Effective Date: 15/11/2024

Brand Content Strategy (BCS) is committed to safeguarding your privacy and ensuring that your personal data is handled in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) in the EU and UK, and India's Digital Personal Data Protection Act (DPDP). This Privacy Policy explains how we collect, use, and protect your personal data when you engage with our services, digital products, or websites.

1. Data Controller Information
   BCS acts as the data controller for personal data collected through our services, digital products, and websites. For any questions or concerns regarding this policy, please contact us directly.

2. Personal Data We Collect
   We collect personal data you provide during registration or purchases, including your name, email address, phone number, business details, and payment information processed securely via trusted third-party payment providers (Stripe, PayPal).

We also automatically collect data such as your IP address, browser type, operating system, device information, and interaction data like pages viewed and duration of visits.

We utilise cookies to enhance user experience and gather analytics. Please refer to the Squarespace, Inc. Cookie Policy for further details.

3. Legal Basis for Processing Personal Data
   We process your data under GDPR and DPDP based on your consent for marketing communications, contractual necessity to deliver services or fulfil orders, our legitimate interests in operational analytics and fraud prevention, and compliance with legal obligations.

4. How We Use Your Data
   We use your personal data to deliver and enhance our services and digital products, process payments, manage orders, provide marketing communications (with your consent), respond to inquiries, and ensure compliance with legal and security standards.

5. Sharing Your Data
   BCS does not sell your personal data. We share your data only with trusted third-party service providers for payment processing, hosting, analytics, legal authorities when required by law, and during business transfers such as mergers or acquisitions. All third parties are required to comply with GDPR and DPDP.

6. Data Retention
   We retain transactional data for 10 years for financial compliance and marketing data until you opt out.

7. Your Rights Under GDPR and DPDP
   You have the right to access, rectify, erase, restrict processing, port data, object to processing, and withdraw consent. Please contact us to exercise these rights.

8. International Data Transfers
   Personal data collected from the EU, UK, or India may be transferred internationally, such as to the US (e.g., Squarespace, Inc. servers). We implement appropriate safeguards, such as Standard Contractual Clauses (SCCs), to ensure data protection.

9. Data Security
   We implement robust technical and organisational measures, including encryption, secure storage, restricted access, and regular security assessments. Absolute protection cannot be guaranteed.

10. Breach Notification
    In the event of a data breach impacting your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals promptly.

11. Cookies Policy
    We use cookies and similar technologies for personalisation, analytics, and enhancing website performance. Refer to our Cookie Policy for detailed information.

12. Third-Party Links
    Our websites may include links to third-party websites. We are not responsible for external privacy practices and recommend reviewing their policies before providing personal data.

13. Updates to This Privacy Policy
    We may update this Privacy Policy periodically to reflect operational changes or new legal requirements. Changes will be posted here, clearly indicating the effective date.

14. Contact Information
    For privacy-related inquiries or to exercise your data protection rights, please contact us directly.

By engaging with our services, digital products, or websites, you acknowledge that you have read, understood, and accepted this Privacy Policy.