Privacy Policy
Brand Partnership Group is committed to respecting your privacy and protecting your personal data.
This Privacy Policy explains how we collect, use, store, share and protect personal data when you visit our website, communicate with us or otherwise interact with Brand Partnership Group.
It also explains your rights under applicable data protection law and how to contact us about the use of your personal data.
1. Who we are
Brand Partnership Group Limited is responsible for the personal data described in this Privacy Policy where it acts as the data controller.
Brand Partnership Group Limited Company number: 09938132 Registered office: 10 East Road, London, N1 6AD
For general business enquiries, contact hello@wearebpg.com.
For privacy enquiries, data protection matters, requests to exercise your rights or subject access requests, contact gdpr@wearebpg.com.
Brand Partnership Group comprises and works with a group of specialist businesses. In some circumstances, another company within the group may act as a separate controller or joint controller of personal data. Where this is the case, the relevant company will provide appropriate privacy information where required.
2. Scope of this Privacy Policy
This Privacy Policy applies to personal data processed by Brand Partnership Group in connection with:
- visitors to our website;
- people who communicate with us;
- clients and prospective clients;
- suppliers, contractors and professional advisers;
- business partners and other professional contacts;
- people who attend or participate in meetings, events or business activities involving us; and
- individuals whose professional information is lawfully obtained in connection with our business activities.
Separate privacy information may apply to employees, workers, contractors and job applicants where their personal data is processed as part of an employment or recruitment process.
The Brand Partnership Group website does not currently operate a contact form. Personal information is therefore not collected through website contact-form submissions. If you choose to contact us using an email address or other contact method displayed on the website, the information you provide will be processed through that communication channel and in accordance with this Privacy Policy.
3. What is personal data?
Personal data is information relating to an identified or identifiable living individual.
This can include information such as a person's name, business contact details, online identifiers and other information that can identify someone directly or indirectly.
Certain information receives additional protection under data protection law. This includes personal data concerning health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data used for identification, sex life and sexual orientation.
Separate legal rules also apply to personal data relating to criminal convictions and offences.
We do not intentionally collect special category personal data or criminal offence data through this website.
Please do not send sensitive personal information to our general contact addresses unless it is necessary for a specific purpose or we have asked you to provide it.
This Privacy Policy also applies to individuals who register for, attend or participate in Future Hub events, workshops, learning sessions, demonstrations, webinars, surveys, competitions and related programme activities.
Future Hub activities may be delivered by Brand Partnership Group on behalf of clients, alliance partners, sponsors or programme stakeholders. Where another organisation determines how and why personal data is processed, additional privacy information may be provided by that organisation.
4. Personal data we may collect
The personal data we collect depends on the nature of our relationship and how you interact with us.
We may collect identity and professional information, including your name, job title, role, employer or organisation.
We may collect contact information, including your business email address, telephone number and other contact details that you provide to us.
We may collect correspondence and communication information, including the content of emails, messages and other communications exchanged with us.
We may collect business relationship information, including information connected with existing or potential client, supplier, partner or professional relationships.
We may collect technical information relating to visits to our website. Depending on the website technologies in use, this may include IP address, browser type, device type, operating system, approximate location derived from an IP address, referral source and technical information about how the website is accessed.
We may collect website usage information where lawful and applicable, including information about pages visited, navigation through the website and interactions with website content.
We may also process records required for legal, regulatory, financial, security, contractual and business administration purposes.
5. How we collect personal data
We may collect personal data directly from you when you communicate or engage with us by email, telephone, in person or through other communication channels.
We may also receive personal data through business relationships with clients, prospective clients, suppliers, partners, professional advisers and other organisations.
Where appropriate, we may obtain professional or business information from publicly available sources, corporate websites, public registers and professional networking platforms.
We may receive personal data from other companies within Brand Partnership Group where sharing is necessary and lawful for legitimate business activities or the delivery of services.
Technical and usage information may also be generated when you visit our website through the website's infrastructure and any technologies lawfully operating on it.
Where we obtain personal data from a source other than the individual concerned, we will provide privacy information where required by law and within the applicable timeframe.
For Future Hub activities, we may collect registration details, attendance records, dietary and accessibility requirements (where voluntarily provided), learning participation records, survey responses, feedback, competition entries, event engagement data and professional interests relevant to the content being delivered.
We may also collect photographs, video recordings or other media content captured during events where appropriate notices have been provided.
6. How and why we use personal data
We only process personal data where we have a lawful basis for doing so.
Depending on the circumstances, we may process personal data to:
- communicate with you and respond to correspondence;
- take steps at your request before entering into a contract;
- provide, manage and improve our services;
- manage relationships with clients, prospective clients, suppliers, partners and professional contacts;
- administer contracts and commercial relationships;
- operate, secure, maintain and improve our website, systems and business operations;
- understand the effectiveness and use of our website where lawful analytics technologies are used;
- develop our services, capabilities and business;
- manage events, meetings and professional activities;
- protect our business, systems, information, employees and other individuals;
- prevent, detect and investigate fraud, misuse, security incidents and other unlawful activity;
- maintain financial, tax, contractual, regulatory and business records;
- comply with legal and regulatory obligations;
- establish, exercise or defend legal claims;
- manage corporate transactions, restructuring, investment, acquisition or sale processes; and
- send business-to-business marketing communications where permitted by law.
- manage registrations and attendance for Future Hub activities;
- provide learning, training and enablement programmes;
- measure engagement and programme effectiveness;
- report programme outcomes to clients, sponsors and alliance partners;
- administer competitions, prize draws and promotional activities where applicable;
- create anonymised or aggregated reporting and programme insights.
Our lawful bases for processing may include performance of a contract, taking steps before entering into a contract, compliance with a legal obligation, our legitimate interests or those of a third party, and consent where consent is required or is the most appropriate lawful basis.
Where we rely on legitimate interests, those interests may include operating and developing our business, communicating with professional contacts, managing commercial relationships, improving our services and website, protecting our systems and business, maintaining appropriate records and establishing or defending legal rights.
We consider whether the processing is necessary and balance those interests against the rights, freedoms and reasonable expectations of the individuals concerned.
Where we rely on consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
7. Business communications and marketing
We may communicate with existing clients, prospective clients and other professional contacts about Brand Partnership Group, our businesses, services, capabilities, events, insights or opportunities where we are legally permitted to do so.
The lawful basis and electronic marketing rules that apply will depend on the circumstances, including the nature of the recipient and our existing relationship with them.
Where consent is legally required, we will seek appropriate consent before sending the relevant communication.
You can ask us to stop sending direct marketing communications at any time by using an unsubscribe method provided in the communication or by contacting us at gdpr@wearebpg.com.
A request to stop marketing communications will not prevent us from sending service, contractual, legal or other non-marketing communications where those communications are necessary.
8. Cookies and similar technologies
Our website may use cookies and similar storage or access technologies for purposes such as enabling core website functionality, maintaining security, remembering choices and, where applicable and lawfully configured, understanding how the website is used.
Some technologies may be strictly necessary for the operation, security or delivery of the website.
Where consent is legally required for a technology, it will only be used in accordance with applicable consent requirements.
Where the website provides cookie settings or a consent management tool, you can use those controls to make or change your choices.
Browser settings may also allow you to block or delete certain cookies, although doing so may affect the operation of some website functionality.
Information about the specific cookies or similar technologies in use should be made available through the website's cookie notice or cookie settings where applicable.
Future Hub registration and attendance data is typically processed under our legitimate interests in operating business events, learning programmes and professional engagement activities, or where necessary for the performance of a contract. Where specific consent is required, this will be obtained at the point of collection.
9. Sharing personal data
We may share personal data where it is necessary, proportionate and lawful to do so.
Recipients may include:
- relevant companies within Brand Partnership Group;
- suppliers and service providers supporting our IT infrastructure, website, hosting, communications and business operations;
- professional advisers, including legal advisers, accountants, auditors and insurers;
- clients, suppliers, contractors and business partners where sharing is necessary for a legitimate and lawful business purpose;
- banks, payment providers and financial institutions where relevant;
- regulatory bodies, courts, law enforcement agencies, government authorities and other public bodies where disclosure is required or permitted by law; and
- actual or prospective investors, purchasers, sellers, lenders and their professional advisers in connection with a genuine corporate transaction, financing, restructuring, investment, merger, acquisition or sale.
- Where Future Hub activities are delivered on behalf of clients, technology partners or programme sponsors, relevant attendance, registration or engagement information may be shared with those organisations where lawful and necessary for programme administration, reporting, funding validation, lead management, training delivery or return-on-investment measurement.
- Such organisations may include technology manufacturers, distributors, alliance partners, sponsors or clients associated with the relevant Future Hub activity.
We require third parties processing personal data on our behalf to handle it in accordance with applicable law, appropriate contractual requirements and appropriate security and confidentiality obligations.
We do not sell personal data.
10. Photography, Filming and Content Capture
Photography, video recording and other content capture may take place during Future Hub activities for promotional, training, reporting and business purposes.
Where appropriate, attendees will be informed in advance if photography or filming is taking place and provided with information on how to raise concerns or opt out where reasonably practicable.
11. Sharing within Brand Partnership Group
Brand Partnership Group includes specialist businesses that may share certain central functions, resources, systems and professional services.
Personal data may be shared between relevant group companies where this is necessary for legitimate business administration, central support functions, service delivery, relationship management, security, legal compliance or other lawful business purposes.
Access is limited to people who have a legitimate need to use the information for the relevant purpose.
Where a group company processes personal data on behalf of another company, appropriate arrangements are used to govern that processing. Where a group company acts as an independent controller, it is responsible for complying with its own obligations under data protection law.
12. International transfers
Some of the organisations that support our business or provide services to us may process personal data outside the United Kingdom.
Where personal data is transferred to a country or recipient not covered by applicable UK adequacy arrangements, we will use an appropriate lawful transfer mechanism where required.
Depending on the circumstances, this may include approved contractual safeguards or another transfer mechanism permitted by applicable data protection law.
Where required, we also consider whether additional technical, contractual or organisational safeguards are appropriate to protect the information.
You can contact gdpr@wearebpg.com if you require further information about safeguards relevant to the transfer of your personal data.
13. How long we keep personal data
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected or subsequently lawfully processed.
When determining an appropriate retention period, we consider the nature, amount and sensitivity of the personal data, the purpose of processing, the potential risks associated with unauthorised use or disclosure, whether the purpose can be achieved by other means and applicable legal, regulatory, contractual, tax, accounting and reporting requirements.
Different categories of information may therefore be retained for different periods.
We may retain personal data for longer where necessary in connection with a complaint, dispute, investigation, regulatory matter, actual or anticipated legal proceedings or another lawful requirement.
Where information is no longer required, it will be securely deleted, destroyed or irreversibly anonymised in accordance with our data retention and information security procedures.
Where information has been irreversibly anonymised so that it can no longer identify an individual, it may be retained and used for legitimate statistical, research or business analysis purposes.
14. How we protect personal data
We take the security of personal data seriously.
We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, misuse or access.
Access to personal data is controlled according to role, responsibility and legitimate business need.
Employees, contractors and service providers who are authorised to access personal data are subject to appropriate confidentiality, security and data protection requirements.
We maintain processes for identifying, assessing, investigating, recording and responding to personal data breaches.
Where required by law, we will notify the relevant supervisory authority and affected individuals of a personal data breach within the applicable legal requirements.
No method of transmission or storage can be guaranteed to be completely secure. Our security measures are therefore reviewed and developed in light of the nature of the information, identified risks, available technology and applicable legal requirements.
15. Your data protection rights
Depending on the circumstances and the legal basis on which your personal data is processed, you may have rights under data protection law.
These may include the right to request access to personal data we hold about you, request correction of inaccurate or incomplete information, request erasure in certain circumstances, request restriction of processing in certain circumstances, object to certain processing based on legitimate interests, object to direct marketing, request portability of certain information where the legal conditions apply, withdraw consent where processing is based on consent, and rights relating to certain forms of solely automated decision-making.
These rights are not absolute and may be subject to legal conditions, restrictions or exemptions.
To exercise a data protection right, contact gdpr@wearebpg.com.
We may ask for information reasonably necessary to verify your identity and to help us understand and respond to your request.
We will respond within the time required by applicable data protection law. In most cases this will be within one month of receiving a valid request, although the response period may be extended where permitted by law because of the complexity or number of requests. If an extension applies, we will tell you within the initial response period.
We do not normally charge a fee for exercising data protection rights. However, the law may permit us to charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive.
16. Subject access requests
You have the right to ask whether we process personal data about you and, where applicable, to request access to that personal data together with information required by data protection law.
Subject access requests should be sent to gdpr@wearebpg.com.
Please provide enough information to allow us to identify the relevant information and respond efficiently. We may request reasonable proof of identity where necessary to protect personal data from unauthorised disclosure.
17. Automated decision-making
We do not use this website to make decisions about individuals based solely on automated processing that produce legal effects or similarly significant effects.
If this position changes, we will provide the information and safeguards required by applicable data protection law.
18. Complaints
If you have a concern about how we collect or use your personal data, please contact us at gdpr@wearebpg.com so that we can investigate and respond.
You also have the right to make a complaint to the Information Commissioner's Office, the UK's independent data protection regulator.
We would welcome the opportunity to address your concerns directly, but your right to complain to the Information Commissioner's Office is not affected by contacting us first.
19. Third-party websites
Our website may contain links to websites, services or platforms operated by third parties.
We do not control those third parties and are not responsible for their privacy practices.
When you leave our website or interact with a third-party service, we recommend that you review the privacy information provided by the relevant organisation.
20. Changes to this Privacy Policy
We keep this Privacy Policy under review and may update it from time to time to reflect changes in our business, website, services, processing activities or applicable legal requirements.
Where changes are made, the updated Privacy Policy will be published on this page and the date at the top of the policy will be revised.
Where required by law, we will take additional steps to bring significant changes to the attention of affected individuals.
21. Contact us
For general enquiries about Brand Partnership Group, contact:
For privacy enquiries, data protection matters, subject access requests or requests to exercise your data protection rights, contact:
Brand Partnership Group Limited 10 East Road London N1 6AD United Kingdom