Branchspace x 2e – Privacy and Cookies Policy 

1. About this Policy 

1.1 At Branchspace Limited (“Branchspace”) and 2e Systems GmbH (“2e”) (together, “we”, “us” or “our”), we respect your privacy and are committed to maintaining your trust and protecting your Personal Data. Personal Data is any information that identifies you, or is capable of identifying you, as an individual person. 

1.2 Branchspace and 2e work together to present and promote our combined technology product offering through the website at branchspacex2e.com (the “Website”), which we manage jointly. This Privacy and Cookies Policy (the “Policy”) describes how we collect, use, share and protect your Personal Data when you visit the Website, submit an enquiry through it, or book a meeting with us through it. 

1.3 The Website is operated by: 

  • Branchspace Limited, a company registered in England and Wales under company number 07533156, whose registered office is at Henry Wood House, 4–5 Langham Place, London W1B 3DG, United Kingdom; and 

  • 2e Systems GmbH, a company registered in Germany with the Local Court (Amtsgericht) of Königstein under HRB 7303, whose registered office is at Brunnenstraße 4, 65812 Bad Soden am Taunus, Germany. 

1.4 We process your Personal Data in accordance with the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), the EU General Data Protection Regulation (Regulation (EU) 2016/679) (“EU GDPR”), the German Federal Data Protection Act (“BDSG”) and the German Telecommunications Digital Services Data Protection Act (“TDDDG”), each as amended from time to time (together, “Data Protection Laws”). 

1.5 This Policy applies only to Personal Data collected through the Website. Each of Branchspace and 2e also processes Personal Data independently for its own business purposes, for example once you become a customer of one of us, and is solely responsible for that processing. You can read more about this in Branchspace’s Privacy Policy and 2e’s Privacy Policy. 

1.6 The Website is intended for business audiences and is not directed at children. We do not intend to collect special categories of Personal Data (such as information about your health, ethnic origin or religious beliefs) through the Website, and we ask that you do not include such information in any message you send us. 

2. Our joint controller arrangement 

2.1 Branchspace and 2e are “joint controllers” of the Personal Data described in this Policy. This means we decide together why and how your Personal Data is processed through the Website, and we are jointly responsible to you for that processing under Data Protection Laws. 

2.2 As required by Article 26 of the UK GDPR and the EU GDPR, we are committed to enter into a written arrangement that sets out how we share our data protection responsibilities. The essence of that arrangement is summarised below, and you may request a copy of this summary at any time using the contact details in section 11. 

2.3 Branchspace is your main point of contact for the Website. Branchspace is responsible for: 

  • acting as your first point of contact for any questions about this Policy; 

  • receiving and coordinating responses to requests made when you exercise your data protection rights, including requests sent to 2e; 

  • maintaining the Website’s cookie consent tool and making sure non-essential cookies are only set in line with your choices; 

  • presenting this Policy to you, including any updates, as required by Data Protection Laws; and 

  • notifying the UK Information Commission (ICO) of any personal data breach where required. 

2.4 2e is responsible for: 

  • responding promptly to Branchspace when Branchspace coordinates a request from you, and responding directly to any request you send to 2e; 

  • following up enquiries and meetings that relate to 2e’s products in line with this Policy; and 

  • notifying the competent German data protection authority of any personal data breach where required. 

2.5 Both Branchspace and 2e are responsible for: 

  • producing this Policy together; 

  • making sure we have a lawful basis for each use of your Personal Data described in this Policy; 

  • having written contracts in place with the service providers that process Personal Data on our behalf; 

  • keeping the Personal Data we each hold secure and retaining it only for as long as described in section 8; and 

  • informing each other without undue delay of any personal data breach or any request or complaint from you. 

2.6 Whatever the terms of our arrangement, you may exercise your rights under Data Protection Laws in respect of and against either Branchspace or 2e. 

2.7 If you go on to enter into a business relationship with Branchspace or 2e (for example, by becoming a customer), that company will process your Personal Data for that relationship as an independent controller, under its own privacy policy referred to in section 1.5. 

3. The Personal Data we collect 

3.1 We collect Personal Data directly from you when you complete a form or book a meeting, automatically when you browse the Website, and from third parties as described below. We only collect Personal Data that is adequate, relevant and limited to what is necessary for the purposes set out in section 4. 

3.2 Website analytics (Squarespace). When you visit the Website, our website platform Squarespace automatically collects: 

  • your IP address, and your approximate location derived from it (country, region and city); 

  • the pages you view, your sessions, the pages on which you enter and leave the Website, and the time you spend on each page; 

  • the website or search engine that referred you to the Website; 

  • your device type, browser, operating system and screen size; and 

  • a visitor identifier and a session identifier held in first-party Squarespace cookies (see section 5). 

3.3 Search performance (Google Search Console). Google provides us with reports about how the Website appears in Google Search. These include the search queries that displayed our pages; the number of impressions and clicks, the click-through rate and our average position; and breakdowns by page, country, device and search appearance. Google aggregates this information before we receive it, and it does not allow us to identify you. 

3.4 Business visitor recognition (Leadinfo). Where you have consented to it (see section 5), our service provider Leadinfo collects: 

  • your IP address; 

  • information about the company associated with that IP address, namely its name, address, sector, number of employees and website, which Leadinfo matches from publicly available business databases; 

  • the pages you view, the order in which you view them, the time spent on each page, the number of visits and whether you return to the Website; 

  • the website or other source that referred you to the Website; and 

  • where Leadinfo’s cookie mode is enabled, an identifier held in a cookie (see section 5). 

3.5 Enquiry forms (Squarespace). When you submit a form on the Website, we collect: 

  • your name, work email address, company name and job role or title; 

  • your phone number, where the form asks for it; 

  • the contents of your message or enquiry; 

  • whether you ticked any consent checkbox on the form; and 

  • which form you used and the page from which you submitted it. 

3.6 Meeting bookings (Acuity Scheduling). When you book a meeting with us, we collect: 

  • your name, email address, phone number and company; 

  • your timezone; 

  • the type of appointment and the date and time you chose; and 

  • any changes you make, including reschedules and cancellations. 

3.7 Correspondence and records. We keep a record of our correspondence with you, and of your cookie preferences and any requests you make to exercise your rights, so that we can show that we have respected them. 

3.8 You are not under any legal or contractual obligation to provide Personal Data through the Website. However, if you do not complete the required fields on a form or booking page, we may be unable to respond to your enquiry or arrange your meeting. 

4. How we use your Personal Data and our lawful bases 

4.1 We only use your Personal Data where Data Protection Laws allow us to. The table below sets out each purpose for which we use your Personal Data, the categories of Personal Data involved (by reference to section 3) and the lawful basis under Article 6 of the UK GDPR and the EU GDPR on which we rely. 

Clause 4.1

What we use your Personal Data for

Purpose Personal Data used Lawful basis
To deliver the Website to your device, keep it secure and remember your cookie preferences IP address, device and browser data, strictly necessary cookies (3.2, 3.7) Legitimate interests: operating a secure, functioning website
To understand how visitors use the Website and improve its content and design Squarespace analytics data and cookies (3.2) Consent, given through our cookie banner
To measure how the Website performs in Google Search Aggregated Google Search Console reports (3.3) Legitimate interests: improving the visibility of our products. These reports do not identify you
To identify the businesses that visit the Website and understand their interest in our products Leadinfo data and, where used, cookies (3.4) Consent, given through our cookie banner
To respond to your enquiry and follow up on it Form data (3.5), correspondence (3.7) Legitimate interests: responding to business enquiries about our products
To arrange, hold, reschedule and follow up meetings you book with us Booking data (3.6), correspondence (3.7) Legitimate interests: meeting prospective customers who ask to speak with us
To send you news and information about our products by email Name, work email address, company, consent checkbox state (3.5) Consent, given by ticking the checkbox on our forms
To keep records of your consents and requests, and to comply with our legal obligations Consent records, correspondence, records of requests (3.7) Legal obligation; legitimate interests: demonstrating our compliance
To establish, exercise or defend legal claims, and to respond to lawful requests from courts, regulators or law enforcement Any of the Personal Data in section 3, as relevant Legal obligation; legitimate interests: protecting our legal rights

4.2 Where we rely on legitimate interests, we have balanced our interests against your rights and freedoms and concluded that our use of your Personal Data is proportionate and expected in a business context. You can ask us for more information about this assessment using the contact details in section 11. 

4.3 Where we rely on your consent, you may withdraw it at any time, through our cookie settings, by clicking “unsubscribe” in any marketing email, or by contacting us. Withdrawing your consent does not affect the lawfulness of our processing before you withdrew it. 

4.4 If we intend to use your Personal Data for a new purpose that is not compatible with the purpose for which we collected it, we will tell you before we do so and, where required, ask for your consent. 

4.5 We do not use the Personal Data collected through the Website to make any decision about you based solely on automated processing that has a legal or similarly significant effect on you. Leadinfo identifies companies, not individuals, and we do not use it to profile you personally. 

4.6 We may combine Website data into aggregated statistics that do not identify you (for example, the total number of visitors from a given country). Such statistics are not Personal Data. 

5. Cookies and similar technologies 

5.1 We only place non-essential cookies on your device, or allow scripts to access information on it, once you have given your consent through our cookie banner. Strictly necessary cookies are set without consent because the Website cannot function without them. 

5.2 Cookies are small text files that a website or its service provider places on your device through your web browser. They allow the website to recognise your browser and remember certain information. “Similar technologies” include scripts and tags that read information from your device, such as your browser type or screen size. In this Policy, we refer to all of these as “cookies”. 

5.3 The Website uses the following categories of cookies: 

  • Strictly necessary cookies keep the Website secure, make it work as you would expect and remember your cookie choices. They cannot be switched off. 

  • Analytics cookies tell us how many people visit the Website, how they arrive and which pages they view, so that we can improve it. 

  • Marketing cookies help us recognise the businesses that visit the Website and understand which of our products interest them. 

Clause 5.4

Cookies on this website

Cookie Provider Category Purpose Duration
crumb Squarespace Strictly necessary Protects the Website and its forms against cross-site request forgery Session
ss_cookieAllowed Squarespace Strictly necessary Remembers the choices you made in our cookie banner Persistent
Booking cookies Acuity Scheduling Strictly necessary Operate the booking calendar when you use it to book a meeting Session
ss_cvr Squarespace Analytics Identifies unique visitors to the Website using a random identifier 2 years
ss_cvt Squarespace Analytics Groups your page views into a single session 30 minutes
_li_id.[ID] Leadinfo Marketing Distinguishes new visitors from returning visitors 2 years
_li_ses.[ID] Leadinfo Marketing Records which pages are viewed during a visit 30 minutes

5.5 The Leadinfo cookies are only used where Leadinfo’s cookie mode is enabled. Where we use Leadinfo’s cookieless mode, Leadinfo does not place cookies, but its script still reads information from your browser, so we only activate it if you consent to Marketing cookies. 

5.6 Google Search Console does not place any cookies on your device through the Website. 

5.7 You can accept or reject non-essential cookies when you first visit the Website. Rejecting is as easy as accepting, and you can change your mind at any time by clicking “Cookie settings” in the footer of any page. If you withdraw your consent, the relevant cookies will stop collecting new information. 

5.8 You can also set your web browser to block or delete cookies. Please note that if you block strictly necessary cookies, some parts of the Website, such as our forms and booking calendar, may not work properly. For more information about managing cookies, please visit www.aboutcookies.org. 

5.9 We may update the cookies we use from time to time. We will update this section, and ask for your consent again where required, before we place any new non-essential cookie. 

6. Who we share your Personal Data with 

6.1 We do not sell your Personal Data. We only share it where necessary for the purposes described in section 4, and only to the extent each recipient needs it. 

6.2 Between Branchspace and 2e. Both Branchspace and 2e have access to the Personal Data collected through the Website, so that the right team can respond to your enquiry or attend your meeting, whichever of our products it concerns. 

6.3 Our service providers. We use the following service providers, which process Personal Data on our behalf as data processors under written contracts that meet the requirements of Article 28 of the UK GDPR and the EU GDPR: 

Clause 6.3

Our service providers

Service provider What it does for us Where it processes data
Squarespace Ireland Limited and Squarespace, Inc. Hosts the Website, provides website analytics and receives form submissions Ireland and the United States
Acuity Scheduling (part of Squarespace) Provides our online booking calendar and sends booking confirmations and reminders United States
Leadinfo B.V. Identifies the businesses that visit the Website Netherlands
IT, email and customer relationship management providers used by Branchspace or 2e Store and manage enquiries, bookings and our correspondence with you United Kingdom and European Economic Area

6.4 Leadinfo also acts as an independent controller when it compiles its own database of business information. You can read about this, and opt out of Leadinfo tracking on all websites that use it, on Leadinfo’s opt-out page. 

6.5 Google acts as an independent controller of the data it collects when you use Google Search. It shares only aggregated reports with us through Google Search Console and does not receive Personal Data from us through the Website. Google’s use of your data is described in Google’s Privacy Policy. 

6.6 Other recipients. We may also share your Personal Data with: 

  • our professional advisers, such as lawyers, accountants and auditors; 

  • courts, regulators, law enforcement agencies and other public authorities, where we are required to do so by law or to establish, exercise or defend our legal rights; and 

  • a prospective buyer of, or investor in, all or part of the business of Branchspace or 2e, subject to appropriate confidentiality obligations. 

7. International transfers 

7.1 Because Branchspace is based in the United Kingdom, 2e is based in Germany and some of our service providers are based in the United States, your Personal Data will be transferred between countries. Whenever we transfer your Personal Data outside the United Kingdom or the European Economic Area (“EEA”), we make sure it is protected by one of the safeguards described below. 

7.2 Between the United Kingdom and the EEA. Transfers from the EEA to the United Kingdom are covered by the European Commission’s adequacy decision for the United Kingdom, which was renewed on 19 December 2025 and runs until 27 December 2031. Transfers from the United Kingdom to the EEA are permitted under UK Data Protection Laws, which recognise the EEA as providing an adequate level of protection. 

7.3 To the United States. Squarespace, Inc., which also provides Acuity Scheduling, has certified its participation in the EU–U.S. Data Privacy Framework, the UK Extension to it and the Swiss–U.S. Data Privacy Framework. We rely on these frameworks for transfers to Squarespace in the United States. Squarespace’s data processing terms also include the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, which would apply if those frameworks ceased to be available. 

7.4 Other transfers. If we transfer your Personal Data to any other country outside the United Kingdom or the EEA, we will only do so where that country has been found to provide an adequate level of protection, or where we have put in place appropriate safeguards such as the Standard Contractual Clauses or the UK International Data Transfer Agreement or Addendum, together with any supplementary measures that may be required. 

7.5 You can request further information about these safeguards, including a copy of the relevant clauses, using the contact details in section 11. 

8. How long we keep your Personal Data 

8.1 We keep your Personal Data only for as long as necessary for the purposes described in this Policy, after which we securely delete or anonymise it. The criteria below apply unless a longer period is required by law or to establish, exercise or defend legal claims. 

  • Website analytics and Leadinfo data: for as long as it helps us understand how the Website is used and which businesses are interested in our products. We review this data regularly and delete or anonymise it once it no longer serves that purpose. 

  • Google Search Console reports: these contain aggregated data only and are kept by Google for the period it sets for Search Console. 

  • Enquiries and related correspondence: for as long as we need to respond to your enquiry and follow it up, and for as long as our discussions with you continue. If you become a customer, your data is then handled under that company’s own privacy policy. 

  • Meeting bookings: for as long as we need to arrange, hold and follow up the meeting. 

  • Marketing preferences: until you withdraw your consent. We then keep your email address on a suppression list so that we do not contact you again. 

  • Records of your consents and of requests you make to exercise your rights: for as long as we may need to show that we have respected them, taking into account applicable limitation periods. 

  • Cookies: as set out in the cookie table in section 5.4. 

8.2 In applying these criteria, we also take into account: 

  • the length of time we have an ongoing relationship with you; 

  • whether there is a legal obligation to which we are subject; and 

  • whether retention is advisable in light of our legal position, such as applicable limitation periods, litigation or regulatory investigations. 

8.3 Branchspace and 2e each apply these criteria in line with their internal retention schedules. You can ask us how long we keep particular Personal Data using the contact details in section 11. 

9. Your rights 

9.1 Under the UK GDPR and the EU GDPR you have a number of rights with regard to your Personal Data. Some of these rights apply only in certain circumstances, and they are subject to exemptions under Data Protection Laws. 

9.1.1 The right to be informed. You have the right to know what Personal Data we collect, what we do with it, who we share it with and how long we keep it. This information is set out in this Policy. 

9.1.2 The right of access. You have the right to ask for a copy of the Personal Data we hold about you, together with information about how we use it. 

9.1.3 The right to rectification. You have the right to ask us to correct Personal Data that is inaccurate and to complete Personal Data that is incomplete. 

9.1.4 The right to erasure. You have the right to ask us to delete your Personal Data where we no longer have a lawful reason to keep it. 

9.1.5 The right to restrict processing. You have the right to ask us to limit how we use your Personal Data, for example while we check its accuracy or consider an objection you have made. 

9.1.6 The right to object. You have the right to object to our use of your Personal Data where we rely on legitimate interests. You have an absolute right to object at any time to the use of your Personal Data for direct marketing. 

9.1.7 The right to data portability. Where we process your Personal Data on the basis of your consent and by automated means, you have the right to receive it in a structured, commonly used and machine-readable format, and to ask us to transmit it to another organisation. 

9.1.8 The right to withdraw consent. Where we rely on your consent, you may withdraw it at any time, as described in sections 4.3 and 5.7. 

9.1.9 Rights related to automated decision-making. You have the right not to be subject to a decision based solely on automated processing that has a legal or similarly significant effect on you. As explained in section 4.5, we do not make such decisions through the Website. 

9.2 To exercise any of these rights, please contact us using the details in section 11. You may contact either Branchspace or 2e, and we will coordinate our response. Exercising your rights is free of charge, although we may charge a reasonable fee or refuse to act where a request is manifestly unfounded or excessive. 

9.3 We will respond to your request within one month of receiving it. Where a request is complex, or you have made several requests, we may extend this period by up to two further months, in which case we will tell you why within the first month. 

9.4 We may need to ask you for information to confirm your identity before we act on your request. Where we do so, the time for our response starts once we have received that information. When responding to a request for access, we will carry out reasonable and proportionate searches for your Personal Data. 

10. Security of your Personal Data 

10.1 To help protect your Personal Data, Branchspace and 2e each maintain appropriate physical, technical and organisational safeguards, which we update and test on an ongoing basis. Data sent between your browser and the Website is encrypted in transit. 

10.2 We restrict access to your Personal Data to those Branchspace and 2e personnel who need it to respond to your enquiry or prepare for your meeting. We train our personnel on the importance of confidentiality and of maintaining the privacy and security of your information, and we take appropriate disciplinary measures to enforce their privacy responsibilities. 

10.3 We require our service providers to implement appropriate security measures and to process your Personal Data only on our instructions. 

10.4 Although we take these steps, no transmission of information over the internet is completely secure. If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, as required by Data Protection Laws. 

11. Contact us and complaints 

11.1 If you have any questions about this Policy, or wish to exercise your rights, please contact Branchspace in the first instance. You may also contact 2e directly. 

  • 2e Systems GmbH, Brunnenstraße 4, 65812 Bad Soden am Taunus, Germany. Data Protection Officer: privacy@2e-systems.com 

11.2 If you are unhappy with how we have handled your Personal Data, you can make a complaint to us using the details above. We will acknowledge your complaint within 30 days of receiving it, investigate it without undue delay and tell you the outcome. 

11.3 You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work, or where you believe an infringement has taken place. We would, however, appreciate the chance to address your concerns before you approach a supervisory authority. 

  • United Kingdom: the Information Commission (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Telephone: 0303 123 1113. Website: ico.org.uk/make-a-complaint 

  • Germany: the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden. Telephone: +49 611 1408-0. Email: poststelle@datenschutz.hessen.de. Website: datenschutz.hessen.de 

12. Changes to this Policy 

12.1 We may update this Policy from time to time to reflect changes in the way we process Personal Data, in the services we use or in Data Protection Laws. We will publish the updated Policy on this page and change the “last updated” date below. 

12.2 Where we make a significant change, we will also tell you about it through a notice on the Website and, where we hold your email address, by email. Where a change requires your consent, we will ask for it before the change takes effect. 

12.3 This Policy was last updated on 12th October 2026.