Privacy Policy
How we collect, use and protect your personal data.
Brandfletch ("we", "us", "our") is a digital growth agency based in Malawi. This policy explains what personal data we collect through brandfletch.com and the platforms and services we operate, why we collect it, and the choices you have.
1. Data we collect
- Contact details you submit through our contact and booking forms, or via WhatsApp: name, email address, phone number and business information.
- Account data when you sign up to a Brandfletch product or platform: your name, email address and, where you choose Google Sign-In, the name and email address on your Google profile.
- Usage data about how you use our website and platforms, including pages visited and device and browser information.
- Marketing preferences and the content of communications you have with us.
2. How we use your data
- To respond to your enquiries and provide our services.
- To create and secure your accounts on our platforms.
- To deliver, maintain and improve our products.
- To send service updates and, where you have opted in, marketing.
- To meet legal obligations and protect against fraud or abuse.
3. Legal bases
We process personal data on the basis of your consent, for the performance of a contract with you, for our legitimate interests in operating and improving our business, and where required by law.
4. Third-party processors
We share data only with processors that help us run our services, including: Google (Sign-In, analytics and cloud infrastructure), Supabase (databases and authentication), Meta (advertising services we manage for clients), website analytics tools, and payment and communication providers. These processors may process data outside Malawi under contractual safeguards.
5. Cookies
We use essential cookies to keep you signed in and understand how our site is used. You can disable cookies in your browser, though parts of our services may then not work.
6. Data retention and security
We keep personal data only as long as needed for the purposes above, and protect it using access controls, encryption in transit and least-privilege practices on our infrastructure.
7. Your rights
You may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent at any time by emailing us.
8. Data deletion
To request deletion of your account and associated data on any Brandfletch platform, email hello@brandfletch.com and we will action your request within 30 days.
9. Changes and contact
We may update this policy; material changes will be posted on this page. Questions? Email hello@brandfletch.com.
Last updated: 26 October 2026.