Privacy Policy
Effective date: September 4, 2025
Branded Reach (“Branded Reach,” “we,” “us,” or “our”) is a digital marketing agency. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our websites, engage with our content, or use our services (collectively, the “Services”).
If you do not agree with this Policy, please do not use our Services. If you have questions, contact us at contact@brandedrach.com
1) Who we are and scope
- Controller/Business. For our own websites, marketing, sales and operations, Branded Reach is the “controller” (EU/UK) and “business” (California) of your personal information.
- Processor/Service Provider. For client projects (e.g., managing ad accounts, analytics, moderation, or creative services), we typically act as a “processor”/“service provider,” handling personal information only under our client’s instructions and contracts.
- Coverage. This Policy applies to information we collect online and offline about our prospects, clients, vendors and website visitors. It does not cover data processed solely on behalf of a client under a separate agreement (which is governed by that agreement). This is a global Policy and includes jurisdiction‑specific notices for the EU/UK (GDPR) and California (CPRA/CCPA).
2) Information we collect
The personal information we collect depends on how you interact with us.
Information you provide directly
- Contact details (name, email, phone, company, role)
- Account and communications data (inquiries, meeting notes, proposals)
- Billing and transactional data (billing address, VAT/GST numbers, limited payment details processed via PCI-compliant providers)
- Content you submit (briefs, creative assets, feedback, testimonials)
Information collected automatically
- Device and usage data (IP address, device identifiers, browser type, pages visited, timestamps, referral URLs)
- Approximate location (derived from IP address)
- Interaction data (clicks, time-on-page, scroll depth)
- Cookies, pixels and similar technologies (see Cookies & Tracking below)
Information from third parties
- Advertising and analytics partners (e.g., ad platforms, measurement tools)
- Public sources (company websites, LinkedIn, industry databases)
- Referrals, partners and vendors supporting our Services
We do not intentionally collect sensitive personal information. We do not knowingly collect information from children (see Children’s Privacy).
3) How we use personal information
We use personal information to:
- Provide, operate and improve our Services
- Respond to inquiries; schedule and conduct meetings
- Send service, transactional and marketing communications
- Personalize content and ads; measure campaign performance
- Analyze site usage and improve user experience
- Detect, prevent and investigate fraud, abuse or security incidents
- Comply with legal obligations and enforce our agreements
Where required by law, we will ask for your consent (e.g., certain marketing or cookies). You can withdraw consent at any time.
4) Cookies & tracking technologies
We use first- and third‑party cookies, pixels and similar technologies to:
- Remember preferences and improve site functionality
- Understand performance (e.g., analytics tools)
- Deliver and measure ads (e.g., advertising pixels and similar technologies)
You can manage cookies through your browser settings and, where available, our Cookie Preferences tool. If you block cookies, some features may not work as intended.
Your choices
- Email marketing: use the “unsubscribe” link in any email.
- Interest‑based advertising: adjust settings on each platform (e.g., Google, Meta, LinkedIn) and via your device settings.
- Global Privacy Control (GPC): where legally required, we treat a qualifying GPC signal as an opt‑out for targeted advertising/sale/sharing (see California Privacy Rights).
5) Legal bases (EU/UK)
If you are in the EU/UK, we rely on the following legal bases:
- Contract – to provide Services you request
- Legitimate interests – to market, secure and improve our Services (balanced against your rights)
- Consent – for certain marketing and cookies
- Legal obligation – to comply with applicable laws
You may object to processing based on legitimate interests at any time.
6) How we share information
We share personal information only as needed and with safeguards:
- Vendors/Processors. Service providers that host, support or analyze our Services (e.g., cloud hosting, email, analytics, payment processors). They may only use data as instructed by us.
- Advertising/Analytics partners. To deliver, measure and improve campaigns and site experience.
- Business transfers. In connection with a merger, acquisition or asset sale.
- Legal. To comply with law, enforce our terms, or protect rights, safety or property.
We do not sell personal information in the traditional sense. We may engage in “sharing”/“selling” as defined under certain laws (e.g., California) when we use cookies for cross‑context behavioral advertising. See California Privacy Rights for opt‑out choices.
7) International data transfers
We may process and store information globally. Where required, we use appropriate safeguards for cross‑border transfers (e.g., Standard Contractual Clauses, UK Addendum, and additional measures) and will rely on adequacy decisions where available.
8) Data retention
We retain personal information for as long as needed to provide Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type of data and our legal/accounting requirements.
9) Security
We use administrative, technical and physical safeguards designed to protect personal information (e.g., access controls, encryption in transit, least‑privilege practices, monitoring). No method of transmission or storage is 100% secure; please use caution when sharing information online.
10) Your rights
Your privacy rights depend on your location. Subject to limits and exceptions, you may have rights to:
- Access, correct or update your information
- Delete your information
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Data portability
To exercise your rights, email contact@brandedrach.com We may verify your request and ask for more information to confirm your identity.
11) California privacy rights (CPRA/CCPA)
If you are a California resident, you have the following rights with respect to your “personal information” (including “sensitive personal information”), subject to legal exceptions:
- Right to know/access the categories and specific pieces of personal information we collected about you, the sources, purposes, and categories of third parties to whom we disclosed it
- Right to delete personal information we collected from you
- Right to correct inaccurate personal information
- Right to opt‑out of “sale” or “sharing” of personal information for cross‑context behavioral advertising
- Right to limit use/disclosure of sensitive personal information (we do not use SPI for purposes requiring a right to limit)
- Right to non‑discrimination for exercising these rights
How to exercise: Email contact@brandedrach.com with “California Request” in the subject, or (where implemented) use our Do Not Sell/Share My Personal Information control. We will verify and respond according to California law. We will honor a valid Global Privacy Control (GPC) signal as an opt‑out for browsers that send it.
Categories collected (past 12 months)
- Identifiers (e.g., name, email, IP address); Commercial information (transactions); Internet/Network activity (device, usage, cookies); Geolocation (approximate); Professional information (company, role).
We do not knowingly sell/share the personal information of consumers under 16.
12) Children’s privacy
Our Services are directed to business users and are not intended for children. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child has provided us information, contact contact@brandedrach.com and we will take appropriate steps.
13) Third‑party links and services
Our Services may link to third‑party sites, apps and platforms. Their privacy practices are governed by their own policies. Please review those policies before providing personal information to third parties.
14) Automated decision‑making
We may use automated tools to support ad delivery, measurement and fraud prevention. We do not make decisions with legal or similarly significant effects about individuals solely by automated means.
15) Changes to this Policy
We may update this Policy from time to time. We will post the updated version and revise the Effective Date. Material changes will be highlighted or otherwise communicated where required by law.
16) How to contact us
Email: contact@brandedrach.com
Mailing address: Branded Reach, [Street Address], [City], [State/Province], [Postal Code], [Country]
If you are in the EU/UK, you may also have the right to lodge a complaint with your local data protection authority.
Optional: Data Processing Addendum (DPA)
If you are a client and require a DPA, including Standard Contractual Clauses (SCCs) and UK Addendum (if applicable), please contact contact@brandedrach.com
Note: This Privacy Policy is intended to provide general information about our practices. It does not create any contractual or legal rights beyond those required by law.