Privacy Policy

Your privacy is important to us. This privacy statement explains what personal data BlackBox Hosting collects from you, through our interactions with you and through our services, and how we use that data.

BlackBox Hosting do not provide, sell or disclose personal information we hold to any organisation outside of BlackBox Hosting, unless we have the express permission from you that your information will be used in this way. For example, client or supplier referrals

Any questions regarding this policy and our privacy processes should be sent via email to ISEC@www.blackboxhosting.co.uk or by writing to The Information Security officer, Blackbox Hosting, Level 33, 25 Canada Square, London E14 5LQ. Alternatively, you can telephone 0203 740 7840.

Personal data is defined by the General Data Protection Regulation (EU Regulation 2016/679) (the “GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified by reference to an identifier’. Personal data is, in simpler terms, any information about you that enables you to be identified.

Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers.

Under the GDPR, you have the following rights, which BlackBox Hosting will always work to uphold:

• The right to be informed about our use of your personal data.
• The right to access the personal data we hold about you
• The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.
• The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we have.
• The right to restrict (i.e. prevent) the processing of your personal data.
• The right to object to us using your personal data for a particular purpose or purposes.
• The right to data portability. This means that, if you have provided personal data to us directly, we are using it with your consent or for the performance of a contract, and that data is processed using automated means, you can ask us for a copy of that personal data to reuse with another service or business in many cases.
• Rights relating to automated decision-making and profiling. We do not use your personal
  data in this way.

For more information about our use of your personal data or exercising your rights as outlined above, please contact us using the details provided in the Overview section.

Further information about your rights can also be obtained from the Information Commissioner’s Office (ICO) or your local Citizens Advice Bureau

The personal data we collect about you will depend on the services you provide or are provided by BlackBox Hosting. It includes (but isn’t limited to)

• Your full name
• Your gender
• Your date of birth or age
• Your delivery and/or your billing address including postcodes
• Your telephone numbers
• Your email Address
• Your banking information
• Your Job Title
• Your Profession

Under the GDPR, we must always have a lawful basis for using personal data. This may be because the data is necessary for our performance of a contract with you, because you have consented to our use of your personal data, or because it is in our legitimate business interests to use it.

Your personal data may be used for one of the following purposes:

1. Fulfil our obligations from any contracts entered by you or us.
2. Providing and managing your account.
3. Notify you of changes to our services.
4. Notify you of changes to our accreditation’s.
5. Notify you of planned maintenance windows.
6. Sending you responses and updates to any enquiries.
7. Provide Technical Support and account management services.
8. Process HR tasks.
9. Process recruitment tasks.

In accordance with the Data Protection Act (1998) and the new GDPR regulations that come into effect in May 2018, in order to find out what information we may hold about you, you can at any time make a:

• Subject Access Request to ISEC@www.blackboxhosting.co.uk or by writing to:
• The Information Security Officer, Blackbox Hosting, Level 33, 25 Canada Square, London
  E14 5LQ. Alternatively, you can telephone 0203 740 7840

Completing a Subject Access Request will provide you with:

• A description of the Data we are holding.
• An explanation as to why we are processing the data
• To whom your personal data is disclosed to
• The source of your personal data
• A copy of the data we hold in an agreed format

The accuracy of the information we hold is important to us, currently we are developing compliance processes to assist in maintaining this.

However, if you have recently changed information details such as an email address or have reason to believe we may hold inaccurate or out of date information, please contact us on the details provided earlier in this section.

We will not keep your personal data for any longer than is necessary considering the reasons for which it was first collected.

We review our retention periods for personal information on a regular basis and will hold your personal information on our systems for as long as is necessary to serve you or in accordance with contractual obligations.

BlackBox Hosting take multiple steps to protect against loss, misuse or alteration of your personal data. These include:

• ISO27001 Security Policies that are independently audited yearly by a UKAS accredited
  body.
• Cyber Essentials Plus accreditation providing high level cyber security.
• Data encryption.
• Privacy by Design Technical Solutions.
• Secure transmission of Personal Information.
• Data Stored only in the UK and fully protected under GDPR.

Please be aware that the internet is an ‘open network’ and therefore is not completely secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk.

In addition, any access URLs and passwords that we may provide are your responsibility for keeping confidential.

BlackBox Hosting will not share any of your personal data with any third parties for any purposes, subject to one important exception.

In some limited circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government or legal authority.

From time to time we may change or update our Privacy Policy.
We reserve the right to make changes or updates at any time. All changes are effective immediately and will be notified via communication channels such as email or a community post on our website and social media feeds