Privacy
Policy

Effective date: 15 September 2026

This Privacy Policy explains how Brandpost (“Brandpost”, “we”, “us”) collects, uses, shares, and protects personal information when you visit brandpost.com, contact us, or work with us as an advertising client. It should be read with our Terms & Conditions.

Advertising work often involves two roles. For this website and our own marketing, Brandpost is the controller of personal information. When a client asks us to run campaigns using that client’s customer lists, pixels, or similar tools, we typically act as a processor (or equivalent service provider) on the client’s instructions. The client remains responsible for telling its own customers how their data is used in advertising.

1. Who is responsible

Brandpost is an advertising studio. For questions about this Policy or to exercise privacy rights, write to info@brandpostad.com with the subject “Privacy”.

If you are a consumer who saw a Brandpost-produced advertisement for another brand, that brand (our client) is usually the controller of any data collected on its sites, apps, stores, or ad accounts. Please use that brand’s privacy notice first. We will help a client respond where we hold data on their behalf.

2. Information we collect

We collect only what we need to run the studio and deliver advertising services:

• Enquiry and contact data: name, company, role, email, phone, project description, files you attach, and correspondence.
• Client and supplier data: billing contacts, job titles, contracts, invoices, brand assets, and project feedback.
• Website data: IP address, device and browser type, pages viewed, referring URL, approximate location derived from IP, and similar diagnostic logs.
• Marketing data: whether you opened a studio email (if we send any), event RSVPs, and preferences you give us.
• Recruitment data: CVs and portfolios if you apply to work with us.
• Public professional data: information you publish on company sites or professional networks if we research a prospective client relationship.

We do not require sensitive categories of data (health, religion, precise geolocation, or similar) to use this website. Do not send such data in a contact form unless a project specifically requires it and we have agreed a secure channel.

3. How we use information

We use personal information to:

• respond to enquiries and prepare proposals;
• perform contracts: branding, campaign creative, production, and media support;
• invoice, keep accounting records, and prevent fraud;
• operate, secure, and improve this website;
• send studio updates where permitted (you may opt out at any time);
• comply with law, defend claims, and enforce our Terms;
• show selected Work in our portfolio after a campaign is public, using only business contact details and approved creative.

We do not sell personal information and we do not share it for cross-context behavioural advertising of Brandpost’s own services, except for standard analytics or ads you would expect on a studio site as described below.

4. Legal bases

Where a privacy law requires a legal basis, we rely on:

• Contract: to take steps at your request before a contract and to perform a client or supplier agreement;
• Legitimate interests: to run an advertising studio, reply to business enquiries, keep the site secure, keep limited records of pitches, and show public case studies — balanced against your rights;
• Consent: where we use non-essential cookies, send optional marketing, or a law requires consent for a specific advertising technology;
• Legal obligation: tax, accounting, and responding to lawful requests.

You may withdraw consent without affecting processing that already occurred, or that continues on another lawful basis.

5. Cookies and similar technologies

This website may use strictly necessary cookies to operate (for example, load balancing or security). If we use analytics, we do so to understand aggregate traffic — which pages are read, typical devices — not to build a personal profile for sale.

If we place a pixel or similar tag on this site for our own awareness campaigns, we will treat it as advertising technology and, where required, request consent. Browser controls can block cookies; some site features may then work less well.

Third-party embeds (fonts, video hosts, or map tools, if used) may set their own cookies. Their policies apply to those tools.

6. Campaign and audience data

When we produce or traffic advertising for a client, additional data may be processed:

• Ad serving and measurement: impressions, clicks, conversions, and viewability as reported by media platforms. Reports we receive are usually aggregated. Log-level data, if any, is processed on the client’s instructions.
• Customer lists: hashed emails or similar identifiers the client uploads for customer match or lookalike modelling. We do not use a client’s customer list to advertise Brandpost or another client.
• Pixels and conversion APIs: implemented on a client property only when the client asks. The client must provide the consumer-facing notice and collect consent where the law requires it.
• Creative production: names and images of talent, employees, or customers appearing in content, based on releases the client supplies or we obtain as part of the job.

We do not use campaign personal data to train public generative-AI models. If we use AI tools as an aid in drafting or production, we will not paste a client’s confidential customer files into consumer tools that claim a right to train on prompts, unless the client agrees in writing.

Profiling for advertising (interest segments, lookalikes) is performed by the media platforms under their terms, or by the client’s own tools. Brandpost does not make solely automated decisions that produce legal effects about website visitors.

7. When we share information

We share personal information only as needed:

• Service providers: hosting, email, accounting, project tools, and similar processors under contract;
• Production partners: photographers, editors, printers, or studios engaged for a job, limited to what they need;
• Media platforms and publishers: when the client instructs us to traffic a campaign (for example Google, Meta, programmatic partners);
• Professional advisers: lawyers, insurers, and auditors under confidentiality;
• Authorities: if required by law or to protect rights, safety, or the integrity of a campaign;
• Business transfer: if we merge, restructure, or transfer studio assets, information may move with the business under this Policy.

We do not license enquiry lists to unrelated third parties for their independent marketing.

8. International transfers

Brandpost and its providers may process information in countries other than your own. Where a transfer law applies, we use appropriate safeguards such as contractual clauses recognised by the relevant authority, or a transfer that is otherwise lawful (for example, a necessary contract with you).

Media platforms you already use as a consumer or advertiser operate globally under their own transfer mechanisms.

9. Retention and security

We keep enquiry records for as long as needed to respond and for a reasonable period afterward if a project may restart. Client files, contracts, and invoices are kept for the life of the relationship and for statutory accounting and limitation periods (typically up to seven years, or longer if a claim is reasonably anticipated). Campaign working files may be archived after handover; we may delete unused source files after a stated archive window in the proposal.

Audience lists supplied for a specific flight are deleted or returned when the campaign ends, or sooner if the client instructs, unless law requires a short backup copy.

We use reasonable administrative, technical, and physical measures appropriate to an advertising studio of our size. No method of transmission or storage is completely secure. Please use the contact form only for ordinary business information.

10. Your rights

Depending on your location, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate data;
• delete data in certain cases;
• restrict or object to processing, including processing based on legitimate interests;
• receive a portable copy of data you provided;
• withdraw consent;
• opt out of marketing emails from Brandpost;
• lodge a complaint with a data-protection authority in your country.

Some US state laws also provide rights to know, delete, correct, and opt out of “sale” or “sharing” of personal information. Brandpost does not sell personal information. If our use of a standard advertising or analytics cookie is treated as “sharing” under those laws, you may email us to opt out for this website.

To exercise a right, email info@brandpostad.com. We may need to verify your identity. We will not discriminate against you for exercising privacy rights. If we process data only as a client’s processor, we will direct your request to that client where appropriate.

11. Children

This website and Brandpost’s studio marketing are directed at businesses, not children. We do not knowingly collect personal information from children under 16 via this site. Advertising intended for a child audience is produced only on a client brief and must follow applicable child-advertising and parental-consent rules; those campaigns are the client’s responsibility as controller.

12. Contact and changes

We may update this Policy to reflect legal, technical, or business changes. The effective date at the top will be revised. Material changes will be posted on this page. If a change affects an active processing instruction from a client, we will notify the client as required by our contract.

Third-party websites linked from case studies or blogs have their own policies. We are not responsible for their practices.

Privacy requests and questions: info@brandpostad.com.