Privacy Policy

1. Who we are

Mancunian Brands Ltd is responsible for the personal information described in this policy (the “data controller”). We’re a company registered in England and Wales, company number 17182810.

Registered office: Swan Buildings, 20 Swan Street, 1st Floor, Manchester, Greater Manchester, England, M4 5JW.

Email: hello@mancunianbrands.com

We’re not required to appoint a Data Protection Officer and haven’t done so. For any question about this policy or your information, email us at the address above.

2. What information we collect

When you contact us

Through one of our enquiry forms or by email, we collect what you give us:

• your name and email address
• your company name, role or business type, location and website
• for trade and partner enquiries, the brands you’re interested in or the certifications you hold
• your message and anything else you choose to send

You don’t have to contact us. If you do, we need your name, email address and message to reply; the other form fields are optional unless marked as required.

When you visit our website

Our providers receive technical information such as your IP address and browser and device details. Section 4 explains who receives what. We also keep a record of your cookie choice.

We don’t currently use analytics or advertising tools, so we don’t track how you use the site.

Please don’t send us sensitive information, such as health details, unless your enquiry needs it. Our website isn’t aimed at children, and we don’t knowingly collect children’s information.

3. How we use your information and our legal basis

UK data protection law requires a lawful basis for each use of your information. Where we rely on legitimate interests, we’ve checked that our interests don’t override your rights.

Replying to your enquiry and managing business conversations

Includes conversations with suppliers, partners, retailers and investors. Information used: your contact details and message. Lawful basis: legitimate interests, in responding to people who contact us and running our business.

Keeping records of our communications

Information used: your contact details and messages. Lawful basis: legitimate interests, and legal obligation where the law requires us to keep records.

Protecting our forms from spam and bots

Information used: IP address, browser and device details. Lawful basis: legitimate interests, in keeping our website secure.

Showing our cookie banner and keeping a record of your choice

Information used: IP address (to work out your region) and your consent record. Lawful basis: legitimate interests, in showing we asked for consent properly.

Showing our Carma figure on the Commitments page

Information used: IP address. Lawful basis: legitimate interests, in sharing our impact.

Optional analytics or advertising tools, if we add them

Information used: as described in our Cookie Policy. Lawful basis: consent (see section 5).

Meeting legal, tax and regulatory duties

Information used: whatever the duty requires. Lawful basis: legal obligation.

Where we rely on consent, you can withdraw it at any time through Cookie Settings at the bottom of every page.

4. Who we share your information with

We don’t sell your information. We share it only with the providers below, and with others where the law requires. Most handle it only on our instructions; Cloudflare and Carma also use some of it for their own purposes, explained in their policies.

Webflow

Hosts our website and stores form submissions. Receives everything you send through our forms, plus your IP address and browser details when you visit.

Microsoft (Microsoft 365)

Runs our email, where form enquiries arrive and we reply. Receives your enquiry and any emails you send us.

Cloudflare (Turnstile)

Protects our forms from spam and bots. Receives your IP address and browser details (Turnstile privacy addendum).

Consent Pro

Runs our cookie banner and keeps consent records. Receives your IP address (to work out your region) and your consent record (privacy policy).

Carma

Shows our tree-planting figure on the Commitments page. Receives your IP address when that page loads (privacy policy).

We may also share information with our professional advisers (such as lawyers and accountants), with regulators or law enforcement when the law requires it, or with a buyer if all or part of our business is ever sold.

5. Tools we may add in future

As our marketing grows, we may add analytics or advertising tools: Google Analytics, Webflow Analyze, the LinkedIn Insight Tag, the Meta Pixel, the TikTok Pixel or Google Ads. None of them is active today.

If we add one, it will only run if you agree through our cookie banner, and we’ll update this policy and our Cookie Policy first to explain what it collects and who receives it. These providers may use the information for their own purposes, such as showing you ads, under their own privacy policies.

6. Transfers outside the UK

Some of the providers in section 4 are based in, or use servers in, other countries, including the United States. When your information goes outside the UK, it is protected by one of the safeguards UK law allows:

• UK adequacy regulations, which cover countries the UK has approved, including US companies certified under the UK Extension to the EU–US Data Privacy Framework (the “UK–US data bridge”)
• the UK International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses, built into the provider’s data processing terms

Email us if you’d like to know which safeguard applies to a particular provider, or to get a copy of it.

7. How long we keep your information

• Enquiries and emails that lead to an ongoing business relationship (for example a supplier, partner or retailer): for as long as the relationship continues, then 24 months after our last contact
• Other enquiries and emails: 24 months after our last contact, then deleted from Webflow and our inbox
• Records the law requires us to keep, such as contracts and accounting records: as long as the law requires, usually 6 years
• Your cookie choice (the fs-consent cookie in your browser): 1 year
• Consent records held by Consent Pro: 5 years

Our providers may keep technical information, such as server and security logs, for their own periods, set out in their policies.

8. How we protect your information

We use trusted providers, encrypted connections (HTTPS) across our website, and access controls and strong passwords on the systems that hold your information. No method of sending or storing information is completely secure, but we work to protect it and will act quickly if something goes wrong.

9. Your rights

Under UK data protection law, you have the right to:

• know how we use your information (this policy)
• get a copy of the information we hold about you
• have inaccurate information corrected
• have your information deleted
• restrict how we use it
• object to how we use it, including where we rely on legitimate interests
• receive your information in a reusable format, in some cases
• withdraw consent at any time, where we rely on consent

Some rights apply only in certain situations. To use any of them, email hello@mancunianbrands.com. We may ask you to confirm your identity, and we’ll reply within one month.

10. Complaints

If you’re unhappy with how we’ve handled your information, please email hello@mancunianbrands.com first. We’ll acknowledge your complaint within 30 days, look into it and tell you the outcome.

You can also complain to the Information Commissioner’s Office (ICO), the UK regulator, at any time: how to complain to the ICO.

11. Cookies

We currently use one essential cookie, which remembers your cookie choice. Any optional analytics or advertising cookies stay off unless you turn them on. Our Cookie Policy has the details, and you can change your choice at any time through Cookie Settings at the bottom of every page.

12. Changes to this policy

We’ll update this policy whenever we change how we use your information, for example when we add a new tool. The date at the top shows when it last changed.