Privacy notice

Who we are

BrandFlame is a web, mobile and software design studio based in London, United Kingdom. This notice explains what personal information this website collects, why, and what your rights are under UK data protection law (UK GDPR and the Data Protection Act 2018).

What we collect

When you use the contact form we collect the details you enter: your name, business name, email address, phone number if you give it, the industry you select and your message. We also record the page you sent it from, the date and time, your browser type, and a one-way hashed version of your IP address used only to block automated spam.

This website does not use advertising or tracking cookies. A single functional cookie may be set when you submit the form so that your submission is processed reliably.

Why we collect it and our lawful basis

We use your details to respond to your enquiry, arrange a call and, if you go ahead, deliver the work you ask for. Our lawful basis is legitimate interest in responding to enquiries about our services, and contract where you become a client. We do not sell or share your details for marketing.

How long we keep it

Enquiries that do not become projects are deleted within twelve months of the last contact. Client records are kept for the duration of the work and for six years afterwards to meet accounting obligations.

Your rights

You can ask for a copy of the information we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Contact us using the details on this website and we will respond within one month. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Where it is stored

Form submissions are stored on secure cloud infrastructure with access limited to the BrandFlame team. Data may be processed on servers outside the UK by providers that operate under recognised international data transfer safeguards.