Legal
Privacy Policy
Last updated: 15 October 2026
This policy explains how Alchemy Branding Studio (“Alchemy”, “we”, “us”) collects, uses and protects your personal data when you use alchemybranding.studio (this “site”). We're the data controller for the personal data we hold about you.
If you have questions, the fastest way to reach us is hello@alchemybranding.studio.
What data we collect
We collect personal data in three ways:
- When you fill in a form. Our contact form asks for your name, email, company and the details of your enquiry. Our brand checklist and newsletter sign-up asks only for your email and your agreement. You decide what to give us.
- When you email or message us. If you email us, message us on WhatsApp, or book a call, we keep that conversation so we can help you and follow up later.
- When you browse the site. We load Google Tag Manager to manage your cookie choice. Until you accept, no analytics or advertising cookies are set: Google Consent Mode keeps everything in a cookieless, privacy-preserving state. If you accept, Google Analytics 4 and Google Ads conversion measurement run. We also honour Global Privacy Control (GPC) browser signals as an opt-out. See our Cookie Policy for the detail.
Why we use it
- To reply to your enquiry and discuss whether we're a fit for your project.
- To deliver work you've engaged us for.
- To send you the brand checklist and our occasional newsletter, if you've signed up and confirmed your email. Every email has a link to unsubscribe.
- To understand how the site is used (only with your consent).
- To meet our legal and accounting obligations.
We rely on your consent for cookies/analytics and for the newsletter, on legitimate interest for responding to enquiries and running our business, and on contract for delivering engaged work.
Who we share it with
We use a small set of trusted third parties to run the site and the business. Each of them processes only what they need to:
| Provider | What we use them for |
|---|---|
| Vercel | Hosts this site. Sees standard server logs (IP, user agent, requested URL) for operational reasons. |
| Sanity | Hosts the content (case studies, posts, team info). No personal data from forms is stored in Sanity. |
| Resend | Sends our emails: enquiries from our contact form to our inbox, and the newsletter with its confirmation and welcome emails. |
| Opus, our own system (hosted by Vercel and Supabase, in London) | Where we keep enquiries, bookings and newsletter sign-ups. For a sign-up we keep your email, the wording you agreed to, the page you signed up on and when you confirmed. Your IP address is only kept as a scrambled code, to stop spam. |
| Google (Tag Manager, Analytics 4, Ads) | Tag Manager loads to manage consent. Analytics 4 (aggregated usage) and Ads conversion measurement run only after you accept. See Cookie Policy. |
| WhatsApp / our email host | The messaging and email channels we operate on. |
We don't sell your data, and we don't share it for anyone else's marketing.
How long we keep it
- Enquiries and audit form submissions: up to 24 months from the last contact, unless we're working together (in which case we keep them for the lifetime of the engagement + 6 years for tax/accounting).
- Email correspondence: as long as it's useful, then archived per our retention schedule.
- Analytics: retention is controlled by the provider's default (Google Analytics 4 default is 14 months).
International transfers
Some of our providers process data outside the UK. Where that happens, we rely on the standard contractual clauses, UK adequacy decisions or equivalent safeguards offered by each provider.
Your rights
Under UK GDPR you have the right to:
- Ask us what personal data we hold about you.
- Ask us to correct it if it's wrong.
- Ask us to delete it, where we're not required to keep it.
- Object to or restrict how we use it.
- Withdraw consent (for cookies/analytics) at any time.
Email hello@alchemybranding.studio and we'll respond within one month. If you're not happy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Children's privacy
This site and our services are aimed at businesses, not children. We don't knowingly collect personal data from anyone under 16. If you believe a child has given us their data, email hello@alchemybranding.studio and we'll delete it.
Changes to this policy
We'll update the “last updated” date at the top of this page when anything material changes. For significant changes, we'll try to give you reasonable notice in our next communication with you.