Privacy Policy

This Privacy Policy explains how Brandlexy Technologies Private Limited (“Brandlexy”, “we”, “us” or “our”) collects, receives, uses, stores, discloses and otherwise processes personal data in connection with the Brandlexy Platform and the services made available through it. It applies to individuals who access or use the Platform, including representatives of brands, agencies and other organisations using the Platform.

Brandlexy determines the purposes for which, and the manner in which, personal data is processed through the Platform and, where applicable under law, acts as a Data Fiduciary in respect of such processing. This Privacy Policy should be read together with Brandlexy’s Terms of Service and any other notices or disclosures presented to you at the time personal data is collected.

By using the Platform or otherwise providing personal data to Brandlexy, you acknowledge that your personal data may be processed in accordance with this Privacy Policy and applicable law. Where consent is required as the legal basis for a particular processing activity, Brandlexy will obtain such consent in accordance with applicable law.

1. Personal Data We Collect

Depending on how you use the Brandlexy Platform and the features you access, we may collect and process the following categories of personal data.

Account and professional information: This may include your name, email address, phone number, organisation details, designation or role, account credentials and authentication information.

Brand information: Where you use the Platform on behalf of a brand or organisation, this may include company information, business requirements, marketing briefs, campaign information, budgets and timelines, and preferences relating to agencies or service providers.

Agency information: Where you use the Platform on behalf of an agency, this may include agency information, team information, areas of expertise, portfolio and case-study information, experience and category information, pricing information, and performance information provided in connection with verification or matching.

Engagement and communication information: We may process information relating to matches and engagements, including briefs, requirements, communications between Platform users, project status, feedback and other information reasonably necessary to operate the Workbench and facilitate engagements.

Technical and usage information: We may collect technical and usage information such as IP address, browser and device information, operating system, log information, usage events, pages and Platform features accessed, approximate location derived from technical information where necessary, and security and diagnostic information.

Support and Platform communications: We may retain communications with Brandlexy support and other Platform-related communications for as long as reasonably necessary to provide and improve our services, resolve disputes, maintain Platform security, investigate misuse and comply with applicable law.

Where Brandlexy receives personal data from a user relating to another individual, the user should provide such information only where the user is authorised or otherwise permitted to do so under applicable law. The user is responsible for ensuring that any such disclosure to Brandlexy is lawful and, where required, that the relevant individual has been appropriately informed or notified.

2. Why We Use Personal Data

We use personal data for purposes reasonably necessary to operate and administer the Brandlexy Platform and provide its features and services. These purposes may include creating and managing user accounts; facilitating brand–agency discovery, matching and introductions; reviewing and verifying agency information; operating the Workbench; facilitating communications between users and with Brandlexy; administering and supporting engagements; providing customer support; maintaining the security, integrity and functionality of the Platform; detecting, preventing and investigating fraud, misuse, unauthorised access and other violations of our Terms of Service; improving our matching processes, Platform features and user experience; analysing Platform usage and performance; resolving disputes; and complying with applicable legal, regulatory or governmental requirements.

We may also process personal data for other purposes that are reasonably related to the purposes described in this Privacy Policy or otherwise permitted or required under applicable law. Where we rely on consent for a particular processing activity, we will obtain, record, manage and facilitate withdrawal of such consent in accordance with applicable law.

3. Personal Data We Process

Depending on how you use the Platform and the services available through it, Brandlexy may collect and process different categories of personal data, including identity and professional information, contact and account information, business and agency information, information relating to your requirements and preferences, communications and interactions with Brandlexy and other Platform users, verification and due-diligence information, transaction and engagement-related information, and technical, device and usage information.

The specific personal data collected will depend on the nature of the user’s interaction with the Platform and the features or services used. Brandlexy will seek to collect and process personal data that is reasonably necessary for the purposes described in this Privacy Policy, including account administration, verification, matching, communications, engagement management, Platform security and improvement, and compliance with applicable law.

Where a user provides personal data relating to another individual, the user represents that the user is authorised to provide such information to Brandlexy and that the collection and sharing of such information with Brandlexy is lawful. Users should not provide personal data that is unnecessary for the relevant Platform function or purpose.

4. Information Sharing

We may share personal data with third parties where reasonably necessary for the purposes described in this Privacy Policy and in connection with the operation of the Brandlexy Platform. Depending on the circumstances, these third parties may include brands and agencies participating in a relevant matching process or engagement; technology, hosting and infrastructure providers; analytics, security and fraud-prevention providers; professional advisers; payment, invoicing and other service providers engaged in connection with Brandlexy’s own fees and operations; governmental, regulatory or law-enforcement authorities where required or permitted by applicable law; and persons involved in a merger, acquisition, restructuring, financing, sale of assets or other corporate transaction involving Brandlexy.

Where personal data is shared with service providers or other third parties acting on Brandlexy’s behalf, we will seek to ensure that such sharing is limited to what is reasonably necessary for the relevant purpose and is subject to appropriate contractual, confidentiality, security or other safeguards, as applicable.

We do not sell personal data.

We will not disclose individual engagement information to unrelated third parties for their independent commercial use unless such disclosure is reasonably necessary for a purpose described in this Privacy Policy, is otherwise permitted or required by applicable law, or is undertaken with the consent or other lawful basis required in the circumstances.

5. Aggregated and De-Identified Information

Brandlexy may generate aggregated, statistical or de-identified information from data relating to Platform activity, use of the Platform and engagements, provided that such information is processed in a manner designed to prevent it from identifying, or reasonably being used to identify, an individual. Brandlexy may use such information to improve its matching processes and Platform features, analyse usage and market trends, develop category-level insights and benchmarks, and improve, develop and evaluate its products and services.

Brandlexy will not use or disclose information as aggregated or de-identified information where it continues to identify an individual or reveals confidential information relating to a specific brand, agency or engagement. Brandlexy will take reasonable measures appropriate to the circumstances to maintain the aggregated or de-identified nature of such information.

6. Cookies and Similar Technologies

Brandlexy may use cookies, local storage, analytics tools and similar technologies in connection with the Platform. These technologies may be used to maintain user sessions, remember preferences, understand how the Platform is accessed and used, monitor and improve Platform performance, maintain security, detect misuse, and measure the effectiveness of Platform features and product improvements.

Where required under applicable law, Brandlexy will provide appropriate notice and consent mechanisms before using cookies or similar technologies for purposes that require consent. Where available, users may manage or withdraw their preferences through the controls or settings provided by the Platform or their browser, subject to the continued operation of technologies that are necessary for the Platform to function securely and properly.

7. Data Retention

Brandlexy retains personal data for only as long as reasonably necessary to fulfil the purposes for which it was collected or otherwise processed, including to provide and administer the Platform, maintain appropriate business, account and transaction records, facilitate and document engagements, resolve disputes, prevent and investigate fraud or misuse, comply with applicable legal or regulatory obligations, and establish, exercise or defend legal claims and enforce agreements.

The applicable retention period may vary depending on the nature and sensitivity of the personal data, the purpose for which it is processed, the nature and duration of the relevant user or engagement relationship, and any legal, regulatory, contractual or legitimate business requirements that require the information to be retained.

When personal data is no longer required for the relevant purposes, Brandlexy will take reasonable steps to delete or securely dispose of it, or, where appropriate, anonymise or otherwise de-identify the information so that it can no longer reasonably be associated with an identifiable individual. Certain information may be retained for longer where required or permitted by applicable law or where reasonably necessary to establish, exercise or defend legal claims.

8. Data Security

Brandlexy maintains reasonable technical and organisational measures designed to protect personal data against unauthorised access, acquisition, use, alteration, disclosure, loss, destruction and other forms of misuse, having regard to the nature of the personal data processed and the risks associated with its processing. These measures may include appropriate access controls, authentication, security monitoring and other safeguards relevant to the Platform and its operations.

Brandlexy periodically reviews and, where appropriate, updates its security practices and measures to address identified risks and changes in its Platform, systems and operations.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure. Accordingly, Brandlexy cannot guarantee the absolute security of personal data transmitted to or stored through the Platform.

Users are responsible for maintaining the confidentiality of their account credentials, using appropriate security practices, and promptly notifying Brandlexy if they become aware of any unauthorised access to or use of their account.

9. Your Rights

Subject to applicable law and any conditions, limitations or exceptions prescribed under it, individuals may have certain rights in relation to their personal data processed by Brandlexy. These may include the right to access information about the processing of personal data, request correction or updating of inaccurate or incomplete personal data, request deletion of personal data where applicable, withdraw consent where processing is based on consent, raise a grievance or complaint, and exercise any other rights available under applicable data-protection law.

To exercise an applicable right or raise a privacy-related request, you may contact Brandlexy at privacy@brandlexy.com. Brandlexy may request information reasonably necessary to verify the identity or authority of the person making the request before processing it. We may also need to request additional information or clarification where reasonably necessary to understand or process the request.

Brandlexy will respond to valid requests in accordance with applicable law and may decline, restrict or defer a request where permitted or required by applicable law. Where a request cannot be fully accommodated, Brandlexy may explain the applicable limitation or reason, subject to any legal restrictions on providing such information.

10. Grievance Redressal

Privacy-related grievances, concerns or complaints regarding the processing of personal data by Brandlexy may be submitted to the following Grievance Officer:

Grievance Officer
Brandlexy Technologies Private Limited
Email: grievance@brandlexy.com

Brandlexy will acknowledge, review and address grievances in accordance with the timelines and requirements prescribed under applicable law. Where reasonably necessary to investigate or resolve a grievance, Brandlexy may request additional information or clarification from the person raising the grievance.

Nothing in this Privacy Policy is intended to contractually limit, extend or otherwise alter any statutory right, obligation or timeline prescribed under applicable law.

11. Children’s Data

The Brandlexy Platform is intended for businesses and professional users and is not directed towards children. Users should not knowingly provide Brandlexy with personal data relating to a child unless the user is legally authorised or otherwise permitted under applicable law to provide such information and Brandlexy is permitted to process such personal data under applicable law.

Where Brandlexy becomes aware that personal data relating to a child has been provided or processed in circumstances that are not permitted under applicable law, Brandlexy will take reasonable steps to address the information in accordance with its legal obligations, which may include deleting or restricting further processing of the relevant personal data.

12. Changes to This Policy

Brandlexy may update this Policy when its practices, Platform or applicable legal requirements change. The current version and effective date will be displayed through the Platform.

13. Contact

Privacy requests: privacy@brandlexy.com
General support: support@brandlexy.com
Grievances: grievance@brandlexy.com