Privacy
Policy
Last updated: 7 May 2026
1. Who We Are
Branxel Ltd is the data controller for personal information collected through this website and through our client services.
- Trading name: Branxl Design
- Company number: 15188691
- Registered address: Suite 107, Tower House,
67–71 Lewisham High Street,
London SE13 5JX - Email: hello@branxldesign.com
- Phone: 020 3627 6737
2. What Personal Data We Collect
2.1 Information you provide directly
- Contact forms: name, email address, phone number, company name, project details
- Brand audit requests: business name, website URL, sector, and brief description of goals
- Client onboarding: full name, company name, business address, VAT number (where applicable)
- Project delivery: login credentials, hosting account details, or domain access credentials provided for project work (stored securely and deleted on project close)
2.2 Information collected automatically
- Analytics: pages visited, time on site, referral source, browser type, device type (via Google Analytics, anonymised IP)
- Cookies: essential session cookies and analytics cookies (see Section 7)
- Server logs: IP address, request timestamps, HTTP status codes, retained for up to 30 days for security purposes
3. How We Use Your Personal Data
- To respond to enquiries and project requests
- To prepare and issue proposals, contracts, and invoices
- To deliver contracted design and development services
- To send project updates and relevant communications
- To improve our website and understand how visitors use it
- To comply with our legal obligations (e.g. financial record keeping)
We do not sell, rent, or trade your personal data to third parties for marketing purposes. We do not send unsolicited marketing emails.
4. Legal Basis for Processing
- Contract performance: processing necessary to deliver services you have engaged us for
- Legitimate interests: responding to enquiries, improving our website, basic analytics
- Legal obligation: retaining financial records as required under UK tax law (HMRC, 6 years)
- Consent: where you have opted in to marketing communications (you may withdraw at any time)
5. Who We Share Your Data With
We use a small number of third-party tools to operate our business. Each is bound by its own privacy policy and appropriate data processing agreements:
- Supabase (database & authentication): stores client and project data on EU/EEA servers
- Google Analytics: website analytics with IP anonymisation enabled
- Email providers (e.g. Google Workspace): used for client communication
- Stripe: payment processing for card payments (we do not store card details)
- Accounting software: invoice and financial record management
We may disclose personal data if required by law or in response to a valid legal request from a public authority.
6. How Long We Keep Your Data
- Enquiries (no project started): 12 months from last contact
- Active client records: duration of the project plus 6 years (UK tax/legal requirement)
- Project credentials provided by clients: deleted within 30 days of project handover
- Analytics data: 26 months (Google Analytics default, anonymised)
7. Cookies
Our website uses the following types of cookies:
- Essential cookies: required for basic site functionality (e.g. session state). Cannot be disabled.
- Analytics cookies: Google Analytics (_ga, _gid) to understand visitor behaviour. Anonymised. You may opt out via browser settings or Google's opt-out tool.
We do not use advertising, tracking, or third-party retargeting cookies.
8. Your Rights Under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Rectification of inaccurate or incomplete data
- Erasure ("right to be forgotten") where no legal obligation requires retention
- Restrict processing in certain circumstances
- Data portability: receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time (where consent is the legal basis)
To exercise any of these rights, email us at hello@branxldesign.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
9. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include encrypted storage, access controls, and secure transmission (HTTPS). No internet transmission is completely secure; if you have concerns about sensitive data, please contact us directly.
10. International Data Transfers
Most data is stored and processed within the UK or EU/EEA. Where transfers outside these regions occur (e.g. Google Analytics servers), they are covered by appropriate safeguards including Standard Contractual Clauses or UK adequacy decisions.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be indicated by a revised "Last updated" date at the top of this page. Continued use of our website or services after changes constitutes acceptance of the updated policy.
12. Contact Us
For any privacy-related queries, data subject requests, or complaints, contact us at:
- Email: hello@branxldesign.com
- Post: Branxel Ltd, Suite 107, Tower House,
67–71 Lewisham High Street,
London SE13 5JX