Privacy Policy

We may collect the following categories of information:

Information you provide directly.

• name and contact details, such as email address;
• company or organization name;
• information included in messages, inquiries, or project requests;
• any other information you choose to provide.

Information collected automatically.

• IP address and approximate location derived from it;
• browser, device, and operating-system information;
• referring pages and traffic source;
• pages viewed and interactions with the website;
• date and time of visits;
• cookie identifiers and similar technical information.

Where required by law, analytics, advertising, or other non-essential technologies are used only after you have provided consent.

• respond to inquiries and communications;
• provide requested information and discuss potential projects or business relationships;
• operate, maintain, improve, and secure the website;
• understand website usage and performance;
• measure marketing and advertising effectiveness;
• prevent fraud, misuse, and security incidents;
• comply with legal obligations and lawful requests;
• establish, exercise, or defend legal claims.

Where the GDPR, UK GDPR, or similar laws apply, we rely on one or more of the following legal bases:

• Consent - for optional analytics, advertising, marketing, and similar technologies where consent is required.
• Legitimate interests - for operating and securing the website, responding to business inquiries, and improving our services, where those interests are not overridden by your rights.
• Steps before entering into a contract - when you contact us about potential services or cooperation.
• Legal obligations - where processing is necessary to comply with applicable law or lawful requests.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

We may use cookies, pixels, tags, local storage, and similar technologies for essential website functionality, security, preferences, analytics, performance measurement, advertising attribution, and campaign measurement.

We also use Cloudflare Web Analytics, a privacy-focused analytics service that does not use cookies, local storage, or similar persistent identifiers and is designed not to collect or use visitors’ personal data. Cloudflare Web Analytics may operate for all visitors without requiring cookie consent.

Non-essential cookies and tracking technologies, including advertising, retargeting, and other analytics technologies that require consent, are used only in accordance with applicable law and, where required, only after your consent. You can change or withdraw your choices through the Cookie Settings link on the website.

We use Cloudflare Web Analytics to obtain aggregated information about website traffic and performance. Cloudflare Web Analytics is designed to operate without cookies, local storage, fingerprinting, or persistent visitor identifiers.

We may also use additional third-party analytics and advertising services, such as Google Analytics, Google Ads, Meta technologies, LinkedIn technologies, Microsoft advertising technologies, or similar services. Where these technologies require consent under applicable law, they are not activated until the visitor provides the required consent through our cookie-preference interface.

The specific providers and categories currently active should be reflected in the website cookie-preference interface.

We may share personal information with service providers that help us operate the website and conduct our activities, including hosting, cloud infrastructure, analytics, website forms, email, security, advertising measurement, and professional-service providers.

We may also disclose information when reasonably necessary to comply with law, respond to lawful governmental requests, protect rights or property, investigate fraud or security incidents, or enforce applicable agreements.

We do not sell personal information for money. However, some advertising or analytics activities may be considered a sale, sharing, or targeted advertising under certain U.S. state privacy laws. Where applicable, you may opt out through our cookie or privacy controls.

Our website may be accessed internationally, and some service providers may process information in countries different from your country of residence. Where required, we use recognized safeguards for international transfers, such as adequacy decisions, Standard Contractual Clauses, or other legally permitted transfer mechanisms.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including legal, accounting, security, and dispute-resolution requirements.

• contact and business inquiries may generally be retained for up to 24 months after the last communication;
• technical and security logs are generally retained for shorter operational periods;
• cookie-related information is retained according to the periods disclosed in the cookie-preference interface;
• information required for legal compliance or claims may be retained for longer where necessary.

Depending on your location and applicable law, you may have rights to:

• request access to personal information;
• request correction of inaccurate information;
• request deletion of personal information;
• restrict or object to certain processing;
• receive certain information in a portable format;
• withdraw consent;
• opt out of targeted advertising, sale, or sharing where applicable;
• appeal certain privacy decisions where applicable.

To exercise a privacy right, contact us at contact@brandcreative.agency. We may need to verify your identity before completing a request.

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have the rights described above under applicable data-protection law. You may also lodge a complaint with the competent data-protection authority in your country of residence, place of work, or where an alleged infringement occurred.

Residents of certain U.S. states may have additional rights under applicable state privacy laws. Depending on the law and whether it applies to us, these rights may include access, correction, deletion, portability, and the right to opt out of targeted advertising, sale, or sharing of personal information.

We do not discriminate against individuals for exercising privacy rights granted by applicable law.

Where required by applicable law and technically supported, we recognize qualifying browser-based opt-out preference signals, including Global Privacy Control (GPC), for applicable sale, sharing, or targeted-advertising opt-out requests.

The website is intended for a general adult and business audience. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through the website, please contact us so we can take appropriate action.

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

The website may contain links to third-party websites or services. We are not responsible for their privacy practices or content. We encourage you to review the privacy notices of those third parties before providing personal information.

We may update this Privacy Policy from time to time. The current version will be published on this page and the effective date will be updated. Where appropriate, material changes may be communicated through an additional notice on the website.

For questions, requests, or concerns regarding this Privacy Policy or our handling of personal information, contact:

• Brand: Brand Creative
• Website: https://brandcreative.agency
• Privacy contact: contact@brandcreative.agency