Legal
Privacy
policy.
Effective date: January 1, 2026 · Onbrandward
What we collect, why we collect it, and the control you keep. No fine print games.
1. Who we are
Onbrandward ("Onbrandward," "we," "us") is a content agency serving direct-to-consumer brands. This Privacy Policy explains what personal data we collect, why, and the choices you have. It applies to our website and to client communications and engagements.
For any privacy question or request, contact us at privacy@onbrandward.com.
2. Data we collect
Inquiry and client data: name, work email, brand URL, and project details you submit through our inquiry form or share by email.
Project data: product assets, brand guidelines, campaign plans, and performance figures you share with us to produce deliverables.
Usage data: basic technical information such as IP address, browser type, and pages visited when you browse our website.
We do not collect special-category data (health, biometrics, and similar) and we do not sell personal data.
3. How we use data
We use the data above to respond to inquiries, deliver engagements, invoice and administer our client relationships, improve our services, and comply with legal obligations.
Our legal bases (where the GDPR applies) are: performance of a contract for client work, legitimate interests in operating and securing our business, and consent where you opted into updates.
4. AI tools and processors
We use third-party AI models and production tools to generate deliverables. Client assets shared for an Engagement are used only to produce that Engagement's deliverables.
We contract with processors that handle data on our behalf (hosting, email, analytics, AI providers) under agreements that restrict them from using personal data for their own purposes.
We do not train our own models on client data, and we do not permit processors to use client data to train their public models under our standard engagements.
5. Cookies
Our website uses only cookies and local storage needed for the site to function and to understand aggregate traffic. We do not run cross-site advertising trackers. You can block cookies in your browser settings; the site will continue to work.
6. Sharing
We share personal data only with: processors listed in section 4, professional advisers under confidentiality, and authorities where the law requires it. We may share non-identifiable, aggregated results in case studies (for example, "+214% ROAS") with the client's consent.
If we ever transfer personal data internationally, we rely on recognized safeguards such as the EU Standard Contractual Clauses.
7. Retention
We keep inquiry data for up to 12 months if no engagement follows. Project data is retained for the duration of the engagement plus up to 3 years (or longer if a contract requires) for support, portfolio use, and legal compliance. You can request earlier deletion at any time.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have additional rights under the CCPA/CPRA, including the right to know and to opt out of any "sale" or "sharing" of personal information — we do neither.
To exercise any right, email privacy@onbrandward.com. We respond within 30 days (45 where permitted). EU/UK residents may complain to their local data protection authority.
9. Security
We protect personal data with access controls, encrypted connections, and least-privilege access for our team. No method of transmission or storage is perfectly secure, but we treat every client's unreleased campaign material as confidential.
10. Changes
We may update this policy as our services or the law change. Material changes are announced on this page with a new effective date.