Privacy notice

The data controller is Boxed Online Ltd. You can contact us at hello@boxed.org.uk.

• Enquiry, booking, free proof and free website report forms: your name, email address, company, phone number if you give it, the details you write about your business or process, and for a website report your website address and any competitor websites you name. We use this to reply and to decide whether and how we can help. Lawful basis: legitimate interests (responding to people who contact us), or steps taken at your request before a contract.
• Newsletter: your email address and, if you give it, your name. We only send the newsletter with your consent, and you can withdraw it at any time with the unsubscribe link. Lawful basis: consent.
• Server logs: page requests, referrer and approximate location, without identifying you personally. Lawful basis: legitimate interests (keeping the site secure and improving it).
• Analytics cookies: if you accept them in the cookie banner, Google Analytics records which pages you visit, how you arrived and roughly where you are, so we can see what is useful. They are never used for advertising. Until you accept, no analytics cookies are set. You can change your choice at any time with the Cookie settings link at the foot of every page. Lawful basis: consent.

We do not sell your data, and we do not use it for automated decisions that affect you.

We use a small number of processors under data processing agreements:

• Microsoft Azure, for hosting this website and storing form submissions (UK South region).
• Microsoft 365 and Dynamics 365, to manage enquiries, send replies and send the newsletter.
• Google, for Google Analytics, only if you accept analytics cookies.

If any provider processes data outside the UK, it is protected by the UK International Data Transfer Agreement or an adequacy arrangement.

• Enquiries and proof applications: 24 months from the last contact, then deleted.
• Newsletter subscribers: until you unsubscribe.
• Records of clients and contracts: as long as the law requires for accounting, normally six years.

Under UK GDPR you can ask us to:

• tell you what data we hold and give you a copy;
• correct anything that is wrong;
• delete your data, or restrict how we use it;
• stop using your data where we rely on legitimate interests;
• move your data to another provider; and
• withdraw consent for the newsletter at any time.

Email hello@boxed.org.uk and we will reply within one month.

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

If we change how we use your data we will update this page and, where the change matters, tell you directly.