Privacy Policy

1. Who we are

This privacy policy explains how Digibox Media Ltd ("we", "us", "our") collects and uses personal information. We are the data controller for the information described in this policy.

• Company: Digibox Media Ltd
• Company number: 17183004
• Registered office: The Old Talbot, 77 Watling Street, Paulerspury, Northamptonshire NN12 7QD
• Studio: 34 Heathfield, Stacey Bushes, Milton Keynes · MK12 6HR
• Email: [email protected]

2. Information we collect

• Contact enquiries: your name, email address and the message you send through our contact form or by email.
• Booking information: when you book a studio session through our Google Calendar appointment schedules, Google shares your name, email address and chosen session time with us so we can fulfil the booking.
• Corporate account details: if you book on behalf of a business, your company name, invoicing address and purchase order reference.
• Correspondence: records of emails, calls and WhatsApp messages relating to your enquiry or booking.

We do not process or store payment card details on this website. Payments are made by bank transfer, on arrival at the studio, or by invoice.

3. How we use your information

We use personal information for the following purposes, under the following lawful bases:

• To respond to enquiries (consent, given when you contact us).
• To manage bookings, rescheduling and cancellations (contract: necessary to perform the booking you entered into).
• To invoice and manage accounts (legal obligation under UK tax and company law).
• To keep the studio, our staff and visitors safe (legitimate interests).
• To prevent fraud and manage security (legitimate interests).

Where we rely on legitimate interests, we balance those interests against your rights and freedoms, and you may object at any time.

4. Who we share information with

• Google LLC: booking scheduling is provided through Google Calendar appointment schedules. Google processes booking data on our behalf under its data processing terms. See Google's privacy policy for details.
• Email and form providers: contact form and email services that host or deliver our messages.
• Professional advisers: accountants, insurers and legal advisers where necessary.
• Law enforcement or regulators: where we are legally required to disclose information.

We never sell personal information, and we never share it for marketing purposes.

5. How long we keep information

• Enquiries: up to 12 months after our last contact.
• Booking records and invoices: 6 years, to meet UK tax and accounting obligations.
• Email and correspondence: as long as needed to deal with your enquiry or booking.

6. International transfers

Some of the services we use (including Google Calendar) are provided by companies based outside the UK. Where personal data is transferred outside the UK, we rely on appropriate safeguards, including the provider's standard contractual clauses and data processing agreements, to protect your information.

7. Your rights

Under UK GDPR you have the right to:

• Access a copy of the personal information we hold about you
• Correct inaccurate information
• Ask us to delete your information
• Restrict or object to how we use it
• Data portability
• Withdraw consent at any time where we rely on consent

To exercise any of these rights, email us at [email protected]. We will respond within one month. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

8. Security

We use appropriate technical and organisational measures to protect your information, including encrypted connections, access controls and secure file delivery. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Cookies

We set no tracking cookies. Embedded Google Maps content may set cookies set by Google to display the map. See our Cookie Policy for details.

10. Automated decision-making

We do not use automated decision-making, including profiling, that produces legal or similarly significant effects.

11. Children

Our services are not directed at children under 13, and we do not knowingly collect information from them.

12. ICO registration

Registration with the ICO pending. Our registration number will be shown here once issued.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, with the date of the most recent change shown at the top.

14. Contact

Questions about this policy: email [email protected], or write to Digibox Media Ltd, The Old Talbot, 77 Watling Street, Paulerspury, Northamptonshire NN12 7QD.