Terms and Conditions

1.1 We are committed to protecting the privacy of our website visitors and service users.

1.2 This policy applies when we act as a data controller in relation to the personal data of our website visitors and service users, meaning we determine the purposes and methods of processing this data.

1.3 Our website includes privacy controls that influence how we process your personal data. Through these controls, you can manage your preferences regarding direct marketing communications and limit the publication of your information.

1.4 In this policy, "we," "us," and "our" refer to Bloxt Ltd. Further details about our company are provided in Section 9.

2.1 This section outlines:

1. The general categories of personal data we may process;
2. The source and specific categories of personal data obtained indirectly;
3. The purposes for which we process personal data; and
4. The legal bases for processing.

2.2 We may process data related to your use of our website and services ("usage data"), including your IP address, location, browser details, operating system, referral source, duration of visit, page views, and navigation paths. This data is sourced from our analytics tracking systems and processed to analyze and improve our website and services. The legal basis for this processing is our legitimate interest in monitoring and enhancing our offerings.

2.3 We may process your business, enquiry, and affiliate account data ("account data") for website operation, service provision, affiliate program management, security, database backups, and communications. The legal basis for this processing is:

1. Contractual necessity; and/or
2. Our legitimate interest in ensuring proper website and business administration.

2.4 Information you post for publication on our website or through our services, including business listings and reviews ("listing and review data"), may be processed to facilitate such publication and website administration. The legal basis for this processing is:

1. Contractual necessity; and
2. Our legitimate interest in effective website and business management.

2.5 Enquiry data submitted regarding our services may be obtained directly or through our affiliate network. This data is processed for offering, marketing, and selling relevant services. If your enquiry includes health-related information linked to social security benefits, it will be processed only to the extent necessary under social security law. The legal basis for this processing is our legitimate interest in proper website and business administration.

2.6 We may process transaction-related information ("transaction data") for service provision, affiliate payments, and record-keeping. The legal basis for this processing is:

1. Contractual necessity; and/or
2. Our legitimate interest in business administration.

2.7 Notification data related to email notifications and newsletters may be processed based on your consent.

2.8 Communications data, including telephone interactions, may be processed for communication, call recording, and record-keeping. The legal basis is our legitimate interest in effective business communications.

2.9 We may process personal data when necessary to establish, exercise, or defend legal claims. The legal basis is our legitimate interest in protecting legal rights.

2.10 We may process personal data for obtaining/maintaining insurance coverage, managing risks, or seeking professional advice. The legal basis is our legitimate interest in protecting our business.

2.11 Additional processing of personal data may occur for legal compliance or to protect vital interests.

2.12 Please refrain from supplying another person's personal data unless prompted.

3.1 Following an enquiry, we may share your data with partner businesses to provide relevant goods/services. These third parties act as data controllers. A directory of such businesses is available on our website.

3.2 Financial transactions, including affiliate payments, are handled by Stripe Payments Europe Ltd. Transaction data is shared only as necessary for payment processing, refunds, and dispute resolution.

3.3 We may share personal data with suppliers and subcontractors, including hosting and communication service providers.

3.4 Some suppliers may set cookies on your device, accessing usage data. Details are in our cookies policy.

3.5 Personal data may be disclosed to insurers and professional advisers as needed for risk management and legal compliance.

3.6 Additional disclosures may occur for legal compliance, protecting vital interests, or establishing legal claims.

4.1 This section outlines our data retention policies to ensure legal compliance.

4.2 Personal data is retained only as necessary for its intended purpose.

4.3 Retention periods include:

1. Unsuccessful enquiry data: Retained for 1–2 years;
2. Successful enquiry data: Retained for 6–7 years post-relationship;
3. Health data: Deleted or anonymized within six months;
4. Listing and review data: Retained while published, up to 7 years post-publication;
5. Usage data: Retained for 26 months;
6. Other personal data (including account, transaction, notification, and communications data): Retained for 6–7 years post-relationship.

4.4 Personal data may be retained for legal compliance or vital interests protection.

5.1 This policy may be updated periodically on our website.

5.2 We recommend checking this page for updates.

5.3 Significant changes may be communicated via email.

6.1 You have the following rights under data protection law:

1. Right to access;
2. Right to rectification;
3. Right to erasure;
4. Right to restrict processing;
5. Right to object to processing;
6. Right to data portability;
7. Right to complain to a supervisory authority; and
8. Right to withdraw consent.

6.2 Further details are available in data protection regulations.

6.3 You can access, correct, or request deletion of your personal data via our contact form.

6.4 Requests for additional copies may incur a fee.

6.5 Objections to processing for legitimate interests or direct marketing purposes will be respected.

6.6 Withdrawal of consent does not affect prior lawful processing.

7.1 Personal data transmitted through our website is encrypted.

7.2 Our databases are secured with firewalls and access controls.

7.3 Sensitive personal data is regularly pseudonymized or anonymized.

7.4 Security measures undergo regular audits and vulnerability checks.

8.1 Please refer to our cookies policy for details on cookie usage.

9.1 This website is operated by Bloxt Ltd.

9.2 Our office address is: Anfield Business Centre, L6 5DR.