Privacy
Policy

Brandegree SARL is responsible for the personal data described in this policy.

Depending on how you interact with us, we may collect:

• your name, job title, company and contact details;
• information included in project enquiries, briefs, proposals and correspondence;
• meeting notes, feedback, approvals and other project communications;
• files, images, documents and other materials shared for a project;
• contractual, invoicing, payment and administrative information;
• limited technical and security information generated when you use the website, such as request details, browser or device type, visited pages and timestamps.

Please avoid sending personal data that is not necessary for your enquiry or project.

We collect personal data directly from you when you complete a form, send an email, call us, attend a meeting, request a proposal, sign an agreement or share materials during a project.

We may also receive information from your organisation, an authorised contact, a project collaborator or a professional referral.

Limited technical and security data may be collected automatically when you visit the website.

Google reviews. With the business owner’s authorisation, our server accesses Brandegree’s own Google Business Profile information and reviews to display client feedback on this website. This includes public reviewer names and profile photos, ratings, review text and dates, plus Google’s overall rating and review count. The integration reads this information; it does not edit our listing or post replies.

API review data is cached securely for performance, refreshed twice daily and removed after no more than 29 days without a successful refresh. Private authorisation credentials stay on the server and are never published. We use Google user data only for this review feature, do not sell it or use it for advertising or AI training, and comply with the Google API Services User Data Policy, including its Limited Use requirements. The account owner can revoke access through their Google Account’s third-party connections or contact us to remove the connection. Reviewer profile images may load directly from Google; those requests are also subject to Google’s privacy policy.

We use personal data to:

• respond to enquiries and determine an appropriate starting point for a project;
• prepare proposals, contracts and project plans;
• deliver, manage and document client work;
• communicate with clients, prospects, suppliers and collaborators;
• manage invoicing, payments and business records;
• protect the website, our systems and the information entrusted to us;
• understand website use through the analytics described in the cookies section below;
• comply with applicable obligations and establish or defend legal rights.

We do not use personal data for unrelated purposes without an appropriate reason.

Depending on the circumstances, we process personal data because:

• it is necessary to take steps requested before entering into a contract;
• it is necessary to perform or administer a contract;
• it supports our legitimate interests in operating the studio, communicating with business contacts, protecting our systems and improving our services;
• it is necessary to meet an applicable legal or regulatory obligation;
• you have given consent where consent is required.

Where processing relies on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before it was withdrawn.

Project materials may contain personal data about client representatives, employees, customers, partners or other individuals. We use that data only as needed to understand the brief, produce the agreed work, obtain decisions, prepare files and support delivery.

Access is limited to the people who need the information for the project. This may include Brandegree personnel and selected collaborators involved in the agreed scope.

Clients should share only information they are authorised to provide and should avoid including unnecessary or sensitive personal data in project materials.

Cloudflare Web Analytics measures general website use without cookies or cross-site tracking. With your permission, Google Analytics 4 measures visits and interactions with analytics cookies, and Microsoft Clarity helps us understand how visitors use pages through session recordings and heatmaps. Google Tag Manager loads both tools only after you accept analytics measurement. Clarity masks form inputs and other selected sensitive areas.

Your analytics choice is stored in your browser’s localStorage so the request does not reappear on every page. Use “Cookie preferences” in the footer at any time to change your choice. If you reject or withdraw permission, Google Analytics and Clarity do not load on subsequent pages, and their analytics cookies are removed on withdrawal.

Strictly necessary cookies may be used where required for website security, administration and essential functionality.

We do not currently use advertising or remarketing pixels on this website.

We may share personal data only where necessary with:

• Brandegree personnel and selected project collaborators;
• professional service providers used for communication, project management, file exchange, website operation, security, administration and invoicing;
• advisers or public authorities where disclosure is required to meet an applicable obligation or protect legal rights;
• a client or other authorised project contact where this is part of the agreed work.

Recipients receive only the information reasonably required for their role. We do not sell personal data.

Some professional tools, service providers or project collaborators may process or access data from countries other than the country where it was collected.

Where an international transfer occurs, we take reasonable steps to use suitable providers, limit the data shared and apply available contractual or organisational safeguards appropriate to the circumstances.

We keep personal data only for as long as it is reasonably needed for the purpose for which it was collected.

The appropriate period depends on the nature of the information, the project or relationship, contractual requirements, applicable accounting or legal obligations, security needs and the need to establish or defend legal rights.

When information is no longer required, we delete it, anonymise it or securely archive it where continued retention is necessary.

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

These measures include limiting access according to project and operational needs, using appropriate security settings and selecting professional tools suited to the information being handled.

No method of transmission or storage is completely secure. If you believe information shared with Brandegree may have been compromised, please contact us promptly.

Depending on the law applicable to you and the circumstances of the processing, you may have the right to:

• request access to personal data held about you;
• ask us to correct inaccurate or incomplete information;
• request deletion or restriction of certain processing;
• object to certain processing;
• request a portable copy of eligible data;
• withdraw consent where processing relies on consent;
• raise a concern with the competent data protection authority.

These rights may be subject to legal conditions or exceptions. We may need to verify your identity before acting on a request.