Privacy Notice
1. About this policy
Brand Impact Group respects your privacy and is committed to protecting your personal information.
This policy explains how we collect, use, store and share personal information when you:
visit brandimpactgroup.co.uk;
contact or communicate with us;
enquire about, purchase or provide services;
attend one of our meetings or events;
join or interact with our professional network; or
receive marketing or other business communications from us.
It also explains your rights under UK data protection law.
2. Who we are
Brand Impact Group is the controller responsible for the personal information described in this policy.
Legal entity: Impact GRP Ltd
Company number: 08877268
Registered address: 1 Neates Yard, Marlborough, SN8 1LZ
Email: hello@brandimpactgroup.co.uk
Website: brandimpactgroup.co.uk
References to “Brand Impact Group”, “we”, “us” and “our” mean the legal entity identified above.
3. Personal information we collect
Depending on how you interact with us, we may collect:
Identity information, such as your name and title.
Contact information, such as your business email address, telephone number, postal address and social-media details.
Professional information, such as your employer, job title, industry, professional interests and areas of expertise.
Enquiry and communication information, including messages, meeting notes, correspondence and information you provide through forms.
Relationship information, including your connection to our clients, partners, network or events.
Commercial information, such as services discussed or purchased, contracts, invoicing details and payment records.
Marketing information, including your communication preferences, interactions with our communications and records of consent or objections.
Technical and usage information, such as your IP address, browser, device, approximate location, pages visited, referral source and interactions with our website.
Any other information you choose to provide to us.
We do not intentionally collect special-category personal information through our website. Please avoid providing sensitive information unless it is necessary and we have agreed to receive it.
4. How we collect personal information
We collect information:
directly from you when you contact us, complete a form, meet us, attend an event or enter into a business relationship with us;
automatically when you use our website, through cookies and similar technologies;
from clients, colleagues, partners, event organisers and professional referrals;
from publicly available business sources, such as company websites, Companies House, professional networking platforms and published articles; and
from business-information or contact-data providers, where permitted by law.
When we obtain your information from another source, we take reasonable steps to provide you with relevant privacy information within the period required by law.
5. How and why we use your information
We use personal information only where we have a lawful reason to do so.
Responding to enquiries and arranging meetings
We use identity, contact and communication information to respond to business enquiries and arrange discussions. We do this to take steps before entering into a contract and because we have a legitimate interest in responding to prospective clients and partners.
Providing and managing our services
We use identity, contact, professional, relationship and commercial information to provide and administer our services. Our lawful bases are contractual necessity, compliance with legal obligations and our legitimate interest in delivering services to organisations.
Managing client, supplier and partner relationships
We use identity, contact, professional, relationship and commercial information to manage our business relationships. We do this where necessary to fulfil a contract or pursue our legitimate business interests.
Maintaining our professional network and facilitating introductions
We use identity, contact, professional and relationship information to maintain professional relationships and facilitate relevant introductions. We do this on the basis of our legitimate interests in operating our network and providing our services.
Sending business communications and marketing
We use identity, contact, professional, relationship and marketing information to send relevant information about our services, insights, events and opportunities. We rely on consent where required or on our legitimate interests where business-to-business marketing is permitted.
Operating, protecting and improving our website
We use technical and usage information to operate our website, maintain its security and improve its performance. We do this on the basis of our legitimate interests in website security and administration.
Measuring website use
With your consent, we use technical and usage information collected through non-essential analytics to understand how visitors use our website.
Maintaining financial and business records
We use identity, contact and commercial information to maintain appropriate financial, contractual and business records. We do this to comply with legal obligations and pursue our legitimate business interests.
Establishing, exercising or defending legal rights
We may use information relevant to a dispute or claim where necessary to establish, exercise or defend our legal rights. We do this on the basis of our legitimate interests and legal obligations.
Preventing fraud, misuse and security incidents
We use identity, contact, technical and usage information to identify and prevent fraud, misuse and security threats. We do this to comply with legal obligations and protect our legitimate interests..
6. Marketing communications
We may send relevant information about our services, insights, events and opportunities to business contacts where we have consent or where the law otherwise allows us to do so.
You can ask us to stop using your personal information for direct marketing at any time by:
using the unsubscribe link in a marketing email; or
contacting us at hello@brandimpactgroup.co.uk
We will retain limited information on a suppression list so that we can respect your request and avoid contacting you again for marketing purposes.
We do not sell personal information to third parties for their own marketing.
7. Cookies and similar technologies
Our website may use:
Strictly necessary cookies, required for security and core website functions.
Preference cookies, which remember choices you make.
Analytics cookies, which help us understand how visitors use the website.
Marketing cookies, which may measure campaigns or support relevant advertising.
Except where the law permits otherwise, we will ask for your consent before placing non-essential cookies on your device. You can accept, reject or change your preferences through our cookie controls.
Further information about individual cookies, their providers and how long they remain active should be provided in our cookie notice or cookie-preference tool.
8. Who we share information with
Where necessary, we may share personal information with:
website-hosting and technology providers;
customer-relationship management and business-administration providers;
email, communications and event-management providers;
analytics and website-performance providers;
payment, accounting and banking providers;
professional advisers, including lawyers, accountants and insurers;
clients, partners or network members where an introduction or collaboration has been agreed or is reasonably expected;
regulators, courts, law-enforcement bodies and public authorities where required; and
a purchaser, investor or adviser involved in a proposed sale, restructuring or transfer of our business.
Our suppliers may process information only for agreed purposes and must protect it appropriately.
We do not disclose your contact details to another organisation for its own marketing unless we have clearly told you and have an appropriate lawful basis.
9. International transfers
Some of our suppliers may store or process personal information outside the United Kingdom.
Where information is transferred internationally, we use an approved legal mechanism where required. This may include transferring information to a country covered by UK adequacy regulations or using approved contractual safeguards, such as the UK International Data Transfer Agreement or UK Addendum.
You can contact us for further information about the safeguards used for a particular transfer.
10. How long we retain information
We keep personal information only for as long as reasonably necessary.
Our usual retention periods are:
General enquiries: up to 24 months after our last meaningful contact.
Client and supplier records: for the relationship and generally seven years afterwards.
Professional-network and business-contact records: while the relationship remains active or relevant, reviewed at least every 24 months.
Marketing records: until you unsubscribe, object or the information is no longer relevant.
Suppression records: for as long as necessary to ensure we continue to respect your marketing objection.
Cookie and analytics information: for the periods identified in our cookie-preference tool or cookie notice.
We may retain information for longer where required by law or where necessary to establish, exercise or defend legal claims.
11. Security
We use appropriate organisational and technical measures designed to protect personal information from unauthorised access, alteration, disclosure, loss or destruction.
Access is restricted to people and service providers who need the information for legitimate business purposes and who are subject to appropriate confidentiality obligations.
No internet-based service is completely secure, but we review our safeguards and take reasonable steps to manage security risks.
12. Your rights
Depending on the circumstances, you may have the right to:
request access to your personal information;
ask us to correct inaccurate or incomplete information;
ask us to erase your information;
ask us to restrict how we use your information;
object to particular uses of your information;
receive certain information in a portable format;
withdraw consent at any time, where we rely on consent; and
complain to the Information Commissioner’s Office.
These rights are not absolute, and an exemption may apply in some circumstances. We may need to verify your identity before responding to a request.
Your absolute right to object to direct marketing
You have the right to object at any time to our use of your personal information for direct-marketing purposes. If you object, we will stop using it for those purposes.
To exercise a right, contact hello@brandimpactgroup.co.uk
13. Complaints
Please contact us first if you have concerns about how we use your personal information. We will do our best to resolve the issue.
You also have the right to complain to the Information Commissioner’s Office:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk/make-a-complaint/
14. Children
Our website and services are intended for business users and are not directed at children. We do not knowingly collect personal information from anyone under 18 through the website.
15. Third-party websites
Our website may link to websites operated by other organisations. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.
16. Changes to this policy
We may update this policy when our services, suppliers or legal obligations change. The latest version will be published on our website with its updated date.
17. Contact us
Questions, requests and complaints about this policy or our use of personal information should be sent to:
Brand Impact Group
1 Neates Yard, Marlborough, SN8 1LZ
hello@brandimpactgroup.co.uk