Privacy & Cookies Policy

Last updated: 8 June 2026

1. Who we are

This site is operated by Boxtree Consulting Ltd ("we", "us", "our"), a company registered in England & Wales (company number 17263406), registered office 60 Frederick Street, Office 201f, Birmingham, B1 3HS, United Kingdom. We are the data controller for the personal data described in this policy. As a UK business that processes personal data, we register with the Information Commissioner's Office (ICO); our registration reference is ICO:00014356631.

For any privacy question, contact info@boxtreeconsulting.co.uk.

2. What data we collect

• Information you give us, when you email us or use a contact link, we receive your name, email address and the content of your message.
• Analytics data, if you accept analytics cookies, we use Google Analytics 4 to collect anonymised usage data (pages viewed, approximate location, device and browser type, and how you reached the site). IP addresses are anonymised.

We do not collect special-category data, and we do not ask you to enter payment or financial details on this website.

3. Cookies

We do not set any non-essential cookies until you choose "Accept" on our cookie banner. If you accept, Google Analytics sets cookies (for example _ga, _ga_*) to distinguish visitors and measure usage. If you decline, no analytics cookies are set. You can change your mind at any time by clearing this site's data in your browser, which will make the banner reappear.

4. Legal basis for processing

• Consent, for analytics cookies and analytics data (UK GDPR Art. 6(1)(a) and PECR). You may withdraw consent at any time.
• Legitimate interests / steps prior to a contract, to respond to your enquiries and provide the information you request (UK GDPR Art. 6(1)(f) and 6(1)(b)).

5. Who we share data with

We use trusted processors who act on our instructions: Google (Analytics) and Netlify (website hosting). We do not sell your personal data. Some processors may transfer data outside the UK under appropriate safeguards (such as the UK International Data Transfer Addendum).

6. How long we keep it

Email correspondence is retained only as long as needed to handle your enquiry and meet legal obligations. Google Analytics data is retained according to our configured retention period (default 14 months).

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing of your personal data, and the right to data portability. To exercise any right, email us at the address above.

8. Complaints

If you have a concern we cannot resolve, you can contact the Information Commissioner's Office (ICO) at ico.org.uk.

9. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the most recent change.