Privacy notice

This notice explains how Infinite Brands Ltd (“Infinite Brands”, “we”, “us”, “our”) collects, uses and protects personal information when you visit this website, contact us, or deal with us as a business contact. We handle personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

Infinite Brands Ltd is the controller of your personal information. We are a company registered in England and Wales (company no. 17485173). Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. For any question about this notice or your information, email hello@infinitebrands.co.uk or write to our registered office.

2. The information we collect

• Enquiries. When you use our contact form, we collect your name, email address, company and website (if given), the markets you are interested in, the topic of your enquiry and your message.
• Correspondence. When you email or call us, we keep a record of the conversation and the contact details you use.
• Business contacts. When you work for a brand, buyer, supplier, distributor or partner we deal with, or may want to deal with, we hold your name, job title, employer, business email address and phone number, and notes of our dealings. We collect this from you, from your organisation, from introductions, from events, and from public sources such as company websites and professional networks like LinkedIn.
• Technical information. When you visit this website, our hosting provider automatically processes technical information such as your IP address, browser type and the pages requested. This is needed to deliver the website and keep it secure.
• Website analytics (only with your consent). If you click “Accept” on our cookie banner, Google Analytics collects information about your visit, such as the pages you view, how long you stay, your approximate location (country and city), your device and browser, and whether you have visited before. We use this in aggregate to improve the website, not to identify you.

We do not ask for, and ask you not to send us, special category information (such as health information) about yourself or others.

3. How we use your information and our lawful bases

• To respond to enquiries and discuss working together, including steps you ask us to take before entering into a contract. Lawful bases: taking steps at your request before a contract, and our legitimate interest in responding to business enquiries.
• To carry out agreements with you or your organisation, including orders, deliveries, invoices and payments. Lawful bases: performance of a contract, and our legitimate interest in running our business where the contract is with your organisation.
• To develop business relationships, including contacting people at organisations we believe may benefit from our services. Lawful basis: our legitimate interest in growing our business. We only contact you in your professional capacity, about matters relevant to your role.
• To run, secure and improve our website. Lawful basis: our legitimate interest in operating a secure website.
• To meet legal, tax and accounting obligations, and to establish, exercise or defend legal claims. Lawful bases: legal obligation and legitimate interests.

Where we rely on legitimate interests, we have considered your interests and rights and concluded that our use is proportionate. You can ask us for more detail, and you can object at any time (see section 7).

4. Marketing

We may send occasional business emails about our services to people at organisations, in line with PECR. Every email we send includes a way to opt out, and we will stop straight away if you ask. We do not send marketing to individuals in a personal capacity without consent, and we never sell or rent your information.

5. Who we share your information with

We share personal information only where needed, with:

• Service providers who act on our instructions: our website host (Netlify, which also processes contact form submissions), our email provider (IONOS), our customer relationship management system, our website analytics provider (Google, only if you accept analytics cookies), and our accounting and banking providers;
• Our partners in India and the Gulf, and buyers, suppliers, distributors or investors, but only where this is needed for an introduction or deal you have asked us to pursue, or that involves your organisation;
• Professional advisers, such as our accountants, lawyers and insurers;
• Authorities, such as HMRC, where the law requires it.

6. International transfers

Some of our service providers and partners are located outside the UK, including in the United States, the European Economic Area, India and the United Arab Emirates. Where we transfer personal information outside the UK, we make sure it is protected: either the country has UK “adequacy” status, the recipient is certified under the UK Extension to the EU–US Data Privacy Framework, or we use the safeguards approved under UK law, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of these safeguards.

7. Your rights

You have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information, or to restrict how we use it, in certain circumstances;
• object to our use of your information where we rely on legitimate interests, and object at any time to direct marketing;
• ask us to transfer information you gave us to you or another organisation, in certain circumstances;
• withdraw consent at any time, where we rely on consent.

To use any of these rights, email hello@infinitebrands.co.uk. We will respond within one month and there is normally no charge. We may need to confirm your identity first.

8. How long we keep your information

• Enquiries that do not lead to working together: up to two years after our last contact.
• Business contact records: for as long as the business relationship is active, and up to three years after our last contact.
• Contract, transaction and accounting records: six years after the end of the financial year they relate to, as UK law requires.
• Website server logs: kept by our hosting provider for a short period for security, usually no more than 30 days.

9. Keeping your information safe

We use appropriate technical and organisational measures to protect personal information, including encrypted connections (HTTPS) on this website, access controls and reputable service providers. No method of transmission over the internet is completely secure, but we work to protect your information and act promptly on any concern.

10. Cookies

We use a small number of cookies and similar technologies:

• Strictly necessary: we store your cookie choice in your browser so we don’t ask you again on every page. This does not need consent.
• Analytics (only if you accept): Google Analytics sets cookies (named _ga and _ga_…) to count visits and understand how the website is used, including whether you are a new or returning visitor. These cookies last up to two years. Google acts as our service provider; the information may be processed in the United States under the UK Extension to the EU–US Data Privacy Framework. We do not use Google Analytics for advertising, and we do not share this data with Google for its own advertising purposes.

Analytics cookies are only set if you click “Accept”. If you click “Reject”, no analytics cookies are set. You can change your mind at any time using the “Cookie settings” link at the bottom of every page. Our fonts are hosted on our own website, so visiting our pages does not send your information to font providers.

11. Automated decisions and children

We do not make decisions about you based solely on automated processing. Our website and services are intended for businesses and are not directed at children.

12. Complaints

If you have a concern about how we use your information, please contact us first at hello@infinitebrands.co.uk and we will try to resolve it. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, telephone 0303 123 1113.

13. Changes to this notice

We may update this notice from time to time. The date at the top shows when it was last changed. Significant changes will be highlighted on this page.