Legal
Privacy Policy
Last updated: May 2026
BrandFlume (“we”, “us”, “our”) operates as a creator commerce infrastructure agency. This Privacy Policy explains how we collect, use, and protect your information when you interact with our website, submit an application, or engage with our services.
Information We Collect
We collect information you provide directly when you:
- Submit an application or inquiry form on our website
- Contact us via email or other communication channels
- Subscribe to updates or newsletters
This may include your name, email address, phone number, company name, website, business category, revenue range, and any additional information you choose to share.
How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and application submissions
- Evaluate potential partnerships and service fit
- Communicate with you about our services and opportunities
- Improve our website, services, and user experience
- Comply with legal obligations
Cookies & Analytics
Our website may use cookies and similar tracking technologies to understand how visitors interact with our site. We may use analytics services (such as Google Analytics or Vercel Analytics) to collect anonymous usage data including page views, session duration, and navigation patterns.
This data helps us improve our website and does not personally identify you. You can control cookie preferences through your browser settings.
Third-Party Services
We may use third-party services to operate our website and deliver our services. These may include:
- Hosting and infrastructure providers (e.g., Vercel, Supabase)
- Analytics and performance monitoring tools
- Email and communication platforms
These providers have their own privacy policies governing how they handle your data. We only share information with them as necessary to provide our services.
Data Protection
We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Your Rights (GDPR)
If you are located in the UK or European Economic Area, you have the following rights under the GDPR:
- Access — Request a copy of the personal data we hold about you
- Rectification — Request correction of inaccurate data
- Erasure — Request deletion of your personal data
- Restriction — Request limitation of how we process your data
- Portability — Request transfer of your data to another service
- Objection — Object to our processing of your data
To exercise any of these rights, contact us using the details below. We will respond within 30 days.
Data Retention
We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Application data is retained for the duration of our evaluation process and for a reasonable period thereafter for record-keeping purposes.
International Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for any international data transfers in accordance with applicable data protection laws.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.
Contact
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: