fbpx
MenuClose

Privacy Notice

This privacy notice will explain how Bboxx Ltd (Bboxx or we) uses the personal data it collects. Bboxx’s contact details are as follows:

Address: Portman House, 3rd Floor, 2 Portman Street, London, W1H 6DU United Kingdom

Telephone number: +44 (0)20 8987 3195

Email address: info@bboxx.co.uk

Data Protection Officer: Simon Cox (s.cox@bboxx.co.uk)

Bboxx controls and processes the following personal data:

1. Website users

When you visit our website, we may collect information from you through cookies or similar technology.

What are cookies?

Cookies are small text files that can be used to make a website user’s experience more efficient.

How do we use cookies?

Bboxx uses cookies in a range of ways to improve your experience on our website, including:


What types of cookies do we use?

There are a number of different types of cookies, however, our website uses the following types:


How to manage your cookies

You can set your browser to not accept cookies, and you can change or withdraw your consent to the use of cookies on our website at any time, using the Cookie Declaration form on our website. However, in limited cases, some of our website features may not function as a result.

Further details about the cookies which we use on our website, including their purpose and expiry date, can be found on the Cookie Declaration on our website.

What if I am concerned about the control and processing of my personal data?

Bboxx’s Data Protection Officer is Simon Cox (s.cox@bboxx.co.uk). Website users with queries or concerns about Bboxx’s control and processing of their personal data should contact Simon.

Website users with serious concerns about Bboxx’s control and processing of their personal data, or who are not satisfied with any response from Bboxx, may raise the issue with the Information Commissioner’s Office. Their contact number is +44 (0)303 123 1113, and their address is: Wycliffe House, Water Lane, Wilmslow SK9 5AF

2. Recipients of Bboxx marketing information

Bboxx will retain personal data in order to send marketing and promotional information to those interested. 

In each case, the personal data held will be limited to contact details, such as the name and email address notified to Bboxx via the contact form on the Bboxx website.

Why does Bboxx hold this personal data?

Bboxx holds this personal data in its own legitimate interests because:

Individuals submitting their email address to sign up for Bboxx’s newsletter are deemed to have consented to that email address being held on Bboxx’s mailing systems. Individuals can request that their email be deleted from those systems at any time, by clicking the “Unsubscribe” button on each newsletter.  Bboxx will retain that email address provided until the individual chooses to opt-out of receiving the newsletter.

How long will Bboxx retain your personal data?

 Personal data will be held for as long as an individual remains a subscriber to the newsletter. Upon unsubscribing, an individual’s personal data will be deleted.

What are my data protection rights?

Any recipient of Bboxx marketing and promotional material has the right to receive a copy of the personal data they have provided to Bboxx, although in most cases, this will be limited to name and email address. An application may also be made for any errors to be rectified. They also have the right to have that data transferred to another data controller (the “right to data portability”)

Recipients of Bboxx marketing and promotional material may at any time ask to be removed from lists of those receiving Bboxx marketing and promotional material (in other words, having their personal data deleted from Bboxx databases). Any request should be emailed to marketing@bboxx.co.uk.

What if I am concerned about the control and processing of my personal data?

Bboxx’s Data Protection Officer is Simon Cox (s.cox@bboxx.co.uk). Marketing material recipients with queries or concerns about Bboxx’s control and processing of their personal data should contact Simon. 

Recipients of marketing or promotional material with serious concerns about Bboxx’s control and processing of their personal data, or who are not satisfied with any response from Bboxx, may raise the issue with the Information Commissioner’s Office. Their contact number is +44 (0)303 123 1113, and their address is: Wycliffe House, Water Lane, Wilmslow SK9 5AF.

3. Investors, potential investors, donors, supporters, board directors and other stakeholders

Bboxx will retain contact information on business-to-business contacts and in some cases, this will include personal data relating to individuals.

In most cases, the personal data retained will be limited to name, email address and telephone numbers or the details included on a particular individual’s business card or e-card. In some cases, however, additional personal data, such as an address and a copy of a passport, is also collected.

Why does Bboxx hold this personal data?

Bboxx holds this personal data in its own legitimate interests because:

Bboxx will not share personal data held in respect of its stakeholder contacts without consent. Personal data does not include information that is included in Bboxx’s public record at Companies House.

How long will Bboxx retain your personal data?

Personal data held in respect of stakeholder contacts will be retained for so long as Bboxx’s relationship with that stakeholder continues.

How does Bboxx store your personal data?

Personal data is processed by Bboxx using well-known and widely available relationship management, virtual data site analytic, survey and email distribution software. The data itself is held on Bboxx’s own servers, or those of its cloud platform providers, within the EU and/or the servers of Bboxx’s virtual data site provider.

What are my data protection rights?

Investors, potential investors, donors, supporters, board directors and other stakeholders who are individuals have the right to receive a copy of the personal data they have provided to Bboxx although in almost all cases, this will be limited to the information described above. They also have the right to have that data transferred to another data controller (the “right to data portability”) An application may also be made for any errors to be corrected.

Investors, potential investors, donors, supporters, board directors and other stakeholders may at any time ask to be removed from Bboxx contact lists (in other words, having their contact data deleted from Bboxx databases). Such a request should be emailed to info@bboxx.co.uk, or by ticking the box included in Bboxx communications.

What if I am concerned about the control and processing of my personal data?

Bboxx’s Data Protection Officer is Simon Cox (s.cox@bboxx.co.uk).  Stakeholder contacts with queries or concerns about Bboxx’s control and processing of their personal data should contact Simon. 

Stakeholder contacts with serious concerns about Bboxx’s control and processing of their personal data, or who are not satisfied with any response from Bboxx, may raise the issue with the Information Commissioner’s Office. Their contact number is +44(0)303 123 1113, and their address is: Wycliffe House, Water Lane, Wilmslow SK9 5AF.

4. Customers, including prospective customers

All customers are customers of Bboxx Ltd’s NGU’s, and are not customers of Bboxx Ltd itself. Additionally, all customers are located outside of the UK and EU. Bboxx holds identification, contact data and financial data on its customers, including details of income. Bboxx also controls and processes data relating to the usage of Bboxx products and services.

Why does Bboxx hold this personal data?

Bboxx also holds this data for its own legitimate interests. It is necessary for Bboxx to know to whom its products and services are being provided, and to make assessments as to whether the original supply, and the continuation of supply, of products and services is economically viable.

How does Bboxx store your personal data?

In common with many businesses, Bboxx uses cloud storage platforms. The data stored on these platforms may contain personal data relating to customers, as well as other stakeholders. The cloud storage platforms used by Bboxx are provided by well-known and respected providers and are private to Bboxx. These storage facilities are located in the EU, and consequently are subject to the EU General Data Protection Regulation (GDPR). The provision of this cloud storage is governed by formal legal agreements between Bboxx and the cloud provider.

Who does Bboxx share your personal data with?

Bboxx will provide its Next Generation Utility (NGU) partners with access to commercial data. This may include personal data relating to customers and is accessed in-country by the NGU. NGUs are located outside the EEA in territories to which no adequacy decision has been made by the EU. To the extent that the commercial data shared with an NGU includes personal data relating to customers, the transfer, processing and access by the NGU of such data is subject to a binding legal agreement between the NGU and Bboxx, the purpose of which is to safeguard the data and extend the rights contained within the GDPR to customers and other data subjects.

How long will Bboxx retain your personal data?

Bboxx will retain a customer’s personal data for the period during which the customer remains a customer of Bboxx products and services. A customer’s personal data will also be retained by Bboxx for an unspecified period of time after the customer ceases to be a Bboxx customer. This is to enable Bboxx and/or the relevant NGU to comply with applicable legal obligations (for example, tax or anti-fraud laws and regulations).

What are my data protection rights?

A customer of Bboxx may at any time make a data subject request in order to discover what personal data of theirs is controlled and/or processed by Bboxx. An application may also be made for errors in that data to be rectified. An application may also be made for the data to be transferred to another person, or to be deleted from Bboxx’s databases.

The right of a customer to receive a copy of the personal data they have provided to Bboxx, and the right to have that data transferred to another data controller (the “right to data portability”), applies to that personal data provided by the customer and in circumstances where the request is not manifestly unfounded, excessive or would prejudice the rights of others.

Customers may exercise their right for their personal data to be erased (the “right to be forgotten”) in certain circumstances, such as where the data is no longer necessary for Bboxx’s legitimate interests, or if Bboxx has processed the data unlawfully. Customers should, however, be aware that deletion of their personal data from Bboxx’s databases would mean that Bboxx or the relevant NGU would be unable to continue the provision of products and services.

A customer wishing to have their personal data rectified, deleted or transferred to another person should contact Bboxx’s Data Protection Officer. 

What if I am concerned about the control and processing of my personal data?

Bboxx’s Data Protection Officer is Simon Cox (s.cox@bboxx.co.uk). Customers with queries or concerns about Bboxx’s control and processing of their personal data should contact Simon. 

Customers with serious concerns about Bboxx’s control and processing of their personal data, or who are not satisfied with any response from Bboxx, may raise the issue with the Information Commissioner’s Office. Their contact number is +44 (0)303 123 1113, and their address is: Wycliffe House, Water Lane, Wilmslow SK9 5AF.

5. Employees (including contractors, temporary staff, interns and candidates)

Bboxx holds identification and contact data, including name, address, tax, nationality and national insurance details. Bboxx also maintains employee files containing references, performance appraisals and disciplinary records. Where references are held on file, this will include the name and contact details of the individual providing the reference. 

Why does Bboxx hold this data?

Bboxx holds this data:

Note that, where identification data is held in compliance with immigration and visa obligations, that data may indirectly disclose an employee’s race or ethnic origin, thus categorising it as Special Category Data. This Special Category Data is held so that Bboxx complies with its legal obligations in the UK or EU member states.

How does Bboxx store your personal data?

In common with many businesses, Bboxx uses cloud storage platforms. The data stored on these platforms may contain personal data relating to employees, as well as other stakeholders. The cloud storage platforms used by Bboxx are provided by well-known and respected providers and are private to Bboxx. These storage facilities are located in the EU and consequently, are subject to the EU General Data Protection Regulation (GDPR). The provision of this cloud storage is governed by formal legal agreements between Bboxx and the cloud provider.

How long will Bboxx retain your personal data?

Bboxx will retain employee personal data for the period of time during which each employee remains an employee of Bboxx. After an employee leaves Bboxx, the personal data will be retained for so long as is necessary to provide references and comply with tax and national insurance obligations. Thereafter, a former employee’s data will be reviewed and retained for so long as is necessary for Bboxx to fulfil any legal obligation for which it is necessary to retain the data, or to exercise any administration tasks for the former employee, such as pension administration.

Candidates

Personal data provided by candidates for jobs at Bboxx will be retained at least for so long a period as Bboxx continues to recruit for the job which the candidate has applied for.

For candidates who are successful and accept an offer of employment, their personal data will continue to be retained after the candidate accepts an offer of employment, and will not be deleted or anonymised unless the candidate withdraws from their offer of employment. Once the candidate starts their job at Bboxx, their personal data relating to their application will continue to be held, in line with this policy’s section on employees.

Bboxx retains the personal data of successful candidates after an offer of employment has been accepted because it is in Bboxx’s own legitimate interests to maintain a record of the information upon which an offer of employment was made to a candidate.

For unsuccessful candidates, personal data will be deleted or anonymised once Bboxx completes the recruitment for the job the candidate applied for.

What are my data protection rights?

An employee of Bboxx may at any time make a data subject request, in order to discover what personal data of theirs is controlled and/or processed by Bboxx. An employee may also make an application for any errors in that data to be rectified and where necessary, transferred to another person.

The right of an employee or former employee to receive a copy of the personal data they have provided to Bboxx, and the right to have that data transferred to another data controller (the “right to data portability”), applies to that personal data provided by the employee and in circumstances where the request is not manifestly unfounded, excessive or would prejudice the rights of others.

Former employees may exercise their right for their personal data to be erased (the “right to be forgotten”) in certain circumstances, such as where the data is no longer necessary for Bboxx’s legitimate interests or if Bboxx has processed the data unlawfully.

The right of current Bboxx employees to have their personal data deleted is, however, overridden by Bboxx’s own legitimate interests and its statutory and legal obligations.

An employee wishing to have their personal data rectified, deleted or transferred to another person should contact Bboxx’s Data Protection Officer.

What if I am concerned about the control and processing of my personal data?

Bboxx’s Data Protection Officer is Simon Cox (s.cox@bboxx.co.uk).

Employees with queries or concerns about Bboxx’s control and processing of their personal data should contact Simon. Employees with serious concerns about Bboxx’s control and processing of their personal data, or who are not satisfied with any response from Bboxx, may raise the issue with the Information Commissioner’s Office. Their contact number is +44 (0)303 123 1113, and their address is: Wycliffe House, Water Lane, Wilmslow SK9 5AF.

 August 2021