Legal

Privacy Policy

How MiniBox Digital Ltd collects, uses, and protects your personal data, in line with UK GDPR and PECR.

[ Last updated: 6 June 2026 ]

1. Who we are

MiniBox Digital Ltd (“we”, “us”, “our”) is the data controller responsible for the personal data described in this policy. We are an automation agency based in the United Kingdom that builds n8n workflows, CRM integrations, and bespoke internal tooling for service businesses.

If you have any questions about this policy or how we handle your personal data, you can contact us at hello@miniboxdigital.com.

2. The personal data we collect

When you submit our contact form or otherwise get in touch with us, we collect the information you choose to provide, which typically includes:

  • your name;
  • your email address;
  • your company or organisation name; and
  • the contents of your message or enquiry.

We may also collect limited technical information automatically when you visit our website, such as your IP address, browser type, and the pages you view. We do not ask for, and ask that you do not send us, any special category data (such as data about your health, race, or political opinions).

3. How and why we use your data

We use the personal data we collect to:

  • respond to your enquiry and correspond with you;
  • assess whether our services are a good fit and prepare proposals or quotes;
  • provide, manage, and improve our services to you; and
  • keep records of our communications and meet our legal and accounting obligations.

4. Our lawful basis for processing

Under UK GDPR, we rely on the following lawful bases for processing your personal data:

  • Legitimate interests — to respond to enquiries you send us and to operate and grow our business, where doing so does not override your rights and freedoms.
  • Consent — for any optional communications (such as updates or marketing) and for non-essential cookies. You can withdraw your consent at any time.
  • Contract — where processing is necessary to take steps at your request before entering into a contract, or to perform a contract with you.
  • Legal obligation — where we are required to retain certain records for tax, accounting, or other legal reasons.

5. Sharing your data with third parties

We do not sell your personal data. We share it only with trusted service providers who process data on our behalf and under contract, which may include:

  • our email and transactional message provider, used to deliver and receive contact-form enquiries;
  • our customer relationship management (CRM) and project tools, used to manage our correspondence with you; and
  • our website hosting and, where used, privacy-conscious analytics providers.

Some of these providers may process data outside the UK. Where they do, we ensure appropriate safeguards (such as adequacy decisions or standard contractual clauses) are in place to protect your data.

6. How long we keep your data

We retain your personal data only for as long as necessary for the purposes set out in this policy. Enquiry correspondence that does not lead to an engagement is typically deleted within 24 months. Where we enter into a contract with you, we keep relevant records for the duration of our relationship and for as long afterwards as required to meet our legal, tax, and accounting obligations.

7. Your rights

Under UK GDPR, you have the right to access, rectify, erase, restrict, or object to our processing of your personal data, the right to data portability, and the right to withdraw consent where we rely on it. To exercise any of these rights, contact us at hello@miniboxdigital.com.

If you are not satisfied with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. We would, however, appreciate the chance to address your concerns first.

8. Cookies

Our website uses a small number of cookies and similar technologies. Strictly necessary cookies are used to make the site work and do not require your consent. Any analytics or non-essential cookies are only set with your consent, in line with the Privacy and Electronic Communications Regulations (PECR). You can control or delete cookies through your browser settings at any time.

9. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the “last updated” date at the top of this page.