Last Updated: August 2024
Welcome to Box Projects Group Limited (“we,” “our,” “us”). We are a UK-based construction consultancy firm committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit our website or engage with our services.
Information We Collect
We may collect and process the following types of personal data:
- Personal Identification Information: Name, email address, phone number, postal address.
- Technical Data: IP address, browser type, operating system, and other technical information about the devices you use to access our website.
- Usage Data: Information on how you use our website and services.
- Marketing and Communications Data: Your preferences regarding marketing communications and your communication preferences.
How We Collect Your Information
We collect data through the following methods:
- Direct Interactions: When you fill in forms or correspond with us via post, phone, email, or other direct means.
- Automated Technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns.
- Third Parties: We may receive personal data from third-party analytics providers.
How We Use Your Information
We use your information for the following purposes:
- To Provide Services: Engaging with you on consultancy projects and managing client relationships.
- To Manage Our Relationship: Communicating updates regarding our terms, privacy policy, and requesting feedback through reviews or surveys.
- To Improve Our Website: Ensuring our website content is presented effectively for your device.
- For Marketing Purposes: Delivering relevant information about our services and measuring the effectiveness of our communications.
- To Comply with Legal Obligations: Ensuring compliance with applicable laws, regulations, and industry guidelines.
Legal Bases for Processing Your Information
We rely on the following legal bases to process your personal data:
- Consent: Where you have provided clear consent for us to process your data for a specific purpose.
- Contractual Necessity: Where processing is necessary for the performance of a contract or agreement.
- Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
- Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests.
Data Sharing
We may share your personal data with:
- Service Providers: Third-party companies that provide IT and system administration services essential to our operations.
- Professional Advisors: Including lawyers, accountants, and insurers who support our business operations.
- Regulatory Authorities: HM Revenue & Customs and other UK-based authorities as required by law.
International Transfers
As we do not operate internationally, your personal data will not be transferred outside the UK.
Data Security
We have implemented appropriate security measures to prevent your personal data from being accidentally lost, accessed without authorization, altered, or disclosed. Additionally, our systems and processes are designed with privacy in mind, adhering to the principles of Privacy by Design and Default.
Data Retention
We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including meeting any legal or reporting requirements.
Your Legal Rights
Under data protection laws, you have rights concerning your personal data, including:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request the correction of any inaccurate personal data.
- Right to Erasure: Request deletion of your personal data where there is no compelling reason for us to retain it.
- Right to Object: Object to our processing of your personal data where we rely on legitimate interests.
- Right to Restrict Processing: Request the suspension of processing your personal data.
- Right to Data Portability: Request the transfer of your personal data to another party.
How to Exercise Your Rights
To exercise any of these rights, please contact us at info@box-projects.com
Data Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we are committed to notifying the Information Commissioner’s Office (ICO) within 72 hours and informing affected individuals without undue delay, as required by UK GDPR.
Changes to This Privacy Policy
We may update this Privacy Policy as needed to reflect legal, technical, or business developments. Any significant changes will be communicated via a notice on our website.
Contact Us
If you have any questions or concerns about this Privacy Policy, our privacy practices, or if you wish to exercise your data protection rights, please contact us at: info@box-projects.com.