Introduction & General Terms

Brandboard Limited (“Brandboard”, “we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy & Cookie Policy explains how we collect, use, store, share, and protect personal information when you interact with us, in accordance with the UK GDPR, EU GDPR, and applicable international data protection laws.

This policy applies to visitors of https://brandboard.co.uk, our clients, suppliers, partners, and anyone who engages with our services.

Content

1. About Us
2. Personal Data We Collect
3. How We Collect Personal Data
4. Lawful Basis for Processing
5. How We Use Personal Data
6. Sharing Personal Data
7. International Data Transfers
8. Data Retention
9. Security
10. Data Breach Management & Notification
11. Cookies & Similar Technologies
12. Your Data Protection Rights
13. Third-Party Links
14. Changes to This Policy
15. Contact Us

1. About Us

Company name: Brandboard Limited
Company registration number (UK): 10793459
ICO registration number: ZB886524
Registered address:
130–132 Regent Road
Leicester, LE1 7PG
England, UK

We are a digital creative agency providing strategy, branding, web, digital, and graphic design services to B2B clients.

For data protection purposes, Brandboard may act as:

• a Data Controller (for our own business operations), and/or
• a Data Processor (when processing personal data on behalf of our clients).

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identity data (name, job title, company name)
• Contact data (email address, phone number, postal address)
• Technical data (IP address, browser type, device, operating system)
• Usage data (pages visited, interactions with our website)
• Marketing and communications data (preferences, consent records)
• Client-related data provided to us during service delivery

We do not intentionally collect special category data unless strictly necessary and explicitly agreed.

3. How We Collect Personal Data

We collect personal data when you:

• Visit or browse our website
• Submit a contact or enquiry form
• Communicate with us by email, phone, or other channels
• Engage us for services
• Subscribe to marketing communications (where applicable)

Some technical and usage data is collected automatically through cookies and similar technologies.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis, including:

• Contract – to respond to enquiries and deliver services
• Consent – for marketing communications and non-essential cookies
• Legitimate interests – to operate, improve, and secure our business and website
• Legal obligation – for accounting, tax, and regulatory compliance

5. How We Use Personal Data

We use personal data to:

• Respond to enquiries and communications
• Provide and manage our services
• Manage client relationships and projects
• Send relevant business or marketing communications (where permitted)
• Improve our website, services, and user experience
• Maintain security and prevent fraud
• Comply with legal and regulatory obligations

6. Sharing Personal Data

We do not sell personal data.

We may share personal data with trusted third parties where necessary, including:

• Website hosting and cloud service providers
• Email and communication platforms
• Analytics and performance tools
• Payment processors
• Professional advisers (legal, accounting)
• Contractors or partners supporting service delivery

All third parties are required to:

• Process data only on our instructions
• Maintain appropriate security measures
• Comply with applicable data protection laws

Where required, Data Processing Agreements (DPAs) are in place.

7. International Data Transfers

As an internationally operating agency, personal data may be transferred outside the UK or EU.

Where this occurs, we ensure appropriate safeguards are used, including:

• UK International Data Transfer Agreements (IDTA)
• EU Standard Contractual Clauses (SCCs)
• Transfers to countries with adequacy decisions
• Additional technical and organisational safeguards where required

8. Data Retention

We retain personal data only for as long as necessary:

• Enquiry data: up to 24 months
• Client records: up to 7 years (legal and accounting purposes)
• Marketing data: until consent is withdrawn
• Website analytics data: anonymised or retained for limited periods

Data is securely deleted or anonymised when no longer required.

9. Security

We take appropriate technical and organisational measures to protect personal data, including:

• Restricted access controls
• Secure hosting and systems
• Confidentiality obligations for staff and contractors
• Data minimisation practices

While no system can be guaranteed 100% secure, we take reasonable steps to protect personal data from unauthorised access, loss, or misuse.

10. Data Breach Management & Notification

A personal data breach means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

Brandboard has procedures in place to detect, investigate, and respond to suspected personal data breaches. Where a breach is likely to result in a risk to the rights and freedoms of individuals, we will:

• Assess the nature and impact of the breach
• Take appropriate steps to contain and mitigate any risk
• Notify the relevant supervisory authority where required by law
• Notify affected individuals where there is a high risk to their rights and freedoms

Any notifications will be made in accordance with applicable data protection laws, including the UK GDPR and EU GDPR. Further details on breach handling, response times, and responsibilities may be set out in applicable contracts or Data Processing Agreements.

11. Cookies & Similar Technologies

What are cookies?

Cookies are small text files placed on your device when you visit a website. They help websites function properly, improve performance, and provide insights into how visitors use the site.

Cookies do not harm your device and do not contain personally identifiable information such as payment details.

Types of cookies we use

Strictly Necessary Cookies
Essential for website functionality and security.
Legal basis: Legitimate interests

Analytics & Performance Cookies
Help us understand website usage and improve performance.
Legal basis: Consent

Functional Cookies
Enable enhanced functionality and preference retention.
Legal basis: Consent

Cookie consent & control

On your first visit, you will be presented with a cookie banner allowing you to accept, reject, or manage non-essential cookies. You can change your preferences at any time via browser settings or the cookie tool (where available).

For more information about cookies, visit www.allaboutcookies.org.

12. Your Data Protection Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

For UK users, this is the Information Commissioner’s Office (ICO).

13. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies separately.

14. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time. Any changes will be published on this page and will take effect immediately.

15. Contact Us

If you have questions about this Privacy & Cookie Policy or how we handle personal data, please contact:

Privacy Compliance Officer
Brandboard Limited
Company No. 10793459
ICO Registration No. ZB886524
130–132 Regent Road
Leicester, LE1 7PG
England, UK

Or contact us via the details provided on our website.

Brandboard Privacy and Cookie Policy: Version No: 2.1 Updated: 15 Jan 2026

Back to top