1. Who We Are
2. What Data We Collect
3. How We Use Your Data
4. Legal Basis for Processing
5. Data Retention
6. Who We Share Data With
7. Cookies
8. Security
9. Your Rights
10. International Transfers
11. Changes to This Policy
12. Contact & Complaints

SilverBoxIT Limited (Company No. 9587400, VAT No. 215430152) is a technology company incorporated in England and Wales. We are the data controller for personal data collected through this website, meaning we determine how and why your data is processed.
We have offices in London (United Kingdom), Wrocław, and Białystok (Poland). Our primary contact for data protection matters is: hello@silverboxit.co.uk.
This Privacy Policy applies to data collected through www.silverboxit.co.uk only. It does not apply to data processed under separate client agreements.

We collect only the minimum personal data necessary. Through this website, we collect:
- Name - provided by you when completing the contact form
- Email address - provided by you when completing the contact form
- Message content - the enquiry you submit via the contact form
- Technical data - IP address, browser type, and pages visited, collected automatically via cookies and server logs
We do not collect payment information, create user accounts, process sensitive personal data, or target individuals for advertising.

We use the data you submit for the following purposes:
- To respond to your enquiry and follow up on potential business engagements
- To maintain a record of communications for business administration purposes
- To improve the performance and usability of this website (technical data only)
We will not use your data for direct marketing without your explicit consent, and we will not share your data with third parties for their own marketing purposes.

Under UK GDPR, we rely on the following legal bases:
- Legitimate interests (Article 6(1)(f)) - to respond to business enquiries submitted through our contact form
- Consent (Article 6(1)(a)) - for any analytical cookies set on your device, where your consent is obtained via our cookie banner
- Legal obligation (Article 6(1)(c)) - where we are required to retain certain records under applicable law

- Contact form submissions - retained for up to 3 years from your last contact with us, or until you request deletion
- Technical/analytical data - raw logs deleted within 26 months; retained in aggregated anonymised form thereafter
You may request deletion of your data at any time by contacting hello@silverboxit.co.uk.

We do not sell your personal data. We may share data with the following categories of third parties, strictly as necessary:
- IT service providers - hosting, email, and CRM providers who process data on our behalf under data processing agreements
- Analytics providers - such as Google Analytics, used to understand website usage (subject to your cookie consent)
- Legal or regulatory authorities - where required by law, court order, or to protect the rights of SilverBoxIT
All third-party processors are required to handle your data in accordance with UK GDPR and to implement appropriate security measures.

- Strictly necessary cookies - essential for the website to function. These cannot be disabled.
- Analytical cookies - used to understand how visitors use the site (e.g. Google Analytics). Only set with your consent.
You can manage or withdraw cookie consent at any time through your browser settings or our cookie banner. For more detail, refer to our Cookie Policy.

SilverBoxIT holds the following independently audited certifications:
- ISO 27001 - Information Security Management System. Confirms we maintain rigorous controls over the confidentiality, integrity, and availability of information assets.
- ISO 9001 - Quality Management System. Confirms our processes meet consistent quality standards and are subject to continuous improvement.
We additionally implement: HTTPS encryption for all data transmitted through this website; access controls limiting who can access enquiry data; and regular security reviews as part of our ISO 27001 programme.

Under UK GDPR, you have the following rights in relation to your personal data:
- Right of access - Request a copy of the personal data we hold about you.
- Right to rectification - Request correction of inaccurate or incomplete data.
- Right to erasure - Request deletion of your data where there is no compelling reason for us to continue processing.
- Right to restriction - Request that we limit how we use your data in certain circumstances.
- Right to portability - Request your data in a structured, machine-readable format.
- Right to object - Object to processing based on legitimate interests.
- Right to withdraw consent - Where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, contact us at hello@silverboxit.co.uk. We will respond within one calendar month.

SilverBoxIT has teams in the United Kingdom and Poland. Poland is an EU member state, which the UK recognises as providing adequate data protection under its post-Brexit adequacy regulations. Any transfer of personal data to our Poland-based team is covered by an adequacy decision and requires no additional safeguards.
Where we use third-party processors outside the UK or EEA, we ensure appropriate safeguards - such as UK International Data Transfer Agreements (IDTAs) - are in place prior to any transfer.

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated effective date. Where changes are material, we will post a prominent notice on the website.

For any questions or to exercise your rights:
- hello@silverboxit.co.uk
- www.silverboxit.co.uk
- SilverBoxIT Limited · Company No. 9587400 · London, United Kingdom
If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- ico.org.uk
- Helpline: 0303 123 1113
- Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF