1) Who we are
We are Logical Branding Limited, a company registered in England and Wales under company number 16223623.

Our Address: HIC002, Arise Innovation Hub, Harlow Innovation Park, Maypole Boulevard, Harlow CM17 9TX

We are the controller of personal data we collect and use under this Policy.

2) What this Policy covers
This Policy explains how we collect and use personal data when you:

• browse our website;

• contact us or request a quote;

• become a customer/supplier contact; and/or

• use our customer portal (the “Portal”) to view quotes/invoices, upload files, and manage projects.
  
  

3) Personal data we collect
This may include:

• Identity and contact data: name, job title, company name, email, phone, billing/delivery address.

• Enquiry and quote data: your requirements, specifications, correspondence, and any information needed to price work.

• Portal data: account details, authentication/authorisation information, actions you take in the Portal (e.g., uploads).

• Files and content you upload: artwork, logos, brand assets, briefs, guidelines, documents.

• Billing and transaction data: quotes, invoices, purchase order references, payment status, delivery details.
  
  

3.2 Data we collect automatically
When you browse the website or use the Portal, we may collect:

• Technical and usage data: IP address, device type, browser type/version, pages visited, timestamps, referrer/entry page.

• Security and audit logs: login events, access logs, and security-related records (to protect the Portal and investigate misuse).
  
  

3.3 Data we receive from others
In a B2B setting we may receive contact details from:

• colleagues within your organisation (e.g., an accounts contact added to an invoice);

• referrals; or

• service providers helping us operate email/IT systems.
  
  

4) How we use your data and our lawful bases
UK GDPR requires a lawful basis for processing personal data (e.g., contract, legal obligation, legitimate interests, consent).

We typically use personal data for:

1. Handling enquiries and providing quotes

• What we do: respond, scope requirements, produce quotes/proofs.

• Lawful basis: legitimate interests and/or steps to enter a contract.
  
  

2. Supplying goods/services and managing projects

• What we do: production coordination, approvals, delivery/admin, customer support.

• Lawful basis: performance of a contract.
  
  

3. Operating and securing the Portal

• What we do: authentication, access control, file storage, audit logs, troubleshooting.

• Lawful basis: performance of a contract and/or legitimate interests.
  
  

4. Invoicing, payments, accounting, and tax

• What we do: billing, credit control, record keeping.

• Lawful basis: contract and/or legal obligation.
  
  

5. Security, fraud prevention, and misuse monitoring

• What we do: monitoring access, investigating incidents.

• Lawful basis: legitimate interests.
  
  

6. Marketing (mainly B2B)

• What we do: send relevant business communications (where permitted).

• Lawful basis: legitimate interests and/or consent depending on channel and context.

• Opt-out: see Section 10.
  
  

7. Analytics (Google Analytics)

• What we do: measure website usage to improve the site.

• Lawful basis: consent for analytics cookies and similar technologies under UK cookie rules (PECR).
  
  

5) Cookies and similar technologies
5.1 What cookies are
Cookies are small text files placed on your device. Similar technologies (e.g., local storage) are treated similarly under UK rules.

5.2 Cookie consent (UK position)
In the UK, you must be told about cookies and consent is required for non-essential cookies, including analytics cookies, unless an exemption applies for cookies that are strictly necessary to provide a service you request.

Accordingly:

• Strictly necessary cookies (e.g., Portal session/security) are set as needed to provide the Website/Portal.

• Google Analytics cookies are set only if you opt in via our cookie banner/settings.
  
  

5.3 Cookies we use
Because cookie names can vary by configuration, treat the table as your cookie register.

5.4 How to manage cookies

• Use our cookie banner/settings to accept or reject analytics cookies.

• You can also delete or block cookies in your browser settings (note: blocking strictly necessary cookies may prevent Portal login).
  
  

6) Who we share data with
We may share personal data with trusted third parties where necessary, such as:

• professional advisers (accountants, insurers, legal advisers);

• delivery/courier providers (where delivery is part of an order); and

• analytics provider: Google Analytics (if you consent to analytics cookies).
  
  

Where we use service providers as processors, we require them to process data only on our instructions and with appropriate safeguards.

7) International transfers
We host the Portal ourselves, but some third parties (including Google Analytics) may process data outside the UK.

Where personal data is transferred outside the UK and the transfer is “restricted”, we will ensure appropriate safeguards are used (for example, an adequacy decision where applicable, or contractual safeguards such as the UK IDTA / UK addendum mechanisms).

8) How long we keep your data (retention)
We keep personal data only as long as needed for the purposes in this Policy, including legal/accounting requirements.

Typical retention periods (can be refined to match your operations):

• Enquiries/quotes (not converted to orders): 24 months

• Customer and order records / invoices: 6 years 

• Portal files and uploads: we reserve the right to delete files stored in the Portal after six (6) months of non-trading with the client (no live projects, orders, or chargeable work in progress during that period).

• Security/audit logs: 12 months, longer if needed to investigate incidents.
  
  

9) Security
We use appropriate technical and organisational measures to protect personal data, including access controls and monitoring. You are responsible for keeping your Portal credentials confidential and for securing the devices you use to access the Portal.

10) Marketing preferences
You can opt out of marketing communications at any time by:

• using the unsubscribe link in emails (where included);

• contacting us via our web form.
  
  

Opting out will not affect service communications (e.g., order or invoice messages).

11) Your rights
You may have rights under UK GDPR, including rights to access, correct, erase, restrict, object, and (where applicable) data portability. The ICO explains the requirement to provide transparent information and the rights framework.

Complaints: You can raise concerns with the UK Information Commissioner’s Office (ICO).

12) Changes to this Policy
We may update this Policy from time to time. The latest version will be published on our Website with an updated effective date.