Brutal Marketing Clarity

Privacy Policy

Last updated: January 2026

Brutal respects your privacy and is committed to protecting any personal information you provide when using this website.

This Privacy Policy explains what information we collect, how it is used, and how it is protected.

1. Information We Collect

We may collect the following information when you use this website or contact us:

  1. Your name
  2. Email address
  3. Company name
  4. Website URL
  5. Any information you choose to provide when submitting forms, booking a session, or contacting us
  6. Basic technical data such as IP address, browser type, and device information for security and analytics purposes

We do not collect sensitive personal data unless you voluntarily provide it.

2. How We Use Your Information

Your information is used only for legitimate business purposes, including:

  1. Responding to enquiries
  2. Booking and delivering Brutal sessions
  3. Communicating relevant information about your booking or request
  4. Improving website performance and user experience
  5. Legal, security, and operational purposes

We do not sell, rent, or trade your personal data.

3. Lawful Basis for Processing

We process personal data based on one or more of the following lawful grounds:

  1. Your consent
  2. The performance of a contract or pre contractual request
  3. Legitimate business interests
  4. Legal or regulatory obligations

4. Cookies and Analytics

This website may use cookies and basic analytics tools to understand how visitors use the site.

Cookies help us improve functionality and performance. You can control or disable cookies through your browser settings.

We do not use cookies for advertising or profiling.

5. Data Sharing

We only share your data where necessary to operate the service, such as:

  1. Booking or scheduling tools
  2. Secure payment providers
  3. Website hosting and security services

All third parties are required to handle your data responsibly and securely.

6. Data Storage and Security

We take reasonable technical and organizational measures to protect your data from loss, misuse, unauthorized access, or disclosure.

Data is stored securely and retained only for as long as necessary to fulfil its purpose or meet legal requirements.

7. Your Rights

Depending on your location, you may have the right to:

  1. Access your personal data
  2. Request correction of inaccurate data
  3. Request deletion of your data
  4. Withdraw consent at any time
  5. Object to certain processing activities

You can exercise these rights by contacting us using the details below.

8. External Links

This website may contain links to external websites. We are not responsible for the privacy practices or content of third party sites.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.

 

GDPR Compliance

(UK and EU Visitors)

This section applies to visitors located in the United Kingdom and European Union and supplements the Privacy Policy above.

10. GDPR Legal Rights

Under the UK GDPR and EU GDPR, you have the following rights in relation to your personal data:

  1. The right to access your personal data and receive a copy of it
  2. The right to request correction of inaccurate or incomplete data
  3. The right to request erasure of your personal data where there is no lawful reason for continued processing
  4. The right to restrict processing in certain circumstances
  5. The right to data portability, allowing you to receive your data in a commonly used format
  6. The right to object to processing based on legitimate interests
  7. The right to withdraw consent at any time where processing is based on consent

Requests can be made by contacting us using the details below. We may request verification of identity before responding.

11. International Data Transfers

Where personal data is transferred outside the UK or EU, we ensure appropriate safeguards are in place, including contractual protections and compliance with applicable data protection laws.

12. Data Retention

Personal data is retained only for as long as necessary to:

  1. Fulfil the purpose for which it was collected
  2. Comply with legal, regulatory, or accounting requirements
  3. Resolve disputes or enforce agreements

When data is no longer required, it is securely deleted or anonymised.

13. Supervisory Authority

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with your local data protection authority.

For UK residents, this is the Information Commissioner’s Office.
For EU residents, this is your local supervisory authority.

14. Data Controller and Contact Information

For the purposes of GDPR, the data controller is:

Brutal
Email: info@sobrutal.com