Legal
Privacy policy.
I only collect what I need to reply to you and to see how the site is doing. I don't sell it, and you can ask me to delete it. Here's the full version.
Who I am
BRAM is a creative studio based in Sheffield, run by me, Greg Bramhall. I'm responsible for the personal information collected through this website, which makes me the 'data controller' in UK GDPR terms.
Questions about any of this? Email me and I'll get back to you.
hello@madebybram.co.ukWhat I collect
If you fill in the form to book a clarity call or ask about a project, I collect your name, business name, email address, what you're looking for and whatever you write in the message.
If you accept analytics cookies, Google Analytics records how you use the site: the pages you visit, roughly where in the world you are, the device and browser you use, and how you found me. It doesn't tell me who you are.
I also keep a record of your cookie choice so the banner doesn't keep asking. And if you email or phone me, I keep that conversation so we can pick it up where we left off.
How I use it
I use your enquiry details to reply to you, to arrange a clarity call, and to put a proposal together if you'd like one. If you become a client, I use them to run the project and to invoice you.
I use analytics data to see which pages are helping people and which aren't, so I can make the site better.
I don't sell or rent your details, and I won't add you to a mailing list unless you ask me to.
The legal bit
UK data protection law says I need a lawful reason to use your information. Mine are: replying to your enquiry and taking the steps you've asked for before we work together; my legitimate interest in running and improving a small business; your consent, for analytics cookies; and my legal obligations, like keeping financial records.
Who else sees it
I use a small number of trusted services to run the site and the business, and some of them handle your information on my behalf. These include my website hosting, my email provider, Google Analytics, and the tools I use for booking, invoicing and project work.
Some of these providers are based outside the UK. Where that's the case, I choose providers that protect your information to UK standards, for example through the UK's approved safeguards for international transfers. Beyond them, I only share your details if the law requires me to.
The site runs over HTTPS, and I take sensible steps to keep your information safe.
How long I keep it
Enquiries that don't turn into work: up to 12 months, then I delete them.
Client records and invoices: six years, because tax law requires it.
Analytics data: for the limited period set in my Google Analytics account, then it's removed automatically.
Your rights
You can ask me at any time to show you the information I hold about you, correct it, delete it, restrict how I use it, or send it to you in a portable format. You can also object to me using it, and withdraw your consent for analytics whenever you like. Email me and I'll reply within a month.
If you're not happy with how I've handled something, you can complain to the Information Commissioner's Office (0303 123 1113). I'd appreciate the chance to put it right first.
ico.org.uk/make-a-complaintCookies
The site uses a few cookies. What each one does, and how to change your choice, is covered in my cookie policy.
Read the cookie policyChanges to this policy
If I change how I handle your information, I'll update this page and the date below.
Last updated 20 October 2026.