01Who we are
This website is run by Profit Box Ltd (“Profit Box”, “we” or “us”). We are registered in England and Wales under company number 07743845, and our registered office is Suite 1, Bingham Enterprise Centre, Mercia Court, Bingham, Nottingham, NG13 8QX.
Profit Box is the controller of the personal information described in this notice. That means we decide how and why it is used, and we are responsible for looking after it.
If you have any questions about this notice or how we use your information, email us at clientsupport@profitbox.co.uk or call us on 0115 933 3480.
02What this notice covers
This notice explains how we use personal information about people who visit our website, contact us, book a call with us, attend our training, or work with us as a client, supplier or partner.
When we provide AI call intelligence to a business, we handle information about that business’s customers and staff on its behalf and only on its instructions. In that role the business is the controller, so its own privacy notice explains how your information is used. If you have spoken to one of our clients and want to know more, please contact them first.
03The information we collect
Depending on how you deal with us, we may collect:
- Contact details, such as your name, job title, employer, email address and phone number.
- What you tell us when you contact us or book a call, including the content of emails, messages sent through the enquiry form on our website, the services you tell us you are interested in, and call notes.
- How you found our website when you send us an enquiry through it, as explained in the next section.
- Booking details when you schedule a call through our online booking page, such as the time you choose and anything you add to the booking.
- Training records, such as course attendance, feedback and assessment results.
- Photographs and video taken at some training events. We will always tell you beforehand, and you can ask not to be included.
- Business and billing information if you or your organisation is a client or supplier, such as contract, invoice and payment details.
- Technical information when you visit our website, such as your IP address, browser type and the pages you request. This is recorded automatically by our hosting provider, Vercel, so it can deliver and secure the website.
- Visit statistics, such as the pages viewed, the website that sent you to us, and your country, device type, browser and operating system. These come from Vercel Web Analytics, which does not use cookies and only shows us totals.
We collect most of this information directly from you. Sometimes we receive it from your employer, for example when they book you onto a training course, or from public sources such as company websites and LinkedIn.
04Enquiries through our website
When you send an enquiry through the form on our website, we collect the details you enter: your name, email address, phone number if you give it, company, the services you are interested in and your message.
So we know which of our marketing works, the form also tells us how you found us. Where we can tell, that is the page you first arrived on, the website that sent you to us, any campaign tags in the link you followed (such as utm_source or utm_campaign), the page you sent the form from, and whether you arrived by clicking one of our adverts on Google, Facebook or LinkedIn. This comes from the web address of the link you followed and the website that sent you, and we collect it whether or not you accept cookies.
Your enquiry is delivered to our team by email through SendGrid, a service run by Twilio. SendGrid also sends you an automatic email to confirm we have received your enquiry.
05How we use your information and why
Data protection law says we must have a lawful basis for using personal information. We use your information to:
- Reply to your enquiries, confirm we have received them, and arrange calls and meetings. Our lawful basis is our legitimate interest in responding to people who contact us, or taking steps at your request before entering into a contract.
- Plan, deliver and evaluate our services, including training programmes, and manage our relationship with clients. Our lawful basis is performing our contract with you or your organisation, or our legitimate interest in delivering the services your organisation has asked for.
- Understand which of our marketing leads to enquiries, using how you found us and our visit statistics. Our lawful basis is our legitimate interest in knowing which marketing works so we spend our budget well.
- Send business contacts occasional information about our services that we think will be relevant to them. Our lawful basis is our legitimate interest in promoting our business, and you can opt out at any time.
- Run, secure and improve our website. Our lawful basis is our legitimate interest in keeping the website working and safe.
- Keep accounts and records, and meet our legal and regulatory obligations. Our lawful basis is compliance with a legal obligation.
Where we rely on legitimate interests, we have considered your interests and rights and are satisfied they are not overridden. Where we rely on your consent, you can withdraw it at any time.
We do not sell your personal information, and we do not use it to make automated decisions that have legal or similarly significant effects on you.
08International transfers
Some of our service providers are based outside the UK, including in the United States, or may access information from there. When your information is transferred outside the UK, we make sure it is protected, for example by relying on UK adequacy regulations, including the UK Extension to the EU-US Data Privacy Framework, or by using the International Data Transfer Agreement or Addendum approved under UK law.
09How long we keep it
- Enquiries that do not lead to us working together: up to two years after our last contact.
- Client, supplier and training records: for as long as we work together and up to six years afterwards, so we can deal with any questions or claims and meet our legal obligations.
- Financial records: six years after the end of the financial year they relate to, to meet tax and accounting rules.
- Website technical logs: for a limited period set by our hosting provider for security and troubleshooting.
When we no longer need your information, we delete or anonymise it securely.
10Your rights
You have the right to:
- Ask for a copy of the personal information we hold about you.
- Ask us to correct information that is wrong or incomplete.
- Ask us to delete your information.
- Ask us to restrict how we use your information.
- Object to how we use your information, including the absolute right to object to direct marketing.
- Ask us to transfer information you have given us to another organisation.
- Withdraw your consent at any time, where we rely on it.
To use any of these rights, email us at clientsupport@profitbox.co.uk. We will respond within one month and there is usually no charge. We may need to ask for information to confirm your identity.
11How we protect your information
We use appropriate technical and organisational measures to protect your information, including access controls, encryption where appropriate and confidentiality obligations for our team. Only people who need your information to do their jobs can access it.
12Complaints
If you are unhappy with how we have used your information, please contact us first at clientsupport@profitbox.co.uk so we can try to put things right.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk or on 0303 123 1113.
13Changes to this notice
We may update this notice from time to time. The latest version will always be on this page, with the date it was last updated at the top.