Last updated: 15 October 2026
Who is responsible for your information?
Invox Media is the trading name of Rafal Czauderna, a UK-based sole trader and the controller of the personal information described in this notice. This notice covers www.invoxmedia.com, enquiries and conversations about our services, including personalised email presentations.
For privacy questions or to exercise your rights, email rafal@invoxmedia.com.
Information we use
- Details you provide through a form or correspondence: your name, email address, business or store website, message and, where you choose to provide it, phone number.
- Your response to a presentation, such as a request to discuss a rewrite or welcome sequence, and the brand or presentation associated with that request.
- Technical information used to deliver and protect the website, such as IP address, browser and device information, request times and security checks.
- Relevant business contact information available on business websites or supplied during a conversation, when researching a business or making an individual approach.
Please do not send customer mailing lists, passwords or sensitive personal information through the enquiry forms. Required fields are needed to respond to your request; optional fields are your choice.
Why we use it and our lawful bases
We use enquiry and correspondence details to reply, arrange a conversation, understand your requirements and prepare or provide agreed work. Where you are personally entering a contract, or asking us to take steps towards one, we rely on contract. For business representatives, we rely on our legitimate interest in communicating with the business and providing our services.
We use technical information and anti-spam checks for our legitimate interest in protecting the website and preventing misuse. We also process information where necessary to meet legal obligations, including applicable accounting requirements and responding to data protection requests.
Where permitted, we may use relevant business contact details for an individual approach about our services, relying on our legitimate interest in developing business relationships. Where consent is required for marketing, we must obtain it first. You can object to direct marketing at any time by replying or emailing us. An enquiry or presentation response does not sign you up to a newsletter.
Services that handle information
Our website hosting and technical service providers process information needed to operate and secure the site. Forms are handled through WordPress and Contact Form 7; email is handled through our mail service, Zoho Mail. Cloudflare Turnstile is used for anti-bot verification and receives technical information about your browser and connection. The website also uses Akismet anti-spam software, which may process submission and technical information when its spam checks apply.
Provider information is available from Zoho, Cloudflare and Automattic (Akismet). Information may also be disclosed to professional advisers or authorities where necessary for legal obligations or to establish or defend a legal claim.
These services operate internationally, so processing may take place outside the UK. Their notices explain their processing locations and transfer arrangements. Contact us for information about the providers and safeguards applicable to your information. International transfers must meet applicable UK data protection requirements; this notice is not consent to unrestricted transfers.
Cookies and technical checks
WordPress uses cookies for administrator sign-in and related settings. Security services may use browser signals and storage to verify requests and prevent abuse. You can manage cookies through your browser, although blocking necessary functionality may prevent forms or sign-in from working. This notice does not give consent for optional advertising or analytics cookies.
How long information is kept
Enquiries and correspondence are kept while needed to respond, follow up on the request or maintain an ongoing business relationship. When deciding whether to retain them, we consider whether the conversation is still active, whether work is ongoing and whether a record is needed for a legal obligation or dispute. Project and financial records may need to be retained for applicable statutory periods. Security records are retained according to the relevant service’s security and operational needs.
If you ask not to receive marketing, we may retain the minimum contact details needed to respect that request. Contact us to ask about the retention of a particular record or to request deletion.
Presentation activity
We record daily counts and the latest request time for visits to our personalised presentation pages and requests to download their emails. This helps us understand whether our work is being accessed and evaluate our business outreach. We rely on our legitimate interest in understanding engagement with our business proposals. These records identify the presentation or brand, not an individual visitor, and do not prove that a named person viewed or saved anything.
This server-side activity feature does not use tracking cookies, pixels, device fingerprinting or visitor identifiers. It does not store IP addresses, browser strings or referring URLs in its activity records. Request information is checked transiently to exclude obvious bots and prefetches; logged-in visits are excluded. Aggregated activity is kept for 90 calendar days and is available only to website administrators. Normal hosting and security logs are separate, as described above. To raise a concern or object to processing related to you, email rafal@invoxmedia.com.
Your rights
Depending on the circumstances, you can ask to access, correct or erase your information, restrict its use, or receive it in a portable format. You can object to processing based on legitimate interests, and you have an absolute right to object to direct marketing. Where processing relies on consent, you can withdraw it without affecting the lawfulness of earlier processing.
Email rafal@invoxmedia.com to make a request. We may need to verify your identity. We normally respond within one month; where a lawful extension applies, we will explain it. You can also complain to the Information Commissioner’s Office (ICO).
Changes to this notice
We will update this page when our handling of personal information changes. The date above shows when it was last updated.