Privacy Policy

1. Who we are

Brand Catalyst is a web design studio trading in South Oxfordshire, England. We design, build and maintain websites for small and medium-sized businesses across the UK.

Contact us:
Email: brandcatalystuk@outlook.com
Phone / WhatsApp: +44 7923 350503
Location: South Oxfordshire, England

For the purposes of UK data protection law, Brand Catalyst is the data controller of the personal information you provide to us.

2. What personal data we collect

We collect personal data only when you actively provide it to us. This includes:

Contact form submissions — your name, email address, phone number and a description of your project or enquiry.
Email and WhatsApp correspondence — messages you send us directly.
Technical data — your IP address and browser type, automatically logged by our hosting provider (Hostinger) for security and operational purposes.

We do not use cookies for tracking or advertising. We do not use Google Analytics, Meta Pixel, or any third-party analytics tool on this website.

3. Why we collect it and our legal basis

We process your personal data for the following purposes:

To respond to your enquiry — legal basis: legitimate interests (responding to a business enquiry you initiated).
To provide our services — legal basis: performance of a contract (where you become a client).
To comply with legal obligations — legal basis: legal obligation.

We will never contact you for marketing purposes without your explicit consent.

4. How long we keep your data

We retain enquiry data for up to 2 years from the date of your last contact. Client project data (emails, files, correspondence) is kept for 6 years after the end of our engagement in line with UK tax and record-keeping requirements. You may request deletion at any time — see Section 7.

We do not sell or rent your personal data. We may share limited data with the following third-party service providers who help us deliver our services:

Hostinger (web hosting) — your contact form submissions are transmitted via our hosted server. Hostinger processes data under their own GDPR-compliant privacy policy.
WhatsApp / Meta — if you contact us via WhatsApp, your messages are subject to Meta's privacy policy. We use WhatsApp for client communication only.
Microsoft (Outlook) — our business email is hosted by Microsoft. Emails are stored on Microsoft's servers under their privacy policy.

We do not transfer your personal data outside the UK or EEA without appropriate safeguards in place.

6. Cookies

This website uses only essential session cookies required for the site to function correctly (for example, to remember navigation state within your browsing session). These cookies are not used for tracking, advertising or analytics, and do not require your consent under UK PECR.

No third-party cookies are set on this website.

7. Your rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate data.
Right to erasure — you can ask us to delete your data, subject to any legal obligations we have to retain it.
Right to restrict processing — you can ask us to limit how we use your data.
Right to data portability — you can ask for your data in a machine-readable format.
Right to object — you can object to our processing based on legitimate interests.

To exercise any of these rights, email us at brandcatalystuk@outlook.com. We will respond within 30 days.

8. How we keep your data secure

Our website is served over HTTPS (SSL/TLS). We limit access to personal data to only those who need it to deliver your project, and we do not store contact form submissions in a third-party CRM. Emails are protected by Microsoft's enterprise security infrastructure.

9. Complaints and the ICO

If you are unhappy with how we have handled your personal data, please contact us first at brandcatalystuk@outlook.com and we will do our best to resolve the matter.

You also have the right to lodge a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

10. Changes to this policy

We may update this Privacy Policy from time to time. Any material changes will be reflected by updating the date at the top of this page. We recommend checking back periodically.

Questions about this policy? Email us at brandcatalystuk@outlook.com.

Read our Terms & Conditions