Privacy Policy

1. Who We Are

BOXmedia Studios Ltd is a video marketing and strategy agency registered in England and Wales. Our registered address is Unit B Limewood Court, Oaktree Business Park, Leeds, LS14 1NF.

We are the data controller for the personal information collected through this website and our services. If you have any questions about how we use your data, contact us at rashpal@boxmedia.tv.

2. What Data We Collect

We collect personal data in the following ways:

When you fill in a form

When you apply to work with us, download the Content That Converts Playbook, or complete the Pipeline Scorecard, we collect:

• Your name and email address
• Your company name and job title (where asked)
• Your annual turnover and marketing budget (where asked)
• Your answers to any survey or scorecard questions
• What triggered your enquiry (where asked)

When you visit our website

We automatically collect certain technical data including:

• Your IP address and approximate location
• Browser type and device information
• Pages visited, time on page, and how you arrived
• UTM parameters from advertising campaigns

When you contact us directly

If you email us, call us, or message us on WhatsApp, we collect your contact details and the content of your message.

3. Why We Use Your Data

We use your data for the following purposes and legal bases:

• To respond to your enquiry — Legitimate interest / Contract performance
• To send you the Playbook or Scorecard results you requested — Contract performance
• To follow up with relevant email sequences — Legitimate interest (you have shown interest in our services)
• To process a payment for the £47 Buzz Audit — Contract performance
• To improve our website and marketing — Legitimate interest
• To comply with legal obligations — Legal obligation

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

4. Who We Share Data With

We do not sell your personal data. We may share it with:

• GoHighLevel (GHL) — our CRM and email platform. Your name, email, company, and any scorecard data is stored here to manage our communications.
• Stripe — if you make a payment. Stripe processes card data; we do not store card details ourselves.
• Google Analytics — anonymised analytics data to understand website usage.
• Meta and LinkedIn — anonymised pixel data for advertising purposes, if you have consented via our cookie banner.
• Wistia — our video hosting provider, which may set cookies when you watch embedded videos.

All third-party processors are bound by data processing agreements and handle your data only as we instruct.

5. Cookies

We use cookies to make our website work, understand how it is used, and — with your consent — to show relevant advertising.

• Essential cookies — Required for the website to function. Cannot be switched off.
• Analytics cookies — Google Analytics, used to understand site usage. Anonymised.
• Marketing cookies — Meta Pixel and LinkedIn Insight Tag. Only set with your consent.
• Video cookies — Set by Wistia when you play a video.

You can manage your cookie preferences at any time via our Cookie Policy page.

6. How Long We Keep Your Data

• Enquiry and application data — 3 years from last contact, unless you ask us to delete it sooner
• Email subscribers — Until you unsubscribe or ask us to remove you
• Payment records — 7 years, as required by HMRC
• Website analytics — 26 months (Google Analytics default)

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct any inaccurate data
• Delete your data (the "right to be forgotten")
• Restrict how we process your data
• Object to processing based on legitimate interest
• Port your data to another service
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at rashpal@boxmedia.tv. We will respond within 30 days.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Transfers Outside the UK

Some of our third-party processors (including Google, Meta, and GoHighLevel) operate outside the UK or EEA. Where data is transferred internationally, we ensure appropriate safeguards are in place — including Standard Contractual Clauses approved by the ICO.

9. Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. Our website is served over HTTPS. Our CRM platform (GoHighLevel) is SOC 2 compliant.

No method of transmission over the internet is completely secure. If you have concerns about a specific piece of data you have shared, contact us directly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page will always reflect the most recent version. Continued use of our website after changes are posted constitutes acceptance of the updated policy.