Urban Brand Creative – GDPR Compliance Policy
Urban Brand Creative (UBC) is committed to protecting the personal data of our clients and their customers. As a digital marketing and branding agency, we adhere to the principles of the General Data Protection Regulation (GDPR) to ensure all data is handled responsibly, transparently, and securely.
1. Data Collection and Use
1.1 Purpose of Data Collection:
We collect and process personal data only for the purposes agreed with our clients, including but not limited to:
Website development and migration.
Digital marketing campaigns (e.g., email marketing, social media management).
Data analytics and performance reporting.
1.2 Lawful Basis for Processing:
We process personal data under the lawful basis of:
Contractual Obligations: To fulfil the services outlined in our agreements.
Legitimate Interests: To improve client campaigns and performance.
Consent: For specific marketing activities where explicit consent is required.
2. Data Retention
2.1 Retention Period:
We retain client data for the duration of the project and for a maximum of 12 months after the project’s completion unless otherwise required by law or agreed with the client.
2.2 Deletion of Data:
Upon completion of the project or upon request, Urban Brand Creative will:
Transfer all relevant data to the client.
Delete any client-related data from our systems unless required for legal or accounting purposes.
3. Data Access and Ownership
3.1 Client Data Ownership:
All data provided by clients remains their property. Urban Brand Creative does not claim ownership of this data and will not use it for any purposes beyond the agreed services.
3.2 Access to Data:
Clients have the right to access all data related to their project. Requests for access can be submitted to [insert contact email]. We will comply within 30 days, as required by GDPR.
4. Data Security
4.1 Storage:
All client data is securely stored in encrypted systems and restricted to authorised personnel only.
4.2 Third-Party Tools:
We use GDPR-compliant third-party tools and platforms (e.g., Google Workspace, Microsoft Workplace, Squarespace, Shopify, Mailchimp) for project delivery.
4.3 Data Breaches:
In the unlikely event of a data breach, we will notify the affected parties and the relevant data protection authority within 72 hours, as required by GDPR.
5. Client Responsibilities
5.1 Data Accuracy:
Clients are responsible for ensuring the accuracy and legality of the data provided to Urban Brand Creative.
5.2 Timely Access:
Clients are encouraged to download and retain copies of any data provided to them during the project. Urban Brand Creative will not store project data indefinitely.
6. Rights of Data Subjects
6.1 Access and Rectification:
Data subjects (e.g., the client’s customers) may request access to or correction of their data. These requests will be processed promptly, in coordination with the client.
6.2 Right to Erasure:
Data subjects may request the deletion of their data. Urban Brand Creative will assist clients in fulfilling such requests, provided they align with GDPR requirements.
7. Handling Disputes
7.1 Communication:
Urban Brand Creative is committed to resolving any GDPR-related disputes professionally and promptly.
7.2 Supervisory Authority:
Clients and data subjects may contact the relevant Data Protection Commission if concerns remain unresolved. For Ireland, this is the Data Protection Commission: https://www.dataprotection.ie.
8. Contact Us
For any GDPR-related queries, data access requests, or concerns, please contact:
Urban Brand Creative
Email: hello@urbanbrandcreative.com
Disclaimer
This GDPR compliance policy reflects Urban Brand Creative’s commitment to data protection and privacy. It is not a substitute for legal advice. Clients are advised to seek their own legal counsel regarding their GDPR obligations.