Menu

Privacy policy

Last updated: 19 October 2026

This policy explains what personal information BMB Creative collects through this website and in the course of our work, why, and what your rights are. It is written to meet the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

BMB Creative is the trading name of Nick Lowe, a sole trader based in Lancashire, England. We are the “controller” of the personal information described here.

What we collect

When you use our contact form

Your name and email address, your message, and anything else you choose to give us: your organisation, phone number, project type and approximate scale. We also record the date and time you sent it and which page it was sent from.

When you contact us directly or become a client

Your contact details, what you tell us about your project, the files and content you send us for the work, and the details we need to invoice you and keep accounts.

What we don’t collect

This website does not use analytics, advertising or social media tracking. We don’t build profiles of visitors and we never sell personal information.

Why we use it, and our legal basis

  • To reply to your enquiry and discuss your project – because you have asked us to (steps before entering a contract) and our legitimate interest in responding to people who contact us.
  • To carry out work for you – to perform our contract with you or your organisation.
  • To invoice and keep financial records – to meet our legal obligations, for example to HMRC.
  • To protect the contact form from spam and abuse – our legitimate interest in keeping the website secure (see Google reCAPTCHA below).

We will not add you to a mailing list or send you marketing emails. If we ever start a newsletter, we will only send it to people who have opted in to it separately.

Who we share it with

We only share personal information with the services we need to run the business. They process it on our behalf and may not use it for their own purposes.

  • Our website host – Google Cloud, stores this website, including copies of contact form messages.
  • Google – form messages are delivered to and stored in our Google (Gmail) email accounts. Google reCAPTCHA checks that contact form submissions come from a person rather than a spam bot.
  • Twilio SendGrid – delivers the emails our website sends.
  • Our accountant and HMRC – where needed for tax and accounting.
  • Printers and other suppliers – only where a project needs them and you have agreed.

Google and Twilio SendGrid may process information in the United States. Where this happens, the transfer is protected by the UK’s data bridge with the US or by contract terms approved by the UK government.

Google reCAPTCHA

Our contact page uses Google reCAPTCHA to stop spam. It collects information about how the page is used (such as your IP address and browser details) and sends it to Google for analysis. Google’s use of this information is covered by its privacy policy and terms of service. reCAPTCHA only loads on the contact page. If you would rather not use it, you can email us instead.

How long we keep it

  • Enquiries that don’t lead to work – deleted within 12 months of our last contact.
  • Client records and invoices – kept for 6 years after the end of the tax year they relate to, as required for tax purposes.
  • Project files – kept for as long as is useful to support you with future work, unless you ask us to delete them.

Your rights

You have the right to:

  • ask for a copy of the personal information we hold about you
  • ask us to correct information that is wrong or incomplete
  • ask us to delete your information
  • object to or ask us to restrict how we use it
  • ask for information you gave us to be sent to you or another organisation in a reusable format

To use any of these rights, email brandmybusinessuk@gmail.com. There is no charge and we will reply within one month.

Complaints

If you are unhappy with how we have used your information, please contact us first so we can put it right. You can also complain to the Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies

See our cookie policy for the small number of cookies this website uses.

Keeping your information secure

We use secure (HTTPS) connections, keep the website and its software up to date, protect our accounts with strong passwords, and limit access to the people who need it.

Changes to this policy

We will update this page if anything changes. The date at the top shows when it was last revised.