Data and privacy

Privacy policy

This policy explains what personal information Brand Aspect collects, why we use it and how long we keep it.

Last updated: 16 October 2026

1. Who we are

Brand Aspect Ltd, trading as Brand Aspect, is the controller for personal information collected through this website.

Brand Aspect Ltd
Company number: 05105266
Registered in: England and Wales
Registered office: Initial Business Centre Unit, Unit 7 Wilson Business Park, Manchester, England, M40 8WN
Email: hello@brandaspect.com

2. What we collect and why

We collect only the information needed to run the website, respond to enquiries, provide requested assessments, send updates where permitted, and manage client work.

Contact and project enquiries

Data: Name, email address, phone number, company name, message, and source page.

Purpose: To respond to your enquiry, decide how best to help and keep a record of the conversation.

Lawful basis: Steps before entering into a contract and our legitimate interests in responding to business enquiries.

Website operation and security

Data: Technical data such as IP address, browser information, request logs, timestamps, and anti-spam signals.

Purpose: To deliver the website, secure the service, prevent abuse, diagnose faults, and maintain performance.

Lawful basis: Our legitimate interests in running a secure and reliable business website.

Client work, billing, and accounting

Data: Contact details, project correspondence, invoices, payment records, and support history.

Purpose: To deliver services, manage client relationships, keep accounting records, and meet legal obligations.

Lawful basis: Contract, legal obligation, and our legitimate interests in managing our business.

Approved testimonials and project examples

Data: Approved client feedback, role/company details, approval evidence, and related project references where supplied.

Purpose: To publish approved feedback or anonymised project examples.

Lawful basis: Consent or legitimate interests, depending on the nature of the approved material.

3. Cookies and browser storage

Optional Google Analytics 4 runs only if you allow analytics. We use it to understand which services and project examples people choose, how far they reach in key sections, whether they start a form, encounter an error or successfully submit an enquiry, and whether they select a telephone or email link. We also measure registered campaign links. Google may process information about your browser, device and the pages you visit. We do not send names, email addresses, phone numbers, company names, messages or submitted website addresses to Analytics.

Analytics is off until you choose “Allow analytics”. You can choose “Keep analytics off” or change your choice through “Privacy choices” in the footer at any time. We also keep analytics off when your browser sends a Do Not Track or Global Privacy Control signal. Advertising features and Google Signals are disabled.

We use browser storage to remember your analytics choice for up to six months and your previously saved reduced-motion preference until you clear your browser storage. We also respect your device’s reduced-motion setting. If you allow analytics, its cookies last for up to six months. Withdrawing consent stops measurement and removes the analytics cookies we can access.

4. Who we share data with

We do not sell or rent personal information. We share data only where needed to run the website, respond to you, deliver services, comply with the law, or protect our business.

  • Netlify: website hosting, form handling, anti-spam and request logs.
  • Google Workspace: business email, files and correspondence.
  • Google Analytics 4: optional website usage measurement when you allow analytics.
  • FreeAgent: accounting, invoicing and financial records when you become a client.
  • Stripe and GoCardless: payment processing where payment links, subscriptions or direct debits are used.
  • OpenAI and other approved AI service providers: internal drafting or analysis where appropriate. We minimise personal data and use available business privacy controls.
  • Professional advisers, insurers, regulators, or authorities where legally required or necessary to protect our business.

5. International transfers

Some service providers may process data outside the UK or European Economic Area. Where this happens, we rely on appropriate safeguards such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or equivalent contractual and organisational safeguards.

6. Data retention

We keep personal information only for as long as needed for the purpose it was collected, unless a longer period is required for legal, accounting, security, or dispute reasons.

General contact enquiries

Usually up to 24 months unless the enquiry becomes client work or there is a clear reason to keep it longer.

Client, project, invoice, and accounting records

Usually up to 7 years where needed for accounting, tax, contract, or dispute purposes.

Published testimonial approval records

For as long as the testimonial or related public material is published, plus a reasonable evidence period afterwards.

Website logs and security records

For the period kept by our hosting and security providers, unless needed longer to investigate abuse or security issues.

7. Marketing communications

We only send newsletter-style marketing where we have consent or another lawful route, such as the soft opt-in for existing business customers where applicable. You can unsubscribe from marketing at any time by using the unsubscribe route in an email or by contacting us at hello@brandaspect.com.

If you submit a contact form, we may follow up about that specific enquiry. This website does not currently offer newsletter signups.

8. Security

We use technical and organisational measures designed to protect personal information from unauthorised access, loss, misuse, or disclosure. No online service can be made completely secure, so please avoid sending highly sensitive information through website forms unless we have agreed a suitable route first.

9. Your rights

Under UK data protection law, you may have rights to access, correct, delete, restrict, or object to our use of your personal information. You may also have the right to data portability and to withdraw consent where processing is based on consent.

To exercise your rights, contact us at hello@brandaspect.com. We normally respond within one month.

10. Children's privacy

This website and our services are intended for business users and are not directed at children. We do not knowingly collect personal information from children through this website.

11. Third-party links

This website may link to third-party websites or booking tools. Their own privacy notices apply when you visit or use them.

12. Complaints and the ICO

We encourage you to contact us first if you have concerns. You also have the right to complain to the UK Information Commissioner's Office.

ICO registration reference: ZB497051
ICO website: ico.org.uk
ICO helpline: 0303 123 1113

13. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be published on this page. For website terms, see our terms of use.