Who we are
The data controller is Bluebox Digital Ltd, a company registered in England and Wales (company number 12278626). Contact us at hello@blueboxdigital.co.uk.
What we collect
We only collect information we need to run the studio and deliver work.
If you start a subscription. Checkout is handled by Stripe. We receive your name, email address, the plan you chose, and a customer reference. Stripe processes your card details. We do not store your full card number.
If you sign in. We email you a sign-in link and keep a session so you can open the client dashboard. The session stores your email and Stripe customer reference.
If you complete onboarding. We ask for your name, role, company, email, and a short description of the product: what it is, where it is today, what you want from the engagement, and any links you choose to share. We use this to set up the project, including a private Slack channel.
If you email us or book a call. We keep the correspondence we need to reply. Booking a call opens Koalendar, which collects the details you enter there under its own privacy policy.
When you browse the site. We store a cookie so we can show UK or international prices. Vercel Analytics records aggregate page visits. We do not run advertising cookies or sell personal information.
Why we use it
We use this information to take payment, provide the subscription, onboard your project, and reply to you. That is necessary for the contract, or for our legitimate interest in running the studio and keeping client work secure. We keep billing records for as long as UK company and tax law requires.
Project and account details stay for the life of the engagement and for a short period afterwards so we can hand over access, answer questions, and keep a record of what was delivered. You can ask us to delete them sooner where we are not required to keep them.
Who we share it with
We use a small set of providers to run the service:
Stripe for checkout and billing. Supabase for client and project records. Resend to send sign-in emails. Slack for the private project channel. Vercel to host the site and measure visits. Koalendar when you book a call.
Some of these providers process data outside the UK. Where they do, they do so under their own safeguards, such as standard contractual clauses. We do not pass your details to advertisers.
Cookies
bb_pricing_region remembers whether to show UK or international prices. It lasts 30 days. bluebox_session keeps you signed in to the dashboard. It lasts 30 days and is only set after you use a sign-in link.
These are strictly necessary to run the site and your account. Vercel Analytics does not use an advertising cookie.
Your rights
You can ask us for a copy of your personal information, to correct it, to delete it, to restrict how we use it, or to object to processing based on legitimate interests. Where we rely on consent, you can withdraw it. You can also ask for your information in a portable format.
Email hello@blueboxdigital.co.uk. We will respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.