top of page

PRIVACY POLICY

Last updated: [[Date]]

1. Introduction

Brand Duck (“we”, “us”, “our”) provides branding, website, and design services to small businesses.
This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or submit a form.

By using this website or providing information to us, you agree to this policy.

2. Information We Collect

We may collect the following information:

A. Information you provide directly

  • Name

  • Email address

  • Phone number

  • Business details

  • Project information submitted through our proposal form

  • Files, brand assets, or content you upload

  • Any information you provide when contacting us

B. Payment information

All payments are processed securely through Stripe.
We do not store or have access to your full payment details.

C. Automatically collected data

When you visit our website, basic analytics and usage data may be collected, such as:

  • IP address

  • Device type

  • Browser type

  • Pages viewed

  • Time spent on site

This is handled by Wix, Tally, and standard analytics tools.

3. How We Use Your Information

We use your information for:

  • Preparing quotes and proposals

  • Delivering the services you have requested

  • Managing your project and communicating with you

  • Improving our website and service offering

  • Processing payments

  • Legal and administrative purposes

We will never sell your data.

4. Legal Basis for Processing (UK GDPR)

We process your data under the following lawful bases:

  • Contractual necessity — to prepare quotes and deliver your project

  • Legitimate interest — to improve our website and services

  • Consent — when you submit a form or choose to be contacted

  • Legal obligation — for financial and tax records

5. Data Storage & Security

Your data may be stored within:

  • Wix (website hosting)

  • Tally (form submissions)

  • Gmail (communication)

  • Google Drive / Sheets (project management)

  • Stripe (payments)

All platforms use modern security measures.
Only authorised team members and subcontractors (e.g. designers or developers) may access your data when required to deliver your project.

6. Data Sharing

We may share limited data with:

  • Subcontractors (e.g. designers, developers) only to complete your project

  • Payment processors (Stripe)

  • Hosting and analytics providers (Wix, Tally)

We do not share your data with third parties for marketing.

7. How Long We Keep Your Data

We retain project records, communications, and completed work for up to 6 years for business, tax, and reference purposes.

At any time, you may request deletion where legally permitted.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your data

  • Correct inaccurate data

  • Request deletion

  • Restrict or object to processing

  • Request a copy of your data

To exercise your rights, email: [[Your Email]]

9. Contact

Brand Duck
Email: [[Your Email]]
Address: [[Your Address]]

bottom of page