Legal

Privacy Policy

Last updated: 29 July 2026

Bloxii Limited ("Bloxii", "we", "us") is committed to protecting your privacy. This policy explains what personal data we collect through this website and in the course of our business relationships, how we use it, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).

Who we are

Bloxii Limited is the data controller for personal data described in this policy.

  • Registered in England and Wales, company number 17254289.
  • Registered office: 45 Albemarle Street, Mayfair, London W1S 4JL, United Kingdom.
  • ICO registration security number: CSN5363367.
  • Data contact: privacy@bloxii.com (or hello@bloxii.com).

This policy covers our website, our contact and demo process, our client portal, and recruitment. It does not cover the personal data contained in our customers' documents and systems when they use the Bloxii platform — for that data, our customer is the controller and Bloxii acts as processor under a Data Processing Agreement.

What we collect

Enquiries and demos. If you submit our contact form or email us, we collect your name, work email address, company name, and any details you choose to include about your firm or your enquiry.

Meetings and calls. If you attend a demo, discovery session, or other call with us, we may — with notice at the start of the call — record and transcribe the meeting using a transcription service, so we can capture requirements accurately. Recordings and transcripts may include your name, voice, image, and the content of the discussion. If you prefer not to be recorded, tell us at the start and we will take written notes instead.

Client portal. If your firm is a Bloxii customer and you use our client portal, we collect your name, work email, authentication data, and usage logs needed to operate the portal securely.

Job applicants. If you apply for a role, we collect the information you provide (CV, contact details, work history) and use it only for recruitment.

We do not collect special category data, we do not knowingly collect data from anyone under 18, and we do not run advertising or third-party ad tracking on this site.

How we use it, and our lawful basis

PurposeLawful basis (UK GDPR Art 6)
Responding to enquiries; arranging and conducting demos and discovery callsLegitimate interests (responding to B2B enquiries); consent where you ask us to contact you
Recording and transcribing meetings (with notice)Legitimate interests (accurate capture of business requirements); we stop on request
Operating and securing the client portalPerformance of a contract; legitimate interests (security)
RecruitmentLegitimate interests; steps prior to entering an employment contract
Keeping business records; complying with lawLegal obligation; legitimate interests

We do not sell your personal data, and we do not use it for automated decision-making producing legal or similarly significant effects.

Who we share it with

We use a small number of trusted service providers ("processors") who handle data on our behalf under contract:

  • Website hosting: Vercel
  • Transactional email: Resend
  • Business email and productivity: Microsoft 365
  • Meeting transcription: Fireflies.ai
  • CRM: HubSpot
  • Platform infrastructure: Amazon Web Services (London, eu-west-2)

Where any provider processes data outside the UK, we ensure appropriate safeguards are in place (UK adequacy regulations, the UK IDTA, or the UK Addendum to the EU Standard Contractual Clauses). We do not share your data with anyone else except where required by law.

How long we keep it

  • Enquiry and demo data (including transcripts): up to 24 months after our last contact with you, unless a business relationship follows.
  • Client portal account data: for the duration of your firm's engagement and up to 12 months after it ends.
  • Recruitment data: up to 6 months after the process concludes, unless you consent to longer.
  • Records we must keep by law (e.g. invoicing): 6 years.

If you ask us to delete your data sooner, we will do so unless we are legally required to keep it.

Your rights

Under UK data protection law you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. To exercise any of these, email privacy@bloxii.com. We respond within one month. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

Details of the cookies and similar technologies we use, and your choices, are set out in our Cookie Policy. Currently this site uses only strictly necessary cookies; if we introduce analytics or marketing cookies, we will ask for your consent first via a banner.

Changes

We may update this policy from time to time; the "last updated" date above shows when. Material changes will be highlighted on this page.

Contact

Bloxii Limited, 45 Albemarle Street, Mayfair, London W1S 4JL.

privacy@bloxii.com · hello@bloxii.com · security@bloxii.com (security-specific questions).