Privacy Policy

BOX CORNUCOPIA LTD trading as 1stpage Agency is the data controller for personal data collected through this website, our order flows, client support, newsletter forms, and direct service communications.

BOX CORNUCOPIA LTD is registered in England and Wales under company number 15727373. The registered office is 128 City Road, London, United Kingdom, EC1V 2NX.

We process personal data where it is needed to operate the website, respond to enquiries, administer orders, provide services, manage subscriptions and payments, maintain business records, and prevent fraud or misuse.

Information you provide

• check_circleIdentity and contact data: name, business email address, company name, role, postal address, and the content of your communications with us.
• check_circleOrder and billing data: selected services and add-ons, order and invoice numbers, amounts, currency, payment status, payment-provider references, subscription identifiers, renewal dates, cancellation status, failed-payment records, and reminder history. We do not store full card numbers or card security codes.
• check_circleService data: target URLs, anchor text, competitor information, campaign instructions, briefs, reports, project correspondence, and support history.
• check_circleCommunications and review data: newsletter subscriptions, unsubscribe records, support requests, chat messages, renewal and order emails, communication preferences, and review-invitation interaction records.

Technical data

When you use the website, we may process your IP address, device and browser information, pages viewed, referring URLs, campaign parameters, consent status, checkout events, and error logs. Crisp provides website chat and may process connection and message data. Optional analytics services are used only where permitted by your consent settings and applicable law.

We process personal data only where a lawful basis is available under UK data protection law.

We use cookies, local storage, session storage, pixels, and similar technologies. Storage used for security, checkout, navigation, consent preferences, service operation, review-invitation frequency control, and site-wide live support may load when a page opens. Non-essential analytics tools require consent unless a lawful exemption applies.

We disclose personal data only where reasonably necessary for the purposes described in this policy. Payment information and transaction details may be processed by Stripe, PayPal, or NOWPayments, depending on the method selected. Transactional emails may be delivered through Resend, project and account communications may be managed through Nifty, and support messages may be processed through Crisp.

After a successful access-code-verified Instant Indexing run, we may invite you to share optional feedback on our Google Business Profile or Trustpilot profile. We record whether the invitation was shown, opened, or dismissed against a privacy-protected verified Instant Indexing run; the access code itself is not sent to analytics, Google, or Trustpilot. If you follow either link, any review you choose to submit is processed by that platform under its own privacy terms. Leaving a review does not affect discounts, access to tools, or any other service.

We may also use hosting, infrastructure, security, analytics, error-monitoring, newsletter, accounting, and professional-adviser services. A provider may act as our processor or, particularly in relation to payment and review services, as an independent controller under its own privacy notice.

Some recipients may process personal data outside the UK. Where a restricted transfer takes place, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful safeguard. Further information about a relevant safeguard may be requested using the contact details below.

Retention

We retain personal data only for as long as it is required for the relevant purpose. Enquiry and support records are normally retained for up to 24 months after the last substantive contact. Subscription records are retained while the subscription is active. Order, subscription, payment, accounting, tax, cancellation, and dispute records may then be retained for up to seven years, or longer where necessary for a legal claim, investigation, or statutory obligation. Newsletter records are retained until you unsubscribe, after which we may keep a limited suppression record to ensure that your preference is respected.

Your rights

Depending on the circumstances, you may ask us to provide access to your personal data, correct inaccurate data, erase data, restrict processing, provide portable data, or stop processing based on legitimate interests. You may withdraw consent where processing relies on consent. We may need to verify your identity before responding.

Complaints

Please raise privacy concerns with us first at hello@1stpage.agency. You may also complain to the UK Information Commissioner's Office through ico.org.uk/make-a-complaint.

Automated Decisions

We do not use solely automated decision-making that produces legal or similarly significant effects in relation to clients or website users.

Email hello@1stpage.agency with privacy, compliance, cookie, or data access requests. Include your order ID where applicable.

Postal correspondence can be addressed to BOX CORNUCOPIA LTD trading as 1stpage Agency, 128 City Road, London, United Kingdom, EC1V 2NX.