Privacy Policy

Last updated: 19 October 2026

Aimbox ("we") is an email and digital marketing service based in the United Kingdom. This page explains what personal data we collect and how we use it, in line with UK GDPR and the Data Protection Act 2018.

What we collect

If you fill in our project form or email us, we keep your name, email address, company, website, the services and budget you choose and anything you write to us. To stop spam, we also store a one-way coded version of your IP address (it cannot be turned back into the address). Form data is stored securely with our hosting provider, Cloudflare. This website does not use advertising cookies, analytics cookies or tracking pixels.

Why we use it

To reply to you, prepare an audit or quote you asked for and, if you become a client, deliver our services. Our lawful basis is legitimate interest (answering your request) or our contract with you.

Client data

When we work on your email or ads accounts, we act as a data processor on your behalf. We only use your customers' data to deliver the agreed work, and we sign a data processing agreement on request.

How long we keep it

Enquiries are kept for up to 12 months. Client records are kept for as long as UK tax law requires (normally 6 years).

Who we share it with

Only service providers we need to run the business, such as our email and website hosting providers (Cloudflare). We never sell your data.

Your rights

You can ask to see, correct or delete your data at any time by emailing [email protected]. You can also complain to the Information Commissioner's Office at ico.org.uk.