Forest Branding and Digital Media Ltd
Home About Us
Marketing & Brand Strategy Growth & Performance Marketing Digital Advertising & Paid Media Social & Audience Marketing Influencer & Creator Marketing
Blogs
Contact Us
Forest Branding and Digital Media Ltd
Home About Us
Marketing & Brand Strategy Growth & Performance Marketing Digital Advertising & Paid Media Social & Audience Marketing Influencer & Creator Marketing
Blogs
Contact Us

Legal

Privacy Policy

Last updated: September 2026

Forest Branding and Digital Media Ltd. ("Forest Branding", "we", "us", or "our") respects your privacy and is committed to handling personal data responsibly.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you:

  • visit our website;
  • contact us;
  • request information or a proposal;
  • engage us for marketing or digital services;
  • communicate with our team;
  • subscribe to marketing communications; or
  • otherwise interact with us in connection with our services.

Forest Branding operates from Ireland and, where applicable, processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Data Protection Act 2018, the European Communities (Electronic Communications Networks and Services) (Privacy and Electronic Communications) Regulations 2011, and other applicable data protection laws.

This Privacy Policy should be read together with our Terms & Conditions and any other privacy or cookie notices we provide.

01 Who We Are

The data controller responsible for your personal data is:

Forest Branding and Digital Media Ltd.

Company: Forest Branding and Digital Media Ltd

Address: Kilmacleague, Dunmore East, Waterford, X91 C2V9, Ireland

Website: forestbrandingdigital.com

Email: info@forestbrandingdigital.com

For privacy-related enquiries, you can contact us using the details above.

The Irish Data Protection Commission recommends that privacy notices clearly identify the controller and explain why and how personal data is processed.

02 What Personal Data We Collect

The personal data we collect depends on how you interact with us.

Information you provide directly

This may include:

  • full name;
  • business name;
  • job title or role;
  • email address;
  • telephone number;
  • postal or business address;
  • information submitted through contact or enquiry forms;
  • information included in project briefs;
  • information contained in emails or other communications;
  • billing and payment information;
  • information required to provide our services; and
  • any other information you voluntarily provide to us.

Client and project information

When you become a client, we may process information relating to:

  • your business;
  • your marketing objectives;
  • campaign requirements;
  • brand information;
  • advertising accounts;
  • website and analytics information;
  • social media accounts;
  • customer or audience information supplied by you;
  • campaign performance data;
  • creative assets;
  • project communications; and
  • other information necessary to provide the agreed services.

Where information supplied by a client contains personal data relating to that client's customers, employees, prospects, or other individuals, the allocation of controller and processor responsibilities will depend on the nature of the processing and the relevant agreement between the parties.

Information collected automatically

When you visit our website, we may automatically collect certain technical information, including:

  • IP address;
  • browser type and version;
  • device type;
  • operating system;
  • approximate location derived from technical information;
  • pages visited;
  • referring website;
  • date and time of visits;
  • interaction with website content;
  • website performance information; and
  • other technical or usage information.

Some of this information may constitute personal data under applicable law.

03 How We Collect Personal Data

We may collect personal data:

  • when you complete a contact form;
  • when you request a consultation or proposal;
  • when you email or telephone us;
  • when you enter into an agreement with us;
  • when you communicate with our team;
  • when you subscribe to marketing communications;
  • when you use our website;
  • through cookies and similar technologies;
  • through advertising and analytics platforms;
  • from publicly available business sources; or
  • from third parties where this is lawful and appropriate.

Where we obtain personal data from a source other than you, we will take appropriate steps to provide the information required by applicable data protection law.

04 Why We Use Your Personal Data

We use personal data for purposes including:

Providing our services

We may use information to:

  • understand your requirements;
  • prepare proposals;
  • manage projects;
  • provide marketing and digital services;
  • communicate about ongoing work;
  • manage advertising campaigns;
  • coordinate social media and creator activities;
  • provide reports and performance information;
  • administer accounts; and
  • fulfil our contractual obligations.

Responding to enquiries

If you contact us, we may use your information to:

  • respond to your enquiry;
  • arrange meetings;
  • provide requested information;
  • discuss potential services; and
  • follow up on a business enquiry where permitted by law.

Managing our business

We may process information to:

  • administer contracts;
  • process payments;
  • maintain business records;
  • manage supplier relationships;
  • protect our systems;
  • maintain information security;
  • prevent fraud or misuse;
  • enforce our agreements; and
  • comply with legal and regulatory obligations.

Improving our website and services

We may analyse website usage, campaign information and other data to understand how our services and website are being used and to improve them.

Marketing

Where legally permitted, we may use personal data to send information about our services, insights, updates, events, or other relevant communications.

Electronic direct marketing in Ireland is subject to additional requirements under the ePrivacy Regulations.

05 Our Legal Bases for Processing

Depending on the circumstances, we may rely on one or more of the following legal bases under Article 6 of the GDPR:

Contract

We may process personal data where it is necessary to enter into or perform a contract with you.

For example, we may need your contact and billing information to provide services and manage our relationship with you.

Legal obligation

We may process personal data where necessary to comply with a legal or regulatory obligation.

This may include accounting, taxation, record-keeping, regulatory, or legal requirements.

Legitimate interests

We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

  • operating and improving our business;
  • communicating with business contacts;
  • maintaining client relationships;
  • improving our website and services;
  • protecting our systems;
  • preventing fraud or misuse;
  • managing security; and
  • establishing, exercising, or defending legal claims.

Where we rely on legitimate interests, we consider the potential impact on individuals and apply appropriate safeguards.

Consent

Where required by law, we will ask for your consent before processing personal data.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal.

The DPC identifies consent, contract, legal obligation, vital interests, public task, and legitimate interests as the principal Article 6 legal bases.

06 Marketing Communications

We may send marketing communications where permitted by applicable law.

These may include:

  • company news;
  • service updates;
  • marketing insights;
  • industry information;
  • invitations;
  • events;
  • reports; and
  • information about our services.

Where consent is required for electronic direct marketing, we will obtain the appropriate consent.

Every electronic marketing communication will provide an appropriate way to opt out where required.

You can also contact us at our official email to request that we stop sending marketing communications.

Under Irish data protection law, individuals have a strong right to object to processing for direct marketing purposes, including related profiling.

07 Cookies and Similar Technologies

Our website may use cookies, pixels, tags, analytics tools, advertising technologies and similar technologies.

These technologies may be used for purposes such as:

  • keeping the website functioning;
  • remembering preferences;
  • understanding website traffic;
  • measuring website performance;
  • understanding campaign activity;
  • improving user experience; and
  • supporting advertising and conversion measurement.

Strictly necessary technologies

Some cookies or similar technologies may be necessary for the website to operate properly.

Where an applicable legal exemption applies, consent may not be required.

Analytics and advertising technologies

Non-essential analytics, advertising, targeting and conversion-tracking technologies generally require consent under the applicable Irish ePrivacy rules.

The Irish DPC states that consent is normally required for cookies and similar technologies, except for limited exemptions such as strictly necessary technologies.

Where required, we will provide a cookie consent mechanism that allows you to accept, reject, or manage non-essential cookies.

Further information should also be provided in our Cookie Policy, where applicable.

08 Analytics

We may use analytics services to understand how visitors use our website and to improve website performance.

These services may collect information such as:

  • pages viewed;
  • session information;
  • device information;
  • traffic sources;
  • approximate location;
  • interactions with website elements; and
  • website performance information.

We will configure analytics technologies in accordance with applicable data protection and ePrivacy requirements.

09 Advertising and Marketing Technologies

As a digital marketing company, we may use advertising platforms and measurement technologies on our own website for legitimate business and marketing purposes, subject to applicable law and consent requirements.

These may include services provided by platforms such as:

  • Google;
  • Meta;
  • LinkedIn;
  • Microsoft;
  • TikTok; or
  • other advertising and analytics providers.

Depending on the technology used, these platforms may process information such as online identifiers, website interactions, advertising events, device information and conversion information.

Where consent is legally required, we will seek consent before activating the relevant technology.

10 Social Media

We may operate social media profiles on third-party platforms.

If you interact with us through social media, the relevant platform may process your personal data independently.

The privacy practices of those platforms are governed by their own privacy policies.

We may receive information from social platforms where you interact with our pages, posts, advertisements, or messages, subject to the platform's settings and applicable law.

11 Client Data and Marketing Campaign Data

In providing marketing services, Forest Branding may process personal data supplied by clients.

For example, a client may provide information relating to:

  • customers;
  • prospective customers;
  • website visitors;
  • advertising audiences;
  • employees;
  • subscribers;
  • campaign leads; or
  • other individuals.

Where Forest Branding processes personal data solely on a client's documented instructions, we may act as a data processor, and the client may act as the data controller, depending on the circumstances.

Where required, the parties will enter into an appropriate data processing agreement containing the terms required by Article 28 GDPR.

The exact controller/processor relationship will depend on the specific service and processing activity and should not be assumed solely from the general nature of the engagement.

12 Third-Party Service Providers

We may use trusted third-party providers to operate our business and deliver our services.

These may include providers of:

  • website hosting;
  • cloud storage;
  • email;
  • CRM systems;
  • accounting and payment services;
  • project management;
  • analytics;
  • advertising;
  • social media;
  • communications;
  • cybersecurity;
  • IT support;
  • professional services; and
  • other business infrastructure.

Where these providers process personal data on our behalf, we will take appropriate steps to ensure that the processing is governed by appropriate contractual and legal safeguards.

13 Who We May Share Personal Data With

We may disclose personal data where necessary to:

  • our employees and authorised personnel;
  • professional advisers;
  • technology and hosting providers;
  • analytics providers;
  • advertising platforms;
  • payment providers;
  • accountants and auditors;
  • legal advisers;
  • insurers;
  • IT and security providers;
  • contractors and suppliers;
  • regulators and public authorities where legally required; or
  • other parties where you have instructed or authorised us to disclose information.

We do not sell personal data as a general business practice.

We only disclose personal data where there is an appropriate legal basis and where the disclosure is relevant to the purpose for which the information is being processed.

14 International Data Transfers

Some of our service providers may process personal data outside Ireland or the European Economic Area ("EEA").

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable GDPR requirements.

Depending on the circumstances, safeguards may include:

  • an adequacy decision;
  • Standard Contractual Clauses;
  • appropriate contractual protections;
  • supplementary safeguards; or
  • another legally recognised transfer mechanism.

Where applicable, further information about relevant international transfers and safeguards can be obtained by contacting us.

15 How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Retention periods may depend on:

  • the nature of the information;
  • the purpose for which it is processed;
  • whether you remain an active client;
  • legal and accounting requirements;
  • potential legal claims;
  • regulatory requirements; and
  • our legitimate business needs.

For example, client and financial records may need to be retained for longer periods than general website enquiries.

Where a specific retention period is not appropriate, we may determine retention based on documented criteria.

16 Data Security

We take reasonable technical and organisational measures to protect personal data against:

  • unauthorised access;
  • accidental loss;
  • destruction;
  • alteration;
  • disclosure; and
  • other unlawful or unauthorised processing.

Security measures may include access controls, authentication, permissions management, secure systems, backups, staff procedures and other safeguards appropriate to the nature of the information.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

17 Data Breaches

If we become aware of a personal data breach, we will assess the breach and take appropriate action in accordance with applicable data protection law.

Where legally required, we will notify the Data Protection Commission and/or affected individuals within the applicable timeframes.

18 Your Data Protection Rights

Subject to applicable legal conditions and exemptions, you may have the following rights:

Right to access
You may request a copy of the personal data we hold about you.
Right to rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to erasure
In certain circumstances, you may request that we delete your personal data.
Right to restriction
In certain circumstances, you may request that we restrict the processing of your personal data.
Right to object
You may object to certain types of processing, including processing based on legitimate interests. You have a particularly strong right to object to direct marketing.
Right to data portability
Where applicable, you may request certain personal data in a structured, commonly used and machine-readable format and request its transmission to another controller.
Right to withdraw consent
Where we process your personal data based on consent, you may withdraw that consent at any time.
Rights relating to automated decision-making
Where applicable, you may have rights relating to solely automated decision-making and profiling that produces legal or similarly significant effects.

Not every right applies in every situation, and certain legal exemptions or restrictions may apply.

The Irish DPC recognises rights including access, rectification, erasure, restriction, portability, objection and withdrawal of consent, subject to the applicable legal conditions.

19 How to Exercise Your Rights

Please provide enough information for us to identify you and understand your request.

We may need to request additional information to verify your identity where reasonably necessary.

We will handle valid requests within the timeframe required by applicable law.

The DPC states that organisations should provide information relating to rights requests in a concise, transparent, understandable and accessible manner.

20 Complaints

If you have concerns about how Forest Branding processes your personal data, we encourage you to contact us first so that we can investigate and attempt to resolve your concern.

The Data Protection Commission is the Irish supervisory authority responsible for data protection matters.

You may also have the right to contact another relevant supervisory authority where permitted under applicable GDPR rules.

21 Children's Privacy

Our services and website are primarily directed toward businesses and professional audiences.

We do not knowingly seek to collect personal data from children through our website for purposes that are not appropriate or permitted under applicable law.

If you believe that a child has provided personal data to us, please contact us so that we can assess and take appropriate action.

22 Third-Party Websites

Our website may contain links to third-party websites, platforms or services.

We are not responsible for the privacy practices, security, content or policies of third-party websites.

You should review the privacy policy of any third-party website before providing personal data.

23 Business Contacts

Where we communicate with individuals in a professional or business capacity, we may process business contact information such as:

  • name;
  • work email address;
  • job title;
  • company;
  • business telephone number; and
  • information contained in professional communications.

We may use this information to communicate about services, proposals, projects, business relationships and other legitimate business matters, subject to applicable data protection and direct marketing rules.

24 Information from Public Sources

We may obtain professional or business information from publicly available sources where appropriate and lawful.

This may include information from:

  • company websites;
  • professional networking platforms;
  • public business directories;
  • industry publications;
  • publicly available corporate records; and
  • other legitimate public sources.

Where required, we will provide the relevant privacy information required by GDPR.

25 Automated Decision-Making and Profiling

Forest Branding does not currently intend to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

Where we use analytics, audience segmentation, advertising technologies or similar tools, these activities should not automatically be interpreted as solely automated decision-making producing legal or similarly significant effects.

If this changes, we will update this Privacy Policy and provide any information required under applicable law.

26 Confidential Business Information

Personal data should be distinguished from confidential business information.

Where you provide confidential business information to Forest Branding as part of a commercial relationship, we will handle that information in accordance with our contractual obligations and applicable law.

This Privacy Policy does not replace any confidentiality or non-disclosure agreement that may apply to a particular relationship.

27 Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • changes in our services;
  • changes to our website;
  • changes to technology;
  • changes to data processing practices;
  • legal or regulatory developments; or
  • other operational changes.

When we update this policy, we will revise the Last Updated date at the top of the document.

Where required by law, we will provide additional notice or seek consent before introducing material changes to how personal data is processed.

The Irish DPC recommends that privacy policies be treated as dynamic documents and reviewed regularly so they accurately reflect an organisation's actual processing activities.

28 Contact Us

If you have questions about this Privacy Policy, our data practices, or your personal data, contact:

Forest Branding and Digital Media Ltd.

Company: Forest Branding and Digital Media Ltd

Address: Kilmacleague, Dunmore East, Waterford, X91 C2V9, Ireland

Website: forestbrandingdigital.com

Email: info@forestbrandingdigital.com

Contents

01 Who We Are 02 What Personal Data We Collect 03 How We Collect Personal Data 04 Why We Use Your Personal Data 05 Our Legal Bases for Processing 06 Marketing Communications 07 Cookies and Similar Technologies 08 Analytics 09 Advertising and Marketing Technologies 10 Social Media 11 Client Data and Marketing Campaign Data 12 Third-Party Service Providers 13 Who We May Share Personal Data With 14 International Data Transfers 15 How Long We Keep Personal Data 16 Data Security 17 Data Breaches 18 Your Data Protection Rights 19 How to Exercise Your Rights 20 Complaints 21 Children's Privacy 22 Third-Party Websites 23 Business Contacts 24 Information from Public Sources 25 Automated Decision-Making and Profiling 26 Confidential Business Information 27 Changes to This Privacy Policy 28 Contact Us
Forest Branding and Digital Media Ltd

Forest Branding and Digital Media Ltd is a digital marketing agency bringing brand strategy, performance marketing, paid media, social, and creator partnerships into one connected approach.

Studio

About Us Blogs Contact Terms & Conditions Privacy Policy Cookie Policy

Services

Marketing & Brand Strategy Growth & Performance Marketing Digital Advertising & Paid Media Social & Audience Marketing Influencer & Creator Marketing

Contact

sales@forestbrandingdigital.com

Kilmacleague, Dunmore East
Waterford, X91 C2V9, Ireland

© 2026 Forest Branding and Digital Media Ltd. All rights reserved. · Terms & Conditions · Privacy Policy · Cookie Policy

Brand · Growth · Creators