Privacy Policy
Last updated: March 2026
At Branding Confidential, we handle your information with the same care we bring to everything else: with intention, and without excess. This policy explains what personal data we collect through brandingconfidential.com, why we collect it, and the rights you hold over it.
We do not sell your data. We do not use it for purposes beyond what is described here.
01 — Who We Are
Data controller: Branding Confidential (Sophia Obregón)
Website: brandingconfidential.com
Contact: info@brandingconfidential.com
For any question related to this policy or your personal data, you can reach us directly at the address above.
02 — What Data We Collect and Why
The Journal — Newsletter Subscription
When you subscribe to The Journal, our newsletter, we collect your email address. Nothing more.
Purpose: to send you our newsletter and blog updates.
Legal basis: your explicit consent at the point of subscription.
Retention: for as long as you remain subscribed. You can unsubscribe at any time via the link included in every email.
Contact Form
When you reach out through our contact form, we collect your name, email address, and the content of your message.
Purpose: to respond to your enquiry.
Legal basis: our legitimate interest in responding to people who contact us.
Retention: we keep this data for as long as necessary to handle your enquiry, and no longer.
Discovery Call Booking
Booking a discovery call is handled through Calendly, an independent platform with its own privacy policy. When you click the booking link on our site, you are redirected to Calendly’s interface, where their terms and privacy policy apply.
We recommend reviewing Calendly’s privacy policy at calendly.com/privacy.
Brand Diagnostic
The Brand Diagnostic is a quiz hosted on Involve.me, an independent platform. Completing the quiz is subject to Involve.me’s privacy policy. Any information submitted through the quiz is processed by Involve.me under their own terms.
We recommend reviewing Involve.me’s privacy policy at involve.me/privacy.
03 — Cookies and Analytics
Our website may use basic analytics tools to understand how visitors navigate the site. This data is aggregated and anonymous — it does not identify you personally.
If we use cookies beyond what is strictly necessary for the site to function, we will ask for your consent. You can manage your cookie preferences at any time through your browser settings.
04 — Third Parties We Work With
We work with a small number of trusted platforms to run the services described above. These are:
Calendly — discovery call scheduling (calendly.com)
Involve.me — Brand Diagnostic quiz (involve.me)
MailerLite — email newsletter delivery for The Journal (mailerlite.com)
We do not share your data with any other third parties for marketing, advertising, or commercial purposes.
05 — Your Rights Under GDPR
If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:
Right to access — you can request a copy of the data we hold about you.
Right to rectification — you can ask us to correct any inaccurate data.
Right to erasure — you can ask us to delete your data, subject to certain conditions.
Right to restriction — you can ask us to limit how we process your data.
Right to object — you can object to our processing of your data where we rely on legitimate interest as the legal basis.
Right to data portability — you can request your data in a structured, machine-readable format.
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@brandingconfidential.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority. In Spain, this is the Agencia Española de Protección de Datos (aepd.es).
06 — Data Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, disclosure, or loss. Our website is served over HTTPS. Access to your data is limited to what is necessary to provide our services.
No transmission of data over the internet is entirely secure. If you have concerns about the security of your data, you can contact us directly.
07 — Changes to This Policy
We may update this policy from time to time as our services evolve. When we do, we will update the date at the top of this page. Significant changes will be communicated directly where appropriate.
This policy was last updated in March 2026.