Privacy Policy

BrandFlume (“we”, “us”, “our”) operates as a creator sourcing partner. This Privacy Policy explains how we collect, use, and protect your information when you interact with our website, submit an application, or engage with our services.

Information We Collect

We collect information you provide directly when you:

• Submit an application or inquiry form on our website
• Contact us via email or other communication channels
• Subscribe to updates or newsletters

This may include your name, email address, phone number, company name, website, business category, revenue range, and any additional information you choose to share.

How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and application submissions
• Evaluate potential partnerships and service fit
• Communicate with you about our services and opportunities
• Improve our website, services, and user experience
• Comply with legal obligations

Cookies & Site Measurement

Our website uses a small number of cookies and similar technologies. Strictly necessary storage (such as remembering your cookie consent choice) is always on because the site cannot function or demonstrate consent without it.

Optional measurement is off by default and only runs after you opt in through our consent banner. You can change or withdraw your choices at any time via the “Cookie Settings” link in the website footer. Withdrawing consent stops future optional tracking on that device but cannot necessarily erase processing a third-party provider already performed. See our Cookie Policy for the full list of technologies.

Vercel Analytics

We use Vercel Analytics to understand aggregate site usage such as page views and general performance. According to Vercel's documentation, this product is designed to be cookieless: it does not set advertising or tracking cookies on your device and reports aggregated statistics rather than building a browsing profile of you across sites.

TODO (legal review): confirm the applicable lawful basis, retention period and international-transfer position for Vercel Analytics (vendor documentation indicates processing in the United States) before treating this paragraph as a complete legal statement.

B2B Visitor / Company Identification (Dealfront / Leadfeeder)

With your prior opt-in consent to the “B2B visitor identification” category, our site loads the Dealfront / Leadfeeder tracker to identify visiting companies for B2B sales and marketing purposes. The tracker does not load until you actively accept that category, and it will not load at all if you reject non-essential cookies.

When enabled, the technology may involve the processing of your IP address, a visitor identifier, pages visited, visit date and time, visit duration, and referring source / UTM information, in order to attribute visits at company level. Depending on the circumstances this information can amount to personal data. We therefore do not describe this processing as anonymous.

According to the vendor's public documentation, the tracker uses first-party cookies and local storage (names reported by the vendor include `_lfa`, `_lfa_consent`, `_lfa_test_cookie_stored` and a `_lfa_expiry` local-storage entry). Exact durations may depend on your browser settings and the vendor's current configuration — see the Cookie Policy and the vendor's own cookie documentation for the latest detail rather than relying on any duration stated here.

TODO (legal/vendor review): confirm and record (a) the GDPR lawful basis relied on for this processing, (b) the retention period for identified visit data, (c) the data processing agreement / processor status with Dealfront Group, and (d) whether IP anonymisation and vendor-dashboard Consent Mode are enabled. Do not treat this section as complete until those points are confirmed.

You can withdraw consent at any time via “Cookie Settings” in the footer. Withdrawal prevents the tracker loading on future visits from that browser, and we make a best-effort attempt to clear readable Leadfeeder cookies/storage on that device. It does not automatically delete data already transmitted to or processed by the vendor. To exercise access, erasure, restriction, portability or objection rights — including objecting to direct marketing — contact us at the address below.

Third-Party Services

We may use third-party services to operate our website and deliver our services. These may include:

• Hosting and infrastructure providers (e.g., Vercel, Supabase)
• Aggregate analytics (Vercel Analytics)
• B2B visitor identification, only with consent (Dealfront / Leadfeeder)
• Email and communication platforms

These providers have their own privacy policies governing how they handle your data. We only share information with them as necessary to provide our services.

Data Protection

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights (GDPR)

If you are located in the UK or European Economic Area, you have the following rights under the GDPR:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate data
• Erasure — Request deletion of your personal data
• Restriction — Request limitation of how we process your data
• Portability — Request transfer of your data to another service
• Objection — Object to our processing of your data

To exercise any of these rights, contact us using the details below. We will respond within 30 days. You can also withdraw optional cookie consent at any time via “Cookie Settings” in the footer or review the Cookie Policy.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Application data is retained for the duration of our evaluation process and for a reasonable period thereafter for record-keeping purposes.

International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for any international data transfers in accordance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

hello@brandflume.com