Privacy Policy

Data Controller: We act as a data controller for personal data we collect directly.

Data Processor: When processing personal data on behalf of another party, we act as a data processor and follow their documented instructions.

If our role changes, we will notify relevant parties and update this policy accordingly.

We comply with all applicable data protection laws. This includes ensuring that:

• Personal data is processed lawfully, transparently, and for specified purposes.

• Appropriate technical and organisational measures are implemented to protect personal data.

• Data subject rights are upheld.

We process personal data to:

• Deliver services or products.

• Fulfil contractual obligations.

• Comply with legal requirements.

Where required, we obtain appropriate consents and provide clear notices regarding the use of personal data.

To protect personal data, we:

• Use industry-standard security measures to safeguard against unauthorised access, loss, or misuse.

• Ensure our staff and contractors are bound by confidentiality obligations.

• Regularly review and update our practices to align with evolving data protection standards.

We may share personal data with third parties, such as:

• Sub-processors or service providers, under strict agreements ensuring compliance with data protection laws.

• Regulatory authorities or other entities, where required by law.

We remain responsible for ensuring that third parties meet the required data protection standards.

Where personal data is transferred outside of the UK or EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent measures.

Personal data is retained only as long as necessary for the purposes for which it was collected, or as required by law. Upon request, and where legally permissible, we will delete or anonymise personal data.

You have the right to:

• Access your personal data.

• Request corrections or updates.

• Request deletion of your personal data, where applicable.

• Object to or restrict processing in certain circumstances.

To exercise your rights, please contact us at +44 20 3882 9200 or privacy@boex.biz.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant authorities promptly, as required by law.

We may update this policy to reflect changes in legal, regulatory, or operational requirements. Significant updates will be communicated with reasonable notice.

For questions or concerns about this Privacy Policy, please contact us at privacy@boex.biz.

By using our services, you acknowledge and agree to this Privacy Policy.