Privacy Policy

This Privacy Policy describes how BrandAIchemy ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website or engage with our services. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

BrandAIchemy is a trading name of Ecomlana Ltd, a company registered in England and Wales (Company No. 11189261), with its registered office at 4th Floor, Silverstream House, 45 Fitzroy Street, London, W1T 6EB.

For the purposes of data protection law, Ecomlana Ltd is the data controller responsible for your personal data.

If you have any questions about this policy or our data practices, please contact us at hello@brandaichemy.com.

2. Data We Collect

Information you provide directly

When you fill in our contact form, book a call, or communicate with us by email, we collect:

• Your name
• Your email address
• Your company or brand name
• Your website URL (if provided)
• The content of your messages to us

Information collected automatically

When you visit our website, we may collect basic technical information including your IP address, browser type, pages visited, and time spent on pages. This is used solely for website performance and security purposes.

Cookies

Our website uses only essential cookies necessary for the site to function correctly. We do not use advertising cookies, tracking cookies, or third-party analytics cookies that require your consent.

3. How We Use Your Data

We use your personal data only for the following purposes:

• To respond to your enquiries and provide the services you have requested
• To manage our client relationship with you
• To send you information directly related to your enquiry or engagement with us
• To comply with our legal obligations

We do not use your data for automated decision-making or profiling. We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contractual necessity: to fulfil our obligations when you engage our services
• Legitimate interests: to respond to enquiries and manage our business operations
• Legal obligation: where required by applicable law

5. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry data is retained for up to 12 months if no engagement follows. Client data is retained for the duration of the engagement and for up to 6 years thereafter for legal and accounting purposes.

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to request correction of inaccurate data
• Right to erasure: to request deletion of your data in certain circumstances
• Right to restrict processing: to request that we limit how we use your data
• Right to data portability: to receive your data in a structured, machine-readable format
• Right to object: to object to processing based on legitimate interests

To exercise any of these rights, please contact us at hello@brandaichemy.com. We will respond within 30 days.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data transmitted via our contact form is encrypted using TLS.

8. Third-Party Services

Our website may use the following third-party services:

• Calendly: if you use our booking link, Calendly's own privacy policy applies to data processed through their platform
• Google Fonts: we use Google Fonts to serve web fonts; Google may collect limited technical data as a result

We ensure that any third-party processors we work with provide appropriate data protection guarantees.

9. International Transfers

Some of our third-party service providers may process data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

11. Complaints

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK data protection regulator, at ico.org.uk.