Privacy Policy

Lightbox Group Ltd is committed to protecting and respecting your privacy.

In this privacy policy, the terms ‘we’, ‘our’ and ‘us’ are used to refer to Lightbox Group Ltd. Read on to find out more about why and how we use your personal data

Information we may collect on you
We may collect and process the following personal data:

The information you give us – You may give us information by filling in forms on our website, corresponding with us by phone, email or otherwise, subscribing to our services, using the services provided by our website, or reporting a problem with our website. We may also request information from you to verify your identity. The information you give us may include your name, address, email address, phone number and any comments or further information you provide.

Information we collect about you – When you visit our website, we may automatically collect the following information:

  • Technical information, including the internet protocol (IP) address used to connect your computer to the internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, and operating system and platform;
  • Information about your visit, including the services you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information, methods used to browse away from the page and any phone numbers used to call us.

We use this information to ensure that the content on our website is presented in the most effective manner.

We do not ask you to provide sensitive personal data – i.e. data about your racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or information including genetic data, biometric data (for the purpose of uniquely identifying you, data concerning health, and data concerning your sex life or sexual orientation. If you do provide such information, this will be treated as an indication that you explicitly consent to us processing it.

How we use your information

We use information held about you in the following ways:

to carry out our obligations arising from any agreements entered into between you and us, and to provide you with the information, products, and services that you request from us;

  • to manage our website and conduct internal operations, including troubleshooting, data analysis, testing, research, statistics collection, and surveys;
  • to improve our website to ensure that content is presented in the most effective manner;
  • to allow you to participate in the interactive features of our website;
  • as part of our efforts to keep our website safe and secure;
    to measure or understand the effectiveness of our advertising and deliver relevant advertising to you, where permitted


Using your data in accordance with The General Data Protection Regulations (The GDPR)

The General Data Protection Regulations require that we meet certain conditions before we can use your data in the manner described in this privacy policy. We take our responsibilities under The GDPR extremely seriously, including meeting these conditions. To use your personal data, we rely on two conditions, depending on the activities we carry out. These are:

1. Consent: We may provide you with marketing information about our services or products where you have provided your explicit consent for us to do so.

2. Legitimate interests: To use your personal data for any other purpose described in this privacy policy, we rely on the ‘legitimate interests’ condition. It is in our legitimate interests to collect your personal data, as it provides us with the information that we need to provide our services to you more effectively. The condition requires us to carry out a balancing test of our interests in using your personal data (for example, in order to provide you with the information, products and services that you request from us against the interests you have as a citizen, and the rights you have under the GDPR (for example, to not have your data sold to third-party marketing companies without your knowledge or permission, or to not have your personal data stored in insecure or unstable countries or regions). The outcome of this balancing test determines whether we can use your personal data in the ways described in this privacy policy (except in relation to marketing, where we will always rely on your explicit consent). We will always act reasonably and give full and proper consideration to your interests in carrying out this balancing test.
There is no obligation from you to provide us with any information. However, by providing information to us, you are enabling us to better provide any product information or services to you.
How long we keep your information for
When your data is no longer required for the purposes listed above, we delete it as soon as possible. All data will be deleted within seven years.

Disclosure of your information
We may share your personal information with or disclose your information to:

• business partners, suppliers, and sub-contractors for the performance of any contract we enter into with them or you;
• third-party suppliers and service providers for the purposes listed under the ‘How we use your information’ section above;
• selected third parties, so that they can contact you with details of the services that they provide, where you have expressly opted-in/consented to the disclosure of your personal data for these purposes;
• analytics and search engine providers that assist us in the improvement and optimisation of our website, and other selected third parties;
• law enforcement or fraud prevention agencies, as well as our legal advisers, etc.
We will only disclose your personal information to third parties:
• in the event that we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets;
• if we, or a substantial number of our assets, are acquired by a third party, in which case personal data held by us about our customers will be one of the transferred assets;
• in order to enforce or apply our website terms of use;
• to protect the rights, property, and safety of us, our customers and others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction;
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or regulatory requirements, or otherwise for the prevention or detection of fraud or crime.

Where we store your personal data

We will take reasonable steps to ensure that your data is treated securely and in accordance with this privacy policy.

Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.

Your right

You have a number of rights under the GDPR in relation to the way we process your personal data. These are set out below. You may contact us using the details on our website (or by contacting us directly – details below) to exercise any of these rights, and we will respond to any request received from you within one month from the date of the request.
Please address any questions, comments, and requests regarding our data processing practices to
Number Description of right

  • Right 1 The right to access personal data held by us about you.
  • Right 2 The right to rectify any inaccurate personal data held by us about you.
  • Right 3 The right to erase personal data held by us about you. This right will only apply where (for example): we no longer need to use the personal data to achieve the purpose we collected it for; or where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with Right 6, below).
  • Right 4 The right to restrict our processing of personal data held by us about you. This right will only apply where (for example): you dispute the accuracy of the personal data held by us; or where you have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but you require the data for the purposes of dealing with legal claims.
  • Right 5 The right to receive personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to require us to transfer this personal data to another organisation at your request.
  • Right 6 The right to object to our processing of personal data held by us about you (including for the purposes of sending marketing materials to you).
  • Right 7 The right to withdraw your consent where we are relying on it to use your personal data (for example, to provide you with marketing information about our services or products).

On occasion, we are required to report certain diversity statistics. In order to do this, we may undertake automated profiling. We do not store this information.

If you have any questions regarding our policy or any requests in relation to your rights, please contact our designated data protection officer:

Matthew Horn
Tel: 0208 299 8399

If you have any concerns regarding our processing of your personal data or are not satisfied with our handling of any request by you in relation to your rights, you also have the right to make a complaint to the Information Commissioner’s Office (ICO). Their address is:

Information Commissioner’s Office
Wycliffe House
Water Lane

Note: Any changes to this privacy policy in the future will be posted on this page. Please check back frequently to see any updates or changes to this privacy policy.
Last reviewed on 1st May 2018.