Privacy Notice

Who controls your data

Brand Love 100 is the controller for personal information you submit through this website. For a privacy request, use Talk to Us and write “Privacy request” in the message.

What we collect

• Account details supplied through our email sign-in service: user identifier, email address and display name where provided.
• Enquiry details: name, work email, company, role and the brand, market, report or message you submit.
• Optional first-party analytics: a random session identifier, page path, event name and limited event properties after you accept analytics.
• Operational records needed to secure, diagnose and deliver the service.

Why we use it

We use account information to provide and secure access; enquiry information to answer the request you asked us to handle; and consented analytics to improve content gates and sign-up journeys. The applicable basis is performance of requested services, our legitimate interests in operating and securing the product, or consent where the interface asks for it.

Who processes it

We use OpenAI Sites for website hosting, Supabase for authentication and database infrastructure, and a transactional email provider for secure sign-in links and service messages. Providers process data under their own contractual and security terms. We do not sell enquiry or account data and do not use the analytics system for advertising.

Retention

Enquiries are normally retained for up to 24 months after the last substantive interaction. Optional analytics events are retained for up to 13 months. Account records are retained while the account is active and for a limited period afterward where needed for security, legal or contractual records. We may retain specific records longer where law or a live dispute requires it.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent for future processing. You can change analytics choices through “Cookie choices” in the footer. You may also complain to your local data-protection authority.

International processing and security

Some providers may process information outside your country. Where required, transfers use an applicable legal mechanism. We use access controls, row-level database security and server-only credentials, but no online service can promise absolute security.

Further information

The legal transparency requirements informing this notice are set out in Regulation (EU) 2016/679. We will update this notice when the service or its providers materially change.