Inboxx Media
Free audit

Legal

Privacy Policy

Last updated: 13 August 2026

Inboxx Media ("Inboxx," "we," "us," or "our") is operated by Tomas Aukstakis, a sole trader based in Ireland. This policy explains what data we collect through inboxxmedia.com, why we collect it, and what rights you have over it under the EU General Data Protection Regulation (GDPR).

The short version

This site uses privacy-friendly analytics that do not use cookies and do not identify you personally. There are no advertising trackers, and no forms on this site that collect personal data. Everything else processed is the minimum needed to serve the page to your browser, plus anything you choose to send us directly by email.

Data we collect

Information you send us directly. If you email tomas.a@inboxxmedia.com or reach out to book a call, we receive whatever you include: typically your name, email address, company, and the contents of your message. We use this only to respond to you and, if you become a client, to deliver our services.

Hosting (Vercel). This site is hosted by Vercel Inc. Vercel automatically logs standard connection data for every request, such as IP address, browser type, and the page requested, and may capture basic technical error data so the site can be kept running and debugged. This is used only for hosting, security, and reliability, never for advertising. Vercel's handling of this data is covered by Vercel's own privacy policy at vercel.com/legal/privacy-policy.

Analytics (Vercel Web Analytics). We use Vercel Web Analytics to count page views and understand which pages are visited. It is designed to be privacy-friendly: it sets no cookies, uses no device fingerprinting, and does not track you across other websites. It does not collect or store your IP address. Instead, when a page loads, Vercel derives a temporary, non-reversible hash from the incoming request (including the IP address, user agent, and the domain being visited) purely to tell one visit apart from another. That hash is discarded and regenerated every 24 hours, so returning visitors cannot be recognised or followed over time, and no profile of you is ever built. The data we see is aggregate only: page view counts, referrers, and coarse information such as country, browser, and device type. We cannot identify you from it.

Google Fonts. This site loads typefaces from Google's font servers (fonts.googleapis.com and fonts.gstatic.com). Loading a font this way sends your IP address and browser information to Google as part of that request. Google's use of this data is governed by Google's own privacy policy. We do not control it, and we do not receive any of that data ourselves.

Cookies

This site sets no cookies at all, for analytics, advertising, or any other purpose. That is why you are not asked to accept a cookie banner.

What we don't do

  • We don't use Google Analytics, Meta Pixel, or any advertising or cross-site tracker.
  • We don't set cookies, and we don't fingerprint your device.
  • We don't track you across other websites, or build a profile of you.
  • We don't sell or rent your data to anyone.
  • We don't share your data with third parties except the service providers named above (Vercel, for hosting and analytics, and Google Fonts), and only as required to run the site.

Legal basis for processing

Where you contact us directly, we process your data based on our legitimate interest in responding to your enquiry, or to take steps toward a contract if you're becoming a client. Technical logging data is processed under our legitimate interest in keeping the site secure and operational. Aggregate analytics are processed under our legitimate interest in understanding how the site is used so we can improve it. Because no cookies are set and no personal data is stored, this does not require your consent under the ePrivacy Directive.

International transfers

Vercel Inc. is based in the United States, so serving this site and producing its analytics may involve processing outside the European Economic Area. Vercel offers Standard Contractual Clauses as its transfer mechanism, and its Data Processing Addendum covers this. Google, for fonts, operates similarly.

Data retention

We keep email correspondence for as long as needed to manage our relationship with you, or as required by law (for example, tax and accounting records). Hosting logs are retained only as long as our provider's default retention period, typically a matter of weeks. Analytics data is aggregate and contains nothing that identifies you; the temporary hash used to separate visits is discarded every 24 hours.

Your rights under GDPR

If you are in the EU or EEA, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Object to or restrict how we process your data.
  • Request a portable copy of your data.
  • Lodge a complaint with Ireland's Data Protection Commission (dataprotection.ie) if you believe your rights have been breached.

To exercise any of these rights, email tomas.a@inboxxmedia.com.

Children's privacy

This site is intended for businesses and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes to this policy

If we start using new tools that change what data we collect, for example, adding analytics or a booking form, we'll update this page and revise the date at the top.

Contact

Questions about this policy or your data can be sent to tomas.a@inboxxmedia.com.