Privacy Policy

Last updated: 13 October 2026

This policy explains what personal information The Big Brand Marketing collects through thebigbrandmarketing.com, why we collect it, how long we keep it and the choices you have. It is written for visitors and clients in India, the European Union and European Economic Area, the United Kingdom, the United States and the rest of the world.

1. Who we are

The Big Brand Marketing (“TBM”, “we”, “us”) is an independent marketing company based in India. We are responsible for the personal information described in this policy. This makes us the “data controller” under European and UK law and the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023.

For any privacy question or request, email info@thebigbrandmarketing.com with “Privacy” in the subject line.

2. What we collect

Information you give us

When you request a free audit or send us a message, we collect the details you enter: your name, work email, company, website, market, phone number (optional), the services you are interested in, how you heard about us and what you write to us. We also record that you agreed to this policy, and when.

If you email us, call us or contact us on social media, we receive whatever you choose to share.

Information collected automatically

Like every website, our hosting provider’s servers automatically record basic technical information when you visit: your IP address, browser and device type, the pages you request and the date and time. This is used to keep the website secure and working.

To stop spam, our forms keep a scrambled (hashed) version of your IP address for 15 minutes to limit repeated submissions. It is then deleted automatically.

Please do not send us sensitive information, such as health details, through our forms.

3. How we use it, and our legal basis

• To reply to your enquiry and prepare your free audit. Legal basis: your consent, which you give by ticking the box on our forms, and the steps you ask us to take before we agree to work together.
• To deliver our services if you become a client, and to keep the business and tax records the law requires. Legal basis: our contract with you and our legal obligations.
• To keep our website and forms secure and free of spam. Legal basis: our legitimate interest in protecting our website and the people who use it.

We do not add you to a mailing list or send you marketing emails unless you ask us to. We do not make decisions about you using automated decision-making or profiling.

4. Cookies and similar technologies

Our website does not use advertising, analytics or social media tracking cookies, and it does not follow you across other websites. Our fonts are stored on our own server, so loading our pages does not send your information to font providers.

The website uses session storage in your browser to remember one setting, the page-transition animation. This contains no personal information and is cleared when you close the tab. Login cookies are only set for our own team when they sign in to manage the website. Our hosting provider may also use strictly necessary cookies to protect the website and keep it running.

If we ever add analytics, we will ask for your consent first where the law requires it and update this policy.

5. Who we share it with

We do not sell, rent or trade your personal information. We share it only with:

• Service providers who host our website and email (GoDaddy and its email partner). They process information on our behalf, under contract and only on our instructions.
• Professional advisers, such as accountants and lawyers, when needed.
• Authorities, when the law requires it or to protect our rights, safety and property.
• A buyer or successor, if our business is ever reorganised, merged or sold. Your information would stay protected under this policy.

Our website links to our Instagram and LinkedIn pages but does not embed them. If you follow those links, the privacy policies of those platforms apply.

6. International transfers

We are based in India, and our service providers may store information in other countries, including the United States. When personal information from the EU, EEA or UK is transferred to a country without an adequacy decision, we rely on recognised safeguards where required, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum included in our providers’ data processing terms.

7. How long we keep it

• Enquiries that do not lead to work together are deleted 24 months after we last hear from you. Enquiries saved on our website are deleted automatically after 24 months.
• Client information is kept for as long as we work together and afterwards for as long as tax, accounting and other laws require.
• Spam-protection data (the hashed IP address) is deleted after 15 minutes. Server logs are kept by our hosting provider for a limited period for security.

You can ask us to delete your information sooner (see section 8).

8. Your rights

Wherever you are, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct or update it;
• delete it; and
• withdraw your consent at any time. This does not affect anything we did before you withdrew it.

Email info@thebigbrandmarketing.com. We may need to confirm your identity first. We reply within one month, or sooner where the law requires it. Exercising your rights is free, and we will never treat you differently for doing so.

European Union, EEA and United Kingdom

Under the GDPR and UK GDPR, you also have the right to restrict our use of your information, to object to processing based on our legitimate interests and to receive your information in a portable format. You can complain to a data protection authority. In the UK, this is the Information Commissioner’s Office (ico.org.uk). In the EU and EEA, this is the authority in the country where you live or work (list of authorities). We would appreciate the chance to resolve your concern first.

United States

Depending on the state you live in, for example California, Colorado, Connecticut, Virginia, Texas or others with privacy laws, you may have the right to know, access, correct, delete and get a copy of your personal information, and to opt out of its sale, sharing or use for targeted advertising or profiling.

We do not sell or share personal information for cross-context behavioural advertising. We do not use it for targeted advertising or profiling, and we have not done so in the past 12 months. We honour Global Privacy Control signals. An authorised agent can make a request for you with your written permission. If we decline a request, you can appeal by replying to our decision. If you are not satisfied with the outcome, you can contact your state Attorney General.

California notice at collection. In the past 12 months we have collected:

• identifiers, such as your name, email address, phone number and IP address;
• professional information, such as your company, website and market; and
• internet activity, such as server log data.

We collect this from you and from your device, for the purposes in section 3, and keep it for the periods in section 7. We do not collect sensitive personal information.

India

Under the Digital Personal Data Protection Act, 2023 you have the right to:

• access information about your personal data and how it is processed;
• correct, complete, update and erase it;
• withdraw consent;
• have your grievances addressed; and
• nominate another person to exercise your rights if you die or become unable to act.

Please send grievances to info@thebigbrandmarketing.com. If we do not resolve your grievance, you can approach the Data Protection Board of India.

9. Security

Our website uses HTTPS encryption. Access to enquiries is limited to our team, and we keep our software up to date. No website or email system is completely secure, so please do not send us passwords or financial details.

10. Children

Our website and services are for businesses and are not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has sent us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy as our website, services or the law change. The date at the top shows when it last changed. If we make significant changes, we will make them clear on this page.

12. Contact us

The Big Brand Marketing
Email: info@thebigbrandmarketing.com
Subject line: Privacy