New Brand Media Ltd Last updated: July 2026
Who we are
New Brand Media Ltd is a digital design consultancy registered in England and Wales.
Registered address: 1 Arena House, 25 Cambridge Place, Cambridge CB2 1NS Email: hello@newbrandmedia.com Phone: +44 560 366 0374
We are the data controller for the personal data collected through this website. This means we determine the purposes and means of processing your data and are responsible for handling it in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What personal data we collect
We collect personal data in the following ways:
When you ask a question or contact us
If you submit a question through our website form, we collect:
- Your name
- Your email address
- The content of your question
- Optional: how you found us
- Optional: which services you are interested in
We do not ask for a telephone number on that form. If you contact us by email, phone, or WhatsApp, we retain a record of that correspondence, including any personal data you choose to share.
When you book a call
If you book a call through our scheduling tool (Cal.com), Cal.com collects the details you enter in that booking flow (typically name, email, and any notes you provide). We use those details to run the meeting and follow up.
When you visit our website
Our hosting and content systems may process technical data needed to deliver pages securely, such as IP address, browser type, and request logs. We do not currently load Google Analytics or similar marketing analytics on the public site. See our Cookie Policy for what is set in the browser.
How we use your personal data
We use the personal data we collect for the following purposes:
Responding to enquiries: When you contact us through the form, email, phone, or WhatsApp, we use your details to reply and follow up.
Managing bookings: When you book a call, we use your details to schedule and prepare for the conversation.
Managing client relationships: If you become a client, we use your contact details to manage our working relationship, deliver services, and communicate about your projects.
Operating and securing the website: Technical data helps us keep the site available, diagnose faults, and protect against abuse.
Legal and compliance obligations: We may need to retain or process certain data to comply with legal requirements, resolve disputes, or enforce agreements.
Legal bases for processing
We process your personal data under the following legal bases as defined by UK GDPR:
Legitimate interests (Article 6(1)(f)): Responding to enquiries you have sent us, managing client communications, and operating a secure website. We have assessed that our legitimate interest in running a professional business and responding to people who contact us does not override your rights and freedoms.
Contract (Article 6(1)(b)): Where you become a client, we process your data to fulfil our contractual obligations to you.
Legal obligation (Article 6(1)(c)): Where we are required by law to process or retain data.
Consent (Article 6(1)(a)): If we introduce non-essential cookies or marketing communications that require consent, we will ask for it and you can withdraw it at any time.
How long we keep your data
We retain personal data only for as long as necessary:
- Enquiries that do not lead to a project: We retain contact form and enquiry correspondence for up to 12 months, after which it is deleted unless we still need it for an ongoing conversation or dispute.
- Client project data: We retain data relating to completed projects for up to six years, in line with standard commercial and legal requirements.
- Financial records: Where data appears in invoices or financial documents, we retain these for seven years in compliance with HMRC requirements.
- Server and security logs: Retained only as long as needed for security and operations, typically a short rolling period set by our hosts.
Who we share your data with
We do not sell your personal data to third parties. We may share data with service providers that process it on our behalf, including:
- Vercel: hosts the public website front end
- Kinsta / WordPress: hosts the content management system that supplies page content
- Resend: delivers Ask a Question form emails to our inbox
- Cal.com: powers call booking on the contact page
- Email and messaging providers: for ordinary business email and WhatsApp replies
- Professional advisors: accountants, solicitors, or similar, where needed
- Legal authorities: where required by law or a court order
These providers process data under their own terms and, where applicable, data processing arrangements. We require them to handle personal data securely and in accordance with applicable data protection law.
Transferring data outside the UK
Some of the third-party services we use may process data outside the United Kingdom (for example providers based in the United States). Where this occurs, we rely on appropriate safeguards such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or another lawful transfer mechanism.
Cookies
We use a small number of cookies and similar technologies. For full details, see our Cookie Policy.
Your rights
Under UK GDPR, you have the following rights in relation to your personal data:
Right of access: You can request a copy of the personal data we hold about you.
Right to rectification: You can ask us to correct any inaccurate or incomplete data we hold.
Right to erasure: You can ask us to delete your personal data in certain circumstances, such as where it is no longer necessary for the purpose it was collected.
Right to restriction: You can ask us to restrict how we use your data in certain circumstances, for example while a dispute is being resolved.
Right to data portability: Where processing is based on your consent or a contract, you can ask us to provide your data in a structured, machine-readable format.
Right to object: You can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests.
Rights related to automated decision-making: We do not use automated decision-making or profiling that produces legal or similarly significant effects.
Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before the withdrawal.
To exercise any of these rights, please contact us at hello@newbrandmedia.com. We will respond within one calendar month.
Right to complain
If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
ICO website: www.ico.org.uk ICO helpline: 0303 123 1113
We would appreciate the chance to address your concerns directly first. Please reach out to us at hello@newbrandmedia.com.
Changes to this policy
We review this Privacy Policy periodically and will publish any changes on this page. We will update the "last updated" date at the top of the page when we make changes.
How to contact us
For any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: hello@newbrandmedia.com Post: New Brand Media Ltd, 1 Arena House, 25 Cambridge Place, Cambridge CB2 1NS
