Privacy Policy

1. Who We Are

Toolbox Online (toolbox-online.uk) is operated by an individual developer. If you have any questions about this policy, contact us at [email protected].

2. Lawful Basis for Processing

We process personal data under the following lawful bases as defined by UK GDPR and EU GDPR:

• Consent — for analytics and advertising cookies (Article 6(1)(a)).
• Legitimate interest — for essential cookies required for website operation and security (Article 6(1)(f)).

3. What Data We Collect

We collect the minimum data necessary to operate and improve our service:

• Anonymous usage data (page URLs visited, referral source, browser type) — collected only if you consent to analytics cookies.
• Advertising interaction data (ad impressions, clicks) — collected only if you consent to advertising cookies.
• Essential technical data (session ID, CSRF token) — automatically collected for website functionality.
• No personal data such as name, email address, or postal address is collected through cookies.

4. How We Use Your Data

• To operate and maintain the website securely.
• To understand how visitors use our tools and improve user experience.
• To display relevant advertisements that support our free service.
• We never sell your data to third parties.

5. Third-Party Processors

We use the following third-party services, which may process anonymised data:

• Google Analytics (Google LLC) — anonymous website analytics. Privacy Policy
• Google AdSense (Google LLC) — contextual and personalised advertising. Privacy Policy
• Cloudflare — CDN and security services (USA/EU). Privacy Policy
• Hetzner — hosting provider (Nuremberg, Germany). Privacy Policy
• Redis — in-memory cache/session store (self-hosted on the same Hetzner server — no data transfer outside the UK/EEA).

6. Data Retention

• Cookie consent records are retained for 6 months (renewed on each consent refresh).
• Anonymous page view data is retained for 26 months (Google Analytics standard retention).
• Consent audit logs are retained for 12 months.

7. Your Rights

Under UK GDPR and EU GDPR, you have the following rights:

• Right to be informed — this privacy policy informs you of our data processing.
• Right of access — request a copy of data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your data.
• Right to restrict processing — request limitation of data processing.
• Right to data portability — request transfer of your data.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — change your cookie preferences at any time via the Cookie Settings link.

To exercise any of these rights, contact us at [email protected].

8. International Transfers

Data may be transferred to and processed in countries outside the UK and EEA (including the United States) where our third-party processors operate. Such transfers are governed by Standard Contractual Clauses (SCCs) or adequacy decisions as required by UK GDPR and EU GDPR.

9. Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects concerning you.

10. Complaints

If you believe we have not complied with data protection law, you have the right to lodge a complaint with:

• UK: Information Commissioner's Office (ICO) — ico.org.uk
• EU: Your local data protection authority.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Material changes will be notified via the website.