Privacy Policy

Last updated: 19 June 2026

Plain version first: If you fill in the form, I get what you typed and the details you choose to share, so I can work out whether I can help and reply to you. I don't sell it, I don't spray it around ad networks, and I keep it only as long as I need it. The detail below is the formal version.

Who is responsible for your data

This site is operated by Black Box Insights Ltd, trading as "Fixx Win" ("I", "we"), a company registered in England & Wales (company number 15958639), registered at 64 Beechcroft Avenue, Harrow, England, HA2 7JG.

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), Fixx Win is the data controller for the information described here.

You can reach me about anything in this policy at john@fixx.win.

What I collect

What you tell me directly. When you use the enquiry form, you share a free-text answer ("what keeps you awake at night") and, if you continue, further details about your business — which may include turnover, headcount, software, and similar operational figures, plus your name and contact details.
Technical basics. Standard server and security information such as IP address and browser type, handled by my hosting provider to deliver and protect the site.

I only ask for business information that helps me assess whether and how I can help you. You decide how much to share.

Why I use it, and my lawful basis

To respond to your enquiry and assess a possible engagement — lawful basis: taking steps at your request before entering a contract, and my legitimate interest in running the business.
To keep records of our dealings — lawful basis: legitimate interest and, where applicable, legal obligation.
To secure and operate the website — lawful basis: legitimate interest in keeping the service safe.

Who processes it on my behalf

I use a small number of trusted providers to run the practice. Each only processes your data to provide their service to me:

Fillout — the onboarding form that captures your enquiry detail.
Close — the CRM where enquiries are managed.
Cloudflare — hosting and security for this website.
Zapier — automation that moves enquiry data between the tools above. [Remove this line if Zapier does not process enquiry data.]

Some of these providers may process data outside the UK. Where that happens, it is covered by appropriate safeguards such as the UK International Data Transfer Agreement or equivalent.

How long I keep it

If we don't work together, I keep enquiry data for no longer than 12 months and then delete it. If we do work together, I keep records for as long as needed for the engagement and for any period required by law (for example, tax records). You can ask me to delete your data sooner — see your rights below.

Your rights

Under UK data protection law you can ask me to:

tell you what data I hold about you and give you a copy;
correct anything that's wrong;
delete it, where there's no overriding reason to keep it;
restrict or object to how I use it;
receive it in a portable format.

To exercise any of these, email john@fixx.win. I'll respond within one month.

If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk — though I'd appreciate the chance to put it right first.

Cookies

This site sets only what's essential to function and to remember your cookie choice. Nothing tracks you by default. Full detail is in the Cookie Policy.

Changes

If this policy changes, the new version will appear here with an updated date.