At Bebran Digital ("Bebran, we, us, or our"), we respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website uk.bebran.com, engage our digital marketing and web development services, or interact with us.
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025. For the purposes of these laws, Bebran Digital is the data controller of your personal data.
Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the site or use our services.
1. Information We Collect
We collect information that identifies, relates to, or can reasonably be linked to an individual or device ("Personal Data").
Information You Provide Voluntarily: When you fill out a contact form, book a strategy call, sign up for a resource, or communicate with us via email, telephone, or WhatsApp, we may collect: contact identifiers (full name, business email address, phone number); company information (company name, website URL, industry, estimated marketing budget); and communication records (notes from strategy sessions, chat logs, project briefs).
Information Collected Automatically: When you visit our website, our servers and analytics tools automatically collect technical data, including log and usage data (IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, diagnostic data); device information; and data from cookies, pixels, and similar technologies, as explained in our Cookie Policy.
We do not intentionally collect special category data (such as health information) and ask that you do not send it to us.
2. Use of Your Personal Data and Our Lawful Basis
Under UK GDPR, we must have a lawful basis for every use of your Personal Data. We use it for the following purposes:
To provide and maintain our Service: Including monitoring the usage of our website and client infrastructure. (Lawful basis: legitimate interests; performance of a contract.)
To manage your enquiries and interactions: Including contact form submissions, proposals, and communications. (Lawful basis: legitimate interests; steps taken at your request before entering into a contract.)
For the performance of a contract: The development, compliance, and delivery of service agreements, proposals, or contracts for marketing and web development services you have purchased or enquired about. (Lawful basis: contract.)
To contact you: By email, telephone, SMS, WhatsApp, or other electronic communication regarding updates, technical updates, or security notifications related to contracted services. (Lawful basis: contract; legitimate interests.)
To provide marketing insights: News, offers, and information about services similar to those you have enquired about. For business contacts we rely on legitimate interests; for individual or sole-trader email addresses we rely on your consent or the PECR "soft opt-in". You can opt out at any time using the unsubscribe link or by contacting us.
To manage your requests: Including support requests and data protection requests. (Lawful basis: legal obligation; legitimate interests.)
For business transfers: To evaluate or conduct a merger, restructuring, or sale of some or all of our assets. (Lawful basis: legitimate interests.)
For analytics: To understand usage trends, measure campaign effectiveness, and improve our website and services. (Lawful basis: legitimate interests; consent where required for cookies.)
3. Sharing Your Information & Service Providers
We do not sell, rent, or trade your personal data. We may share your personal data in the following situations:
Service Providers: We use third-party companies and individuals to help us operate our Service ("Service Providers"), such as hosting, CRM, email, scheduling, and payment providers. They process Personal Data only on our instructions, under a written data processing agreement as required by Article 28 UK GDPR, and may not use it for any other purpose.
Analytics — Google Analytics: Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. We have configured it to collect aggregate statistics to improve our website. You can opt out at any time through the "Cookie Settings" link on our website or by installing the Google Analytics opt-out browser add-on. For more information, please visit the Google Privacy & Terms page.
Behavioural Remarketing: With your consent, we use remarketing services to show our ads on third-party websites after you visit our Service. Advertising and remarketing cookies are only set if you accept them in our cookie banner.
Google Ads: Google provides the Google Ads remarketing service. You can manage or turn off ad personalisation through Google's My Ad Center / Ads Settings page. For more information, please visit the Google Privacy & Terms page.
Meta (Facebook and Instagram): Meta provides remarketing and conversion-measurement services. You can manage interest-based advertising through your Meta ad preferences, and you can opt out of interest-based advertising from participating companies through Your Online Choices (youronlinechoices.com/uk), run by the European Interactive Digital Advertising Alliance. For more information, please see Meta's Privacy Policy.
For business transfers: We may share or transfer your personal data in connection with any merger, sale of company assets, financing, or acquisition of all or part of our business.
With Affiliates: We may share your information with our affiliates, including our parent company Bebran Digital Pvt. Ltd. in India, which provides delivery and support for our services. We require affiliates to honour this Privacy Policy.
With business partners: We may share your information with trusted business partners to offer you relevant products, services, or promotions, only where you have agreed or where we have a lawful basis to do so.
With other users: When you share personal information in public areas, it may be viewed by others.
With your consent: We may disclose your personal data for any other purpose with your explicit consent.
4. Retention of Your Personal Data
We will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy, and to comply with our legal obligations, resolve disputes, and enforce our agreements. As a guide:
Enquiries that do not become clients: up to 24 months from last contact.
Client records and contracts: the duration of the engagement plus 6 years (the UK limitation period for contract claims).
Financial and accounting records: 6 years, as required by HMRC.
Analytics data: no longer than 14 months.
Usage data is generally retained for a shorter period, unless it is used to strengthen security or improve functionality, or we are legally required to keep it for longer.
5. International Transfers of Your Personal Data
Your information may be processed at our operating offices and wherever the parties involved in processing are located, including India and the United States. These countries may not have data protection laws equivalent to those in the UK. Where we transfer Personal Data outside the UK, we ensure it is protected by an appropriate safeguard, such as UK adequacy regulations, the ICO's International Data Transfer Agreement (IDTA), or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. For US providers, we may rely on the UK Extension to the EU-US Data Privacy Framework. You can request details of these safeguards by contacting us.
6. Disclosure of Your Personal Data
Business Transactions: If we are involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different Privacy Policy.
Law Enforcement & Legal Requirements: We may disclose your Personal Data if required by law or in response to valid requests by public authorities (e.g. a court, HMRC, or a regulator), or where we believe in good faith that it is necessary to:
Comply with a legal obligation.
Protect and defend the rights or property of the Company.
Prevent or investigate possible wrongdoing in connection with the Service.
Protect the personal safety of Users of the Service or the public.
Protect against legal liability.
7. Security of Your Personal Data
The security of your Personal Data is important to us. We use appropriate technical and organisational measures to protect it, but no method of transmission over the Internet or electronic storage is 100% secure. Where a personal data breach is likely to result in a risk to your rights, we will report it to the Information Commissioner's Office (ICO) within 72 hours and inform you without undue delay where required by law.
8. Cookies, "Do Not Track" and Your Choices
We do not currently respond to browser "Do Not Track" (DNT) signals. Instead, you control non-essential cookies through our cookie banner and the "Cookie Settings" link on our website. Advertising and remarketing cookies are only used with your consent. See our Cookie Policy for details.
9. Your Data Protection Rights (UK GDPR)
Under UK data protection law, you have the following rights:
The Right of Access: You can request a copy of the personal data we hold about you.
The Right of Rectification: You can have inaccurate or incomplete information corrected.
The Right to Erasure: You can request deletion of your data in certain circumstances.
The Right to Object & Restrict: You can object to or request restriction of our processing, and you can object to direct marketing at any time.
The Right to Data Portability: You can receive your information in a structured, machine-readable format.
The Right to Withdraw Consent: You can withdraw your consent at any time where we rely on consent.
Rights related to automated decision-making: We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
To exercise any of these rights, please contact us at info@bebran.com. We will respond within one month of receiving your request (this may be extended by up to two further months for complex requests). We may ask you to verify your identity before responding. There is normally no fee.
Right to complain: If you are unhappy with how we handle your personal data, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
10. Children's Privacy
Our services are designed for business professionals and commercial enterprises. We do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete it.
11. Links to Other Sites
Our Site may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
12. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will post any updates on this page and revise the "Last Updated" date at the top. Where changes are significant, we will notify you by email or through a notice on our website. Changes are effective when they are posted on this page.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us:
Company Name: Bebran Digital Pvt. Ltd. (UK Operations)
Official UK Address: BeBran Digital Pvt. Ltd. Suite 214, 45 King William Street, London, EC4R 9AN, United Kingdom
