Privacy Policy

1. Who we are

Loxvik is a trading name of Webrockit LTD, a company registered in England and Wales (Company No. 15312784). Our registered address is 33 Friars Gardens, Hughenden Valley, High Wycombe, England, HP14 4LT. When we refer to "Loxvik", "we", "us", or "our" in this policy, we mean Webrockit LTD.

If you have any questions about this privacy policy or how we handle your data, contact us at oliver@loxvik.co.uk.

2. What data we collect

We collect information in the following ways:

Information you give us directly

• Contact forms and enquiries: your name, email address, phone number, company name, and the content of your message.
• Booking a consultation: when you book a free automation audit or consultation through Calendly, we receive your name, email address, and any information you include in the booking form.
• Email sign-up: if you subscribe to our mailing list via Mailchimp, we collect your name and email address.
• Client engagements: when you become a client, we collect the information necessary to deliver our services and manage our business relationship, including business contact details, billing information, and project-related data.

Information collected automatically

• Analytics data: we use Google Analytics 4 (GA4) to understand how visitors use our website. This includes pages visited, time on site, referral source, device type, browser, and approximate geographic location. GA4 uses cookies to collect this data — see our Cookie Policy for details.
• Technical data: your IP address, browser type and version, operating system, and device information may be collected automatically when you visit our website.

3. How we use your data

We use personal data for the following purposes:

• To respond to enquiries — when you contact us, we use your details to reply and follow up. Lawful basis: legitimate interest.
• To deliver our services — when you engage us for workflow automation, web and app builds, analytics, or AI adoption work. Lawful basis: contractual necessity.
• To send marketing communications — if you opt in to our mailing list, we send updates, insights, and occasional offers. Lawful basis: consent.
• To improve our website — analytics data helps us understand what content is useful and where the site can be improved. Lawful basis: legitimate interest.
• To manage bookings — Calendly processes your data to schedule consultations. Lawful basis: legitimate interest.

4. Who we share your data with

We do not sell your personal data. We share information only with the following third-party services that help us operate our business:

Service	Purpose	Data shared
Google Analytics 4	Website analytics	Anonymised usage data, cookies
Calendly	Appointment scheduling	Name, email, booking details
Mailchimp (Intuit)	Email marketing	Name, email address

Each of these providers has their own privacy policy. We encourage you to review them. Where these providers process data outside the UK, appropriate safeguards (such as Standard Contractual Clauses) are in place.

5. How long we keep your data

• Enquiry data: retained for up to 12 months after your last interaction, unless a client relationship is established.
• Client data: retained for the duration of the engagement plus 6 years, in line with HMRC requirements.
• Marketing data: retained until you unsubscribe or request deletion.
• Analytics data: retained in Google Analytics for 14 months (GA4 default), then automatically deleted.

6. Your rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data where there is no compelling reason to continue processing it.
• Restriction — ask us to limit how we use your data.
• Portability — request your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interest, including direct marketing.
• Withdraw consent — where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, email oliver@loxvik.co.uk. We will respond within one month.

7. Cookies

Our website uses cookies to provide analytics and improve your experience. For full details on the cookies we use and how to manage them, see our Cookie Policy.

8. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. This includes using HTTPS encryption across our website, secure access controls for internal systems, and carefully vetting third-party processors.

9. Children

Our services are aimed at businesses, not individuals under 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately at oliver@loxvik.co.uk.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date at the top of this page. For significant changes, we will make reasonable efforts to notify you.

11. Complaints

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We would appreciate the chance to address your concerns first — please contact us at oliver@loxvik.co.uk.