Privacy Policy InoBox • A Kcalb Ltd Service

This Privacy Policy explains how we collect, use, share, and protect your information when you use InoBox.org (the “Service”).

InoBox is a preference hub and interaction layer designed by Kcalb Ltd to support subscription confirmations, preference management, and structured forms used across platforms conceived by Kcalb Ltd. By using the Service, you understand that your information may be processed as described below.

InoBox is operated by Kcalb Ltd, a company registered in the United Kingdom. When this Privacy Policy refers to “we”, “us”, or “our”, it means Kcalb Ltd. When it refers to “you”, it means the person using the Service.

We collect only the information needed to operate InoBox and the flows it supports.

This may include:

• Your email address
• Subscription status (subscribed / unsubscribed)
• Preference selections (topics, categories, language, frequency)
• Confirmation history (when you confirmed or updated your preferences)

Some pages include structured forms (for example: support requests or operational requests). Depending on the form, we may collect:

• Information you type into the form
• The time and context of your request

Please avoid submitting sensitive information in free-text fields unless the form clearly asks for it and explains why it is needed.

To protect InoBox and reduce abuse, we may process technical information such as:

• IP address
• Browser and device information (for example: user-agent)
• Date/time stamps
• Basic activity events related to the Service (for example: confirmation, unsubscribe, or preference updates)

This helps us detect suspicious activity, prevent abuse, and keep the Service reliable.

Some ecosystem flows may require delivery details. If a page clearly asks for this purpose, we may collect:

• Recipient name
• Delivery address
• Phone number
• Delivery instructions

Some flows may require verification or compliance steps (commonly referred to as “KYC”). If requested, we may collect verification-related information such as identity data and supporting documents.

Verification data is sensitive. We aim to minimize what is collected, and we apply additional safeguards where appropriate.

We use your information for clear and limited reasons, such as:

• Confirming email ownership (double opt-in and confirmation flows)
• Managing subscriptions and preferences across the Kcalb ecosystem
• Processing requests submitted through forms
• Preventing abuse and protecting the Service (security, anti-spam, fraud prevention)
• Supporting delivery flows when a page explicitly requires delivery details
• Complying with legal obligations, when required

Depending on the situation, we use one or more legal bases:

• Consent, when you choose to subscribe to communications or select marketing topics
• Contract, when it is necessary to provide the Service you request (confirmations, preferences, support)
• Legitimate interests, to keep InoBox stable, secure, and protected against abuse
• Legal obligations, when required for compliance, disputes, or legal reporting

You can withdraw your consent at any time by changing your preferences or unsubscribing through the tools provided.

InoBox may send you emails that are necessary to complete actions you request (for example: confirmation links and preference updates).

You are responsible for ensuring that the email address you use is accurate and belongs to you. If you use an email address you do not control, you may not be able to manage preferences correctly.

We never ask for passwords, seed phrases, or private keys through InoBox emails.

InoBox may use cookies or similar technologies. Some cookies are essential for the Service to function properly (for example: security, session integrity, and basic flow operation).

In some cases, we may use optional cookies (for example: analytics) to understand usage and improve performance. Where legally required, optional cookies will be used only with your consent.

For more information, please refer to our Cookie page.

We do not sell your personal data.

We may share information only when necessary, including with:

• Email delivery providers (to send confirmation or preference emails)
• Hosting and infrastructure providers (to keep the Service running)
• Security services (to protect the Service)
• Verification providers (for KYC flows, when applicable)
• Logistics or fulfillment partners (only for delivery requests, when applicable)
• Professional advisers (legal or compliance support)
• Authorities (where required by law)

These partners may handle data only to provide services to us and under appropriate safeguards.

Your data may be processed outside your country of residence, depending on where service providers operate. Where required, we use recognized safeguards (such as contractual protections) and security measures to protect international transfers of personal data.

We keep your information only as long as needed for the purpose it was collected. Examples:

• Subscription and preference data may be retained while you remain active, and for a reasonable period afterward to maintain accuracy and demonstrate consent history when required.
• Confirmation history may be retained to protect users and demonstrate opt-in.
• Security logs may be retained for a limited period to detect abuse and support investigations.
• Delivery details may be retained only as needed to complete delivery and resolve related issues.
• Verification (KYC) data may be retained only where necessary for compliance and fraud prevention, and may be retained longer if required by law.

Depending on your location, you may have rights such as:

• Access to your personal data
• Correction of inaccurate data
• Deletion of your data (in some cases)
• Objection to processing (in some cases)
• Restriction of processing (in some cases)
• Data portability (where applicable)
• Withdrawal of consent (where consent is the basis)

To request any of these rights, please contact us using the details below.

If you have concerns about how we handle your data, we encourage you to contact us first. You also have the right to contact your local data protection authority. If you are in the UK, you can contact the Information Commissioner’s Office (ICO).

We do not make decisions that have legal or similarly significant effects on you based solely on automated processing. We may use automated tools for security and abuse prevention (for example: rate limiting or suspicious activity detection).

The Service is not intended for children. We do not knowingly collect personal data from minors. If you believe a child has provided personal information, please contact us and we will take appropriate action.

We may update this Privacy Policy when needed to reflect changes in the Service, legal requirements, or operations. The “Last updated” date will be changed when updates are published.

If you have questions about this Privacy Policy or want to make a privacy request, you can contact us here:

Kcalb Ltd (Company number 14132246)
741 High Road, Finchley
London, United Kingdom