Privacy policy

1. Who is responsible

The controller of your personal data is [COMPANY NAME], business ID [BUSINESS ID], [STREET ADDRESS], Tampere, Finland. For anything related to privacy, contact us at info@valuemybrand.com.

2. What we collect

• Contact form: your name, email address, organisation (optional) and message.
• Email and meetings: what you send us, and our notes from the discussion.
• Client engagements: names, roles and contact details of the people we work with, contracts and invoicing details. A brand valuation itself is based on company data, not on personal data.
• Website statistics, only with your consent: pages visited, referring site, device and browser type, and approximate location at country or city level, collected with Google Analytics through Google Tag Manager.
• Technical data: our hosting provider processes IP addresses and request data in server logs to deliver the site and keep it secure.

3. Why we use it, and on what legal basis

• Answering your enquiry and preparing an offer: steps taken at your request before a contract, and our legitimate interest in answering business enquiries (GDPR Art. 6(1)(b) and (f)).
• Delivering an engagement: performance of a contract (Art. 6(1)(b)).
• Accounting records: legal obligation under Finnish accounting law (Art. 6(1)(c)).
• Website statistics: your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Operating and securing the website: our legitimate interest (Art. 6(1)(f)).

We do not make decisions about you by automated means, and we do not use your data for advertising profiles.

4. Who processes data for us

We use a small number of service providers that process data on our behalf under data processing agreements:

• Webflow, Inc. (United States): website hosting and contact form submissions.
• Google (Google Ireland Ltd and Google LLC): Tag Manager and Analytics, only if you consent to statistics.
• Email and accounting service providers: email, invoicing and bookkeeping.

We do not sell or rent personal data, and we disclose it to authorities only when the law requires us to.

5. Transfers outside the EU and EEA

Webflow and Google are US companies, so some data may be processed in the United States. These transfers rely on the EU–US Data Privacy Framework, under the European Commission's adequacy decision of 10 July 2023, for recipients certified under it, and otherwise on the Commission's standard contractual clauses.

6. How long we keep it

• Enquiries that do not lead to an engagement: deleted within 24 months of our last contact, including the copy in Webflow's form submissions.
• Engagement records: for the duration of the contract and as long as needed to handle possible claims afterwards.
• Accounting material: as long as Finnish accounting law requires, at most ten years.
• Website statistics: 14 months in Google Analytics, after which they are deleted automatically.

7. Cookies

Cookies are small files stored in your browser. Cookies that are strictly necessary for the site to work and stay secure do not need consent. Analytics cookies, such as Google Analytics' _ga cookies, are set only after you accept statistics in the cookie banner. You can change or withdraw your choice at any time from Cookie settings at the bottom of every page, or by clearing cookies in your browser.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have incorrect data corrected
• have your data deleted when there is no longer a reason to keep it
• restrict processing, or object to processing based on our legitimate interest
• receive the data you gave us in a machine-readable format
• withdraw your consent at any time, without affecting earlier processing

Send your request to info@valuemybrand.com. We answer within one month. If you believe we handle your data unlawfully, you can lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi).

9. How we protect it

The site is served over an encrypted connection (HTTPS). Access to personal data is limited to the people who need it in their work, and our service providers are bound by data processing agreements.

10. Changes to this policy

When we change how we handle personal data, we update this page and the date at the top.