us such data unless we specifically ask for it.

We collect data when you:

• Complete a contact or enquiry form, or book a call with us.
• Subscribe to our emails or content.
• Engage us to provide services, or communicate with us during an engagement.
• Browse the website, through cookies and analytics.

We use your personal data only where the law allows us to. The lawful bases we rely on are:

• To respond to your enquiries and provide our services. Lawful basis: performance of a contract, or our legitimate interest in responding to enquiries before a contract is in place.
• To manage billing and keep business records. Lawful basis: performance of a contract, and compliance with our legal obligations.
• To send you marketing you have asked for. Lawful basis: your consent, which you can withdraw at any time.
• To operate, maintain, and improve our website. Lawful basis: our legitimate interest in running a secure and effective website.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we have concluded that they are not.

We use trusted third-party services to help us run our business and deliver our services to you. These providers process personal data on our behalf, or as controllers in their own right, under their own privacy terms. They include:

• Lovable, for building and hosting website projects.
• QuickBooks (Intuit), for invoicing, accounting, and financial records.
• Kit, for email marketing and managing subscriber communications.
• Other providers that support the delivery of our services, such as hosting, email, calendar booking, file storage, and website analytics.

We share only the data each provider needs to perform its function. We do not sell your personal data to anyone.

We may also disclose your data where we are required to do so by law, or to establish, exercise, or defend our legal rights.

Some of our providers are based outside the United Kingdom, which means your data may be transferred to and stored in another country. Where this happens, we take steps to ensure your data receives an adequate level of protection, for example through the use of UK-approved safeguards such as the International Data Transfer Agreement or Addendum.

We keep your personal data only for as long as we need it for the purposes set out in this policy. Enquiry data is kept for as long as needed to deal with your enquiry and for a reasonable period afterwards. Client and financial records are kept for as long as required to meet our legal and accounting obligations, which is generally at least six years. Marketing data is kept until you unsubscribe or ask us to remove it.

Under UK data protection law, you have the right to:

• Request access to the personal data we hold about you.
• Request that we correct any inaccurate or incomplete data.
• Request that we erase your data, where there is no lawful reason for us to keep it.
• Object to, or request that we restrict, our processing of your data.
• Request the transfer of your data to you or another provider.
• Withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, please email hello@mybrandmarketing.co.uk. We will respond within one month.

Our website uses cookies and similar technologies to function correctly and to help us understand how the site is used. You can control cookies through your browser settings, and where required we will ask for your consent before setting non-essential cookies.

If you are unhappy with how we have handled your data, please contact us first so we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk.

We may update this policy from time to time. Any changes will be posted on this page with a revised date at the top. Please check back periodically.