Privacy Policy

This privacy notice covers riskboxuk.com and the data we collect from you when you use our site, together with the personal data we process when you get in touch using the contact details on that part of our website.

These are our reasons for collecting it, what we do with it and what your rights are.

Who are we?

We are Risk Box Ltd. Our registered address is Regency Court, 62-66 Deansgate, Manchester, UK, M3 2EN (company registration number 08110046).

Our office address is The Sharp Project, Thorp Road, Manchester, M40 5BJ.  You can call us on 0161 533 0411, and email us at info@riskbox.com.

We are the data controller for this processing and are registered with the Information Commissioner’s Office (ICO).  Our registration number is ZA166438.

Purpose of processing

We process your personal data:

• To respond to enquiries about our services, 
• To take the necessary steps to enter into a contract with you, or your organisation
• To market our services to you, or your organisation

Basis of processing

Where we are responding to enquiries about our services, we process your personal data because it is in our legitimate interest to do so in order to deal with your enquiry. 

Where we are negotiating with you to provide our services to your organisation then we process your personal data because it is in our legitimate interest to do so in order to take the necessary steps to provide our services.  Where we are negotiating with you to provide our services to you personally then we do so because we are taking the steps to form a contract with you.

Where we have a contract to deliver services to your organisation we process your personal data because it is in our legitimate interest to do so in order to provide our services under that contract.  Where we have a contract with you personally we do so because we have a contract with you.

Where we are directly marketing our services to your organisation we process your personal data because it is in our legitimate interest to do so and you have not opted out of receiving direct marketing or because we have your consent to do so (if you have opted in to receive our direct marketing). 

Where we are relying on your consent to process your personal data you are free to withdraw that consent at any time.  Where we are relying on our legitimate interests to process your personal data you may object to that processing at any time.  Where we are relying on your consent to process your personal data you are free to withdraw that consent at any time.  

What personal data do we collect?

We will collect and process the following data from our website’s contact form, or when you get in touch with us.

• Your name
• Your email address
• Your telephone number
• Your company name

Special category data

There are additional rules we must follow if we collect certain types of more sensitive data, known as Special Category Data.  These include details of your ethnicity, beliefs, health and sexuality.  We do not collect any special category data about you from our website.  

Do we ever share personal data?

We will share your data if required to do so by a legitimate law enforcement agency.  

When you submit your personal data online your data is held by our partner who hosts our website.

When you book a virtual meeting with us using our website we will share your data with our video communications provider.

If you consent to the use of analytics and tracking cookies from our website we will share data with those cookie providers (see below).

If we are communicating with you via email or social media channels we will be sharing your personal data with those email and social media providers.

We will never share or sell your data to any other third parties without your permission.

How do we keep your data secure?

We take sensible steps to keep your data secure:

• All data sent between your browser and our website is encrypted in transit 
• All data we hold in our computers are encrypted at rest 

Your Rights

You have a number of rights relating to the processing of your data, if you would like to use them or have any questions then please contact us.

We won’t charge you for doing any of the following, however, we may make a charge in the case of frequent repeat requests:

• Awareness:  You have the right to be fully informed about why and how we process your information.  This privacy notice is intended to meet that requirement, but please do contact us if you have any questions
• Access:  You have the right to a copy of the data we hold about you
• Rectification:  If you think some of the data we hold is wrong then you have the right to ask us to correct it
• Erasure:  You have the right to ask us to delete the data we hold about you.  Where we are holding the data to fulfil a contract with you then we will need to retain the data in accordance with the data retention requirements shown below
• Restriction:  You have the right to ask us to restrict the processing of personal data whilst we check its accuracy, if you think the processing is unlawful, if you believe we no longer need to process the data but you need us to store it due to pending legal claims, or when you object to our processing based upon our legitimate interests and we are assessing the validity of that.
• Object:  Where we are processing your personal data based upon our legitimate interests you have the right to object to that.  If your objection is valid (for instance in the case of any direct marketing activity) then we will stop processing your personal data for that purpose.
• Data portability:  You can request a copy of your data in a digital format which you can then supply to another provider
• Automated decisions and profiling:  You have the right, in certain circumstances, not to be subject to decisions based on automated processing (including profiling) if it has a significant or legal impact on you.  This doesn’t apply if the processing is necessary to fulfil a contract with you, or if you have given us your consent to do so.

How long do we keep your data for?

Where we are relying on your consent or our legitimate interests to process your data then we will keep your personal data until you withdraw your consent for us to use it, or object to our legitimate interests.

Where are processing your data for the purposes of performing a contract with you, or taking the necessary steps to do so, then we will keep the personal data for 7 years after the end of the contract 

Cookies – How do we use cookies on our website

We utilise cookies on our website.  Some are required for our site to work, these are known as essential cookies, and we also use others for analytics purposes.

We will ask for your consent to use any cookies which aren’t essential, and we won’t deploy any non-essential cookies without your consent.

These are cookies we use are (name of cookie/set by/type):

_gid – Domain – Analytics

_ga -Domain – Analytics

What happens when I follow links to other sites?

If you follow a link from our site to another site then you should read the privacy notice on the other site prior to providing your data to them.

Where do we process data?

We process data at the address shown above.  Our web hosting provider processes data in the UK.

Our email and video communications providers are based in the USA, and your rights are protected by Standard Contractual Clauses within the agreement we have with them.

Making a complaint

Please contact us at the above address.  You can also contact the Information Commissioner’s Office (ICO) on their helpline 0303 123 1113 or online at www.ico.org.uk.  If you should contact the ICO they will normally ask you to contact us first.