Privacy Policy

Last updated: November 2024

1. Data Controller Information

SquareBox is the data controller for the personal information processed through this website. You can contact us regarding data protection matters at:

2. Information We Collect

2.1 Information You Provide

When you use our contact forms or communicate with us, we may collect:

  • Name and job title
  • Email address and phone number
  • Company name and industry
  • Project requirements and inquiry details
  • Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

  • IP address and general location
  • Browser type and version
  • Operating system
  • Pages visited and time spent
  • Referring website (if applicable)

3. How We Use Your Information

We process your personal information for the following purposes:

  • Business Communications: To respond to inquiries, provide quotes, and discuss potential projects
  • Service Delivery: To deliver our software development services if you become a client
  • Website Functionality: To ensure our website operates properly and securely
  • Legal Compliance: To comply with legal obligations and resolve disputes
  • Marketing: To send relevant updates about our services (only with your consent)

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data based on:

  • Legitimate Interests: For business communications and website functionality
  • Consent: For marketing communications (you may withdraw consent at any time)
  • Contractual Necessity: For service delivery to existing clients
  • Legal Obligation: For compliance with applicable laws

5. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Trusted partners who assist with website hosting, email delivery, and analytics
  • Legal Requirements: When required by law or to protect our legal rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • SSL encryption for data transmission
  • Secure hosting with reputable providers
  • Access controls and authentication systems
  • Regular security assessments and updates
  • Employee training on data protection

7. Data Retention

We retain your personal information for the following periods:

  • Contact Inquiries: Up to 3 years from last contact
  • Client Records: 7 years after project completion (legal requirement)
  • Marketing Contacts: Until you withdraw consent or unsubscribe
  • Website Analytics: Up to 26 months

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When this occurs, we ensure adequate protection through:

  • EU adequacy decisions
  • Standard contractual clauses
  • Certified privacy frameworks

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete information
  • Erasure: Request deletion of your data (subject to legal obligations)
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a structured, commonly used format
  • Objection: Object to processing based on legitimate interests
  • Withdraw Consent: For marketing communications at any time

10. Cookies and Tracking Technologies

Our website uses essential cookies for functionality. We do not currently use tracking or analytics cookies. For more information, see our Cookie Policy.

11. Third-Party Services

Our website may contain links to third-party services:

  • Formspree: For contact form processing (see their privacy policy)
  • Font Services: Google Fonts (minimal data collection)
  • External Links: We are not responsible for the privacy practices of linked sites

12. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this privacy policy periodically. We will notify you of significant changes by updating the "Last Updated" date and, where appropriate, providing additional notice on our website.

14. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe your privacy rights have been violated.

15. Contact Us

For any questions, concerns, or requests regarding this privacy policy or your personal data:

  • Email: info@squarebox.com
  • Subject: "Privacy Request"
  • Response Time: We aim to respond within 30 days