1. Who we are
BrandAmp Ltd (“BrandAmp”, “we”, “us”, “our”) is the data controller for the personal data described in this policy. We are a digital marketing agency registered in Ireland.
- Company name: BrandAmp Ltd
- Company registration number: 651269 (Companies Registration Office, Ireland)
- Registered office: Lisheen Cross, Ballynacally, Ennis Co. Clare, Ireland
- Email: hello@wearebrandamp.com
- Phone / WhatsApp: +353 86 1655 249
- Website: wearebrandamp.com
We are not required to appoint a Data Protection Officer. Questions about this policy or your data go to hello@wearebrandamp.com.
2. Scope of this policy
This policy explains how we collect, use and protect personal data when you:
- visit wearebrandamp.com
- contact us through our website form, by email, phone or WhatsApp
- request a consultation or become a client
- interact with us on social media (LinkedIn, Facebook, Instagram, TikTok, X)
We process personal data in line with the EU General Data Protection Regulation (GDPR), the Irish Data Protection Acts 1988–2018 and the ePrivacy Regulations 2011 (S.I. No. 336 of 2011).
When we run advertising campaigns or handle customer data on behalf of our clients, we act as a data processor for that client. In that case the client’s own privacy policy applies to their customers’ data.
3. Information we collect
Information you give us
- Contact form: your name, phone number (optional), email address and the content of your message.
- Email, phone and WhatsApp: your name, contact details and anything you choose to share about your business or enquiry.
- Clients: business contact details, billing and invoicing information, and access to advertising, analytics and social media accounts you grant us to deliver our services.
- Social media: your public profile name and any messages or comments you send us on our social channels.
Information collected automatically
When you visit our website, we and our service providers may collect technical data through cookies and similar technologies, including:
- IP address and approximate location (country or city)
- browser type, device type and operating system
- pages visited, time on page, referring website and how you reached us (for example, from an ad or search result)
- interactions such as clicks and form submissions
See section 5 for details on cookies.
We do not knowingly collect special category data (such as health, religious or political information). Please do not include it in messages to us.
4. How we use your information and our legal basis
We only use personal data where we have a lawful basis under Article 6 GDPR.
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to enquiries and consultation requests | Name, email, phone, message | Legitimate interests (replying to you); steps before entering a contract |
| Delivering our services to clients | Business contact details, account access, campaign data | Performance of a contract |
| Invoicing, accounting and tax records | Billing details, invoices | Legal obligation |
| Website analytics and improvement | Technical and usage data | Consent (via our cookie banner) |
| Advertising and remarketing | Cookie and pixel data | Consent (via our cookie banner) |
| Sending occasional updates to existing clients about similar services | Name, email | Legitimate interests / soft opt-in (you can opt out at any time) |
| Protecting our website and business, and handling legal claims | Technical data, correspondence | Legitimate interests; legal obligation |
Where we rely on legitimate interests, we have balanced our interests against your rights. You can object at any time (see section 9). We do not use your data for automated decision-making that has legal or similarly significant effects on you.
5. Cookies and tracking technologies
Cookies are small text files stored on your device. We use strictly necessary cookies to run the site. All other cookies and pixels load only after you accept them in our cookie banner. You can change your choice at any time through Cookie settings.
| Category | Provider | Purpose | Consent needed |
|---|---|---|---|
| Strictly necessary | WordPress, cookie banner tool, form spam protection | Site security, remembering your cookie choice, preventing spam form submissions | No |
| Analytics | Google Analytics 4 (via Google Tag Manager) | Counting visits and understanding how people use the site | Yes |
| Advertising | Meta Pixel (Facebook/Instagram) | Measuring ad results and showing our ads to people who visited the site | Yes |
| Advertising | Google Ads | Measuring ad conversions and remarketing | Yes |
We use Google Consent Mode, so Google tags do not set analytics or advertising cookies until you consent.
You can also block or delete cookies in your browser settings, and opt out of personalised ads through Google Ad Settings, Meta Ad Preferences and YourOnlineChoices. Blocking some cookies may affect how the site works.
6. Who we share your information with
We do not sell your personal data. We share it only with service providers who help us run our business, under contracts that require them to protect it and use it only on our instructions:
| Recipient | What they do |
|---|---|
| Acton BV | Hosts wearebrandamp.com |
| ActonBV | Website design, development and maintenance |
| Email and productivity provider [for example Google Workspace] | Email, file storage and collaboration |
| Google (Analytics, Ads, Tag Manager) | Website analytics and advertising measurement |
| Meta Platforms (Facebook, Instagram, WhatsApp) | Advertising measurement and messaging |
| Accounting software provider and our accountant | Invoicing, bookkeeping and tax compliance |
| Freelancers and contractors working for BrandAmp | Delivering client services under confidentiality obligations |
We may also disclose data where required by law, to a court or regulator, to protect our legal rights, or to a buyer if our business is sold or restructured.
When you use WhatsApp or our social media pages, those platforms also process your data under their own privacy policies.
7. International transfers
Some of our service providers (such as Google, Meta and LinkedIn) are based in, or transfer data to, countries outside the European Economic Area, including the United States.
When this happens, we make sure appropriate safeguards are in place, such as:
- the recipient’s certification under the EU–US Data Privacy Framework
- Standard Contractual Clauses approved by the European Commission
- an adequacy decision by the European Commission for the destination country
You can ask us for more information about these safeguards using the contact details in section 11.
8. How long we keep your information
We keep personal data only as long as we need it for the purpose it was collected, then delete or anonymise it.
| Data | How long we keep it |
|---|---|
| Enquiries that do not lead to work with us | Up to 12 months after our last contact |
| Client records and correspondence | For the duration of our engagement plus 6 years, in case of legal claims |
| Invoices and accounting records | 6 years from the end of the relevant financial year, as required by Irish tax and company law |
| Google Analytics data | 14 months |
| Cookies | See the expiry periods shown in our cookie banner |
If you ask us to delete your data and we have no legal reason to keep it, we will delete it sooner.
9. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you and get a copy
- Rectification of inaccurate or incomplete data
- Erasure of your data where there is no reason for us to keep it
- Restrict how we use your data in certain circumstances
- Object to processing based on legitimate interests, and to direct marketing at any time
- Data portability: receive your data in a structured, machine-readable format
- Withdraw consent at any time, including for cookies, without affecting earlier processing
To use any of these rights, email hello@wearebrandamp.com. We will respond within one month. We may ask you to confirm your identity first. Exercising your rights is free unless a request is clearly unfounded or excessive.
10. Security, children, other websites and changes
Security. We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), access controls, strong passwords and two-factor authentication on our business accounts. Access to client advertising accounts is limited to the people who need it. No system is fully secure, but if a breach affects your data and poses a risk to you, we will notify you and the Data Protection Commission as the law requires.
Children. Our services are for businesses. We do not knowingly collect data from anyone under 16. If you think a child has sent us personal data, contact us and we will delete it.
Other websites. Our site links to social media platforms, client websites and other third-party sites. We are not responsible for their privacy practices, so please read their policies.
Changes to this policy. We may update this policy from time to time. The date at the top shows when it last changed. We will tell clients directly about significant changes.
11. Contact us and complaints
If you have any questions about this policy or how we handle your data, contact us:
- Email: hello@wearebrandamp.com
- Phone: +353 86 1655 249
- Post: BrandAmp Ltd, Lisheen Cross, Ballynacally, Ennis, Co. Clare, Ireland
If you are unhappy with how we have handled your data, you have the right to complain to the Irish supervisory authority, the Data Protection Commission, at dataprotection.ie. We would appreciate the chance to resolve your concern first, so please contact us before you do.