Privacy Policy

Last updated: 01.10.2026

BrandUp Labs respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect through our website, why we collect it and how we handle it.

1. Who We Are

BrandUp Labs is a social media and digital marketing studio based on the Costa Blanca, Spain, working with local and international clients.

Data controller: [Insert the registered name of the business owner or legal entity]
Business address: [Insert business address]
Contact email: [Insert confirmed email address]

2. Information We Collect

Depending on how you interact with us, we may collect:

  • Contact details, such as your name, email address, telephone number and company name, when you provide them.

  • Information included in contact forms, emails, WhatsApp messages or project enquiries.

  • Information necessary to provide our services and manage client relationships.

  • Technical and website usage information, where collected through our website or permitted analytics tools.

Please avoid sending sensitive personal information unless it is necessary and we have agreed on an appropriate way to handle it.

3. How and Why We Use Your Information

We process personal data for the following purposes, where applicable:

  • Responding to enquiries: To reply to messages and discuss potential projects, based on steps taken at your request before entering into a contract or, where appropriate, our legitimate interest in responding to business enquiries.

  • Providing services: To manage projects, communicate with clients and fulfil contractual obligations.

  • Legal and administrative purposes: To maintain required business records and comply with applicable legal obligations.

  • Website security: To maintain the security and proper operation of our website, where supported by our legitimate interests or applicable legal requirements.

  • Optional analytics and marketing: Where these activities require consent, we process the relevant data only after obtaining it.

We do not sell personal data.

4. Cookies and Analytics

Our website may use essential cookies and, where enabled, optional analytics or marketing technologies.

Essential cookies support website functionality. Optional cookies that require consent will only be activated after you provide it.

Where available, you can manage your cookie preferences through our website's cookie settings. You can also manage cookies through your browser.

For further information about the cookies actually used on this website, please see our Cookies Notice.

5. Third-Party Services

We use third-party providers where necessary to operate our website, communicate with visitors and deliver our services.

Depending on the tools we have enabled, these may include website hosting, contact forms, email, WhatsApp, scheduling, analytics and other digital platforms.

Some providers may process personal data on our behalf, while others may act as independent data controllers under their own privacy policies.

We share only the information reasonably necessary for the relevant purpose, subject to applicable data protection requirements.

6. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss and misuse.

However, no method of online transmission or electronic storage can be guaranteed to be completely secure.

7. International Data Transfers

Some service providers may process personal data outside the European Economic Area.

Where international transfers take place, we assess and apply the safeguards required by applicable data protection law, such as relevant adequacy decisions or appropriate contractual protections.

8. Your Data Protection Rights

Subject to applicable law, you may have the right to:

  • Access your personal data.

  • Request correction or deletion.

  • Restrict or object to certain processing.

  • Request data portability where applicable.

  • Withdraw consent at any time where processing is based on consent.

Withdrawing consent does not affect processing that was lawful before withdrawal.

To exercise your rights, please contact us using the email address below.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

9. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected.

Enquiry information is retained for as long as reasonably necessary to respond and manage any resulting business relationship. Client and accounting records may be retained for longer where required by law or necessary to establish, exercise or defend legal claims.

Specific retention periods or criteria should reflect our actual business practices and applicable legal requirements.

10. External Links

Our website may contain links to third-party websites and social media platforms. Their handling of personal data is governed by their own privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our website, services, data processing practices or legal requirements.

The latest version will be published on this page with an updated revision date.

12. Contact Us

If you have questions or concerns about this Privacy Policy or your personal data, please contact us at:
hello@branduplabs.com