Privacy Policy

We may collect and process the following categories of personal data:

• Names, email addresses, telephone numbers, business names and roles.
• Account, login, subscription, preference and security information.
• Business information stored in a customer's Business Brain.
• Customer, prospect, lead and enquiry information entered into the platform.
• Communications, appointment, sales and campaign information.
• Website, SEO, social, analytics and marketing information.
• Support communications and service tickets.
• Payment and billing information, normally processed by our payment provider.
• Technical information such as IP address, device, browser, logs and security events.
• Information submitted through Digital Health Audits and website forms.

We use your personal data to:

• Provide and operate BizwardBox.
• Create and maintain Business Brains and customer accounts.
• Provide AI-agent, marketing, SEO, lead-generation, CRM, reception, reporting and support services.
• Process payments and subscriptions.
• Maintain security and prevent abuse.
• Provide support and service communications.
• Measure and improve service performance.
• Send marketing where legally permitted.
• Comply with legal obligations and establish, exercise or defend legal claims.

Depending on the processing, BizwardBox may rely on performance of a contract, legitimate interests, consent, compliance with legal obligations and other lawful bases available under UK data-protection law. Where consent is required, it will be requested and can be withdrawn.

BizwardBox uses AI and automation for analysis, content generation, recommendations, lead qualification, communications and workflow execution. Consequential actions may require approval or human review.

BizwardBox will not use Customer Data to train a general-purpose AI model unless clearly disclosed, lawfully permitted and contractually agreed. Third-party AI providers may process information under their applicable terms and data-processing arrangements.

BizwardBox aims to keep Customer Data and core production application data in the UK. Where a third-party service requires processing or access outside the UK, BizwardBox will assess the transfer and use an applicable UK GDPR transfer mechanism and safeguards where required.

Personal data may be shared with approved processors and suppliers including hosting, AI, communications, payments, analytics, security and professional advisers where necessary to operate the service, and with authorities where legally required.

Personal data is retained only as reasonably necessary for its purpose, contractual requirements, legal obligations, security, dispute resolution and legitimate business records. Customer Data is normally returned or deleted following termination subject to agreed and legal retention requirements.

BizwardBox uses appropriate technical and organisational measures including access controls, authentication, encryption where appropriate, backups, logging, monitoring and incident response.

Subject to legal conditions and exemptions, you may have rights including:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data in certain circumstances.
• Restriction — ask us to restrict processing in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdrawal of consent — where processing is based on consent.

Requests should be sent to privacy@bizwardbox.co.uk.

BizwardBox may use essential cookies and, where applicable, analytics or marketing cookies. Non-essential cookies will be managed in accordance with applicable UK privacy and electronic communications requirements. You will be asked for consent before any non-essential cookies are set.

Please contact BizwardBox first at privacy@bizwardbox.co.uk. You can also complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you believe your data-protection rights have not been respected.

This Privacy Policy may be updated periodically. The latest version and effective date will be published on the BizwardBox website. We will notify you of material changes where required by law.