Privacy Policy
What we collect when you get in touch, why we collect it, and, more to the point, everything this website deliberately does not do.
Contents
Re:Branded is a digital agency that designs, builds and runs websites, online stores and campaigns. This policy explains what happens to personal information when you visit this website or get in touch through it.
Re:Branded is the organisation responsible for that information, which data protection law calls the data controller. If you want to raise anything about privacy with us, the contact page reaches us, and the section below on talking to us about privacy sets out how a request about your own information is handled.
This policy covers this website only. Work we carry out for clients is governed by the written agreement for that work, which sets out how information inside their own systems and accounts is handled.
There is one place on this site where you can give us personal information: the enquiry form on the contact page. It asks for six things, and only two of them are required.
- Your name. Required.
- Your email address. Required, because it is how we reply.
- What the enquiry is about. Optional, and chosen from this site’s list of services rather than typed.
- Your business name. Optional.
- Your current website address. Optional.
- What you need. Optional free text.
Alongside those, the form records which page of this site you came from, for example that you were reading about ecommerce before you got in touch. That is a single service name taken from the web address, not anything you typed, and it is kept separate from the service you chose above, so that changing your answer does not erase where you arrived from. It exists so that whoever replies already knows what you were reading.
We ask for nothing else. There is no account to create, no newsletter sign-up, no payment taken on this site, and no field asking for anything sensitive. If you write something sensitive into the free-text box, that is your choice, but please don’t; email or a phone call is a better place for it.
Separately, and unavoidably, the servers that host this site keep ordinary technical request logs: an IP address, the page requested, a timestamp, a browser identifier. This site is hosted on Cloudflare Workers, which is edge-distributed, meaning the page is served to you from whichever of Cloudflare’s locations is nearest rather than from one machine in one place. Those logs are produced by Cloudflare rather than by anything we have written, and we do not use them to build a picture of individual visitors.
You give it to us. Every piece of personal information described above arrives because you typed it into the enquiry form, or because you emailed, called or messaged us directly.
We do not buy contact lists, scrape them, or take your details from data brokers, directories or social platforms. If you have never contacted us, we have nothing about you beyond whatever appears in the host’s ordinary server logs.
We use what you send for one purpose: to answer your enquiry and, if it goes that way, to scope and discuss the work. That means reading it, replying to it, asking follow-up questions, and preparing a written scope and quote.
The lawful bases we rely on are:
- Steps taken at your request before entering a contract. You asked us to look at your situation and come back to you, and answering that request needs your details.
- Legitimate interests. Running and securing this website, keeping a record of correspondence, and following up on a conversation you started. Our interest in replying to an enquiry sits comfortably alongside your interest in receiving a reply, which is why we consider it a fair basis.
- Legal obligation. Where we have to keep records for tax or accounting purposes once work is engaged.
We do not add enquirers to a marketing list, and we do not send marketing emails from this site. There is no profiling and no automated decision-making of any kind: a person reads every enquiry, and every decision about your enquiry is made by a person.
Giving us your details is entirely voluntary. The consequence of not giving them is simply that we have no way to reply, and you can always contact us another way instead.
We do not sell personal information, and we do not share it for anyone else’s marketing. A small number of suppliers necessarily handle it on our behalf in order for the site and our email to work at all:
- Cloudflare, which hosts this website on its edge-distributed Workers platform, serves every page and produces the technical request logs described above.
- Whatever delivers an enquiry from the form to us, which is how a submission reaches a person in the first place.
- Our email provider, which carries the reply and any correspondence after it.
Each of those acts on our instructions under a contract, and none of them is permitted to use your information for its own purposes. If you want to know which companies are involved in handling your own enquiry, ask us and we will tell you.
Beyond that, we would disclose information only where the law requires it: a court order, a regulator, or a legal obligation we cannot decline.
This website has no database. The enquiry form does not save what you type anywhere on this site; it validates it, trims it, and passes it straight on to be delivered. There is no visitor record, no stored submission and no account here to be compromised.
Your enquiry is therefore held in the place it is first delivered to, and in the email correspondence that follows. Nothing about it lives on this website once the page has finished submitting it.
Where a supplier we use handles information outside the country you sent it from, that is covered by the contract we hold with that supplier. If you want to know where your own enquiry is handled, ask us and we will tell you.
We keep what you send for as long as there is a reason to, and no longer. Because this site stores nothing itself, what exists is the correspondence: your enquiry as it was delivered, and any email exchange after it.
When an enquiry does not lead to work and the conversation has clearly ended, there is no longer a reason to keep it. Where work does go ahead, some records have to be kept to meet tax and accounting obligations, and those are kept for as long as those obligations require and then deleted.
You can ask us to delete your enquiry at any time. Unless we are required to keep it, we will.
The strongest security measure on this site is that it holds almost nothing. Beyond that:
- The site is served over an encrypted connection, so what you type into the form cannot be read in transit.
- Every field is checked and length-limited on the server as well as in your browser, so an oversized or malformed submission cannot ride through.
- The service name attached to your enquiry is checked against our own list of services rather than trusted from the web address, so it can never carry arbitrary text into our inbox.
- Where an enquiry is written to a server log for diagnostics, the email address is masked first.
- Access to enquiries and correspondence is limited to the people who need it to reply to you.
No system is perfect, and we would not claim otherwise. If something did go wrong in a way that put your information at risk, we would tell you and the regulator where we are required to.
Data protection law gives you rights over the information we hold about you. You can ask us to:
- Show you what we hold about you, and give you a copy.
- Correct it if it is wrong or incomplete.
- Delete it, where we have no continuing reason to keep it.
- Restrict what we do with it while a question about it is being resolved.
- Object to us relying on legitimate interests, including for any direct marketing. If you object to marketing, we stop, no questions asked.
- Take it with you in a portable, machine-readable form.
- Withdraw consent, where consent was what we relied on. Withdrawing it does not undo anything done before you did.
Exercising any of these is free, and we will respond within one month. Ask us through the contact page. We may need to check who you are first, which usually means continuing the conversation from the address you originally wrote from.
If you are unhappy with how we have handled your information, you are entitled to complain to the data protection regulator for the country you live or work in. We would rather you came to us first so we can put it right, but that is your choice, not a condition.
This site sells professional services to businesses. It is not directed at children, we do not knowingly collect information about them, and if we learned that we had, we would delete it.
Any question about this policy, and any request about your own information, goes to the same place. Use the contact page and say that your message is a privacy request, so that it is treated as one.
Email: office@rebrandeddigital.com
For a request about your own data we may need to check who you are before we act on it, which usually means continuing the conversation from the address you first wrote from. We will reply within one month, and we will tell you if anything is going to take longer than that.
We update this policy when what we actually do changes: a new supplier, a new form, a measurement tool, a different way of working. The version on this page is always the current one, and the date at the top of the page tells you when it last changed.
Where a change materially affects people who have already contacted us, we will tell them directly rather than relying on them to re-read this page.
The other half of the paperwork
These two documents are written to be read together. One covers what happens to information, the other covers what happens to work.