Privacy Policy

1. Information We Collect

Information you provide. When you fill in our contact form, request a quote, complete Build My Setup, place an order, or email us, we collect your name, company name, email address, phone number, billing and delivery address, any artwork file you send us, and anything you write in a message or notes field.

Information collected automatically. When you visit the site we collect log data, including your IP address, browser type and version, the pages you visit, the time and date of your visit, the referring page and basic device information.

2. How We Use Your Information

We use the information we collect to respond to enquiries and provide quotations, to process and deliver orders, to send order updates and customer service messages, to improve our website and service, and to comply with our legal obligations.

Our lawful bases for processing under UK GDPR are contract performance for orders, legitimate interests for site improvement and customer service, legal obligation for accounting and compliance, and consent for analytics cookies.

3. Cookies and Tracking

Our site uses cookies. Cookies are small files stored on your device that help the site work and let us understand how it is used. We ask for your consent before setting any non-essential cookie, using the banner shown on your first visit.

Strictly necessary cookies are required for the site to function, for example remembering the contents of your basket and your cookie choice. These are always on and do not require consent.

Analytics cookies. We use Google Analytics 4 to understand how visitors find and use the site. These are not set unless you accept them. If you decline, analytics storage stays switched off.

You can change your choice at any time using the Manage cookies link in the footer of any page.

4. Third-Party Services

We share data with a small number of providers who process it on our behalf:

• Stripe processes card payments. Your card details go directly to Stripe and are never held by us.
• Resend delivers our transactional email, such as order confirmations and replies to enquiries.
• Supabase stores orders and enquiries so we can service them.
• Vercel hosts the website and processes server logs.
• Google Analytics provides website analytics, only where you have consented.

We do not sell your personal information to anyone.

5. Data Retention

We keep order records for as long as required for accounting and tax purposes, which in the UK is six years. Enquiries and quote requests are kept for as long as needed to deal with them and for a reasonable period afterwards. Uploaded artwork is kept for up to 12 months so reorders can be produced quickly.

6. Your Rights

Under UK GDPR you have the right to access the personal data we hold about you, to have inaccurate data corrected, to request erasure, to restrict or object to processing, and to data portability. You also have the right to withdraw consent for analytics at any time.

To exercise any of these rights, email hello@thebrandclan.co.uk. If you are not satisfied with our response you can complain to the Information Commissioner’s Office at ico.org.uk.

7. Security

The site is served over HTTPS. Payments are handled entirely by Stripe on their own hosted page. Access to orders and enquiries is restricted to those who need it. No system is completely secure, but we take reasonable measures to protect your information.

8. International Transfers

Some of our providers process data outside the UK. Where that happens, transfers are covered by the safeguards those providers have in place, such as the UK International Data Transfer Addendum or an adequacy decision.

9. Children’s Privacy

This site is intended for businesses and adults. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the latest version.