Privacy Policy

Last updated: January 2026

Who we are

Grail is a branding agency based in London, UK.

What data we collect

When you request our presentation or other materials, we collect:

• First name and surname
• Company name
• Website (optional)
• Email address

Why we collect it

We collect this information to:

• Provide you with access to the requested presentation or materials
• Occasionally send you relevant branding insights and updates (you can unsubscribe at any time)

Legal basis: Your explicit consent (Article 6(1)(a) GDPR)

How we store and protect your data

• Your data is stored securely using Tally.so (a GDPR-compliant form platform) and our email system
• We use industry-standard security measures to protect your information
• Your data is stored within the EU/EEA

How long we keep your data

We will keep your contact details until you request deletion or unsubscribe from our communications.

Your rights

Under GDPR, you have the right to:

• Access your data
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Restrict processing
• Data portability (receive your data in a portable format)
• Object to processing
• Withdraw consent at any time

To exercise these rights, contact phil@grail-agency.com

Data sharing

We do not sell or share your personal data with third parties except:

• Tally.so (form processor, GDPR-compliant)
• Our email service provider (for sending the presentation and communications)

These service providers are bound by data processing agreements and can only use your data as instructed by us.

International data transfers

Your data is primarily stored and processed within the EU/EEA. If any data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place as required by GDPR.

Cookies and website analytics

Our website uses cookies and analytics tools to improve user experience. You can control cookie preferences through your browser settings. For more information, see our cookie policy.

Complaints

If you have concerns about how we handle your data, you can contact:

• Austrian Data Protection Authority (Datenschutzbehörde): dsb@dsb.gv.at or visit www.dsb.gv.at
• UK Information Commissioner's Office: Visit ico.org.uk or call 0303 123 1113

Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of any significant changes by posting the updated policy on this page with a new "last updated" date.

Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: