Data ControllerGXI Ltd
Registered OfficeDevonshire House, 582 Honeypot Lane, Stanmore, Middlesex, HA7 1JS, United Kingdom
Introduction
At GXI Group, we are committed to protecting and respecting your privacy in accordance with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website www.gxigroup.com or engage with our services.
By using our website, you acknowledge that you have read and understood this Privacy Policy.
Information We Collect
We collect and process the following types of data:
a. Information You Provide Directly
- Name
- Business email address
- Phone number
- Company name
- Job title
- Project or enquiry details
b. Information Collected Automatically (UPDATED – IMPORTANT)
When you visit our website, we may collect:
- IP address
- Device and browser type
- Pages visited and time spent
- Interaction behaviour (clicks, scrolls, navigation patterns)
Technologies used include:
- Microsoft Clarity (user behaviour analytics)
- Meta Pixel (advertising tracking)
- LinkedIn Insight Tag (B2B campaign tracking)
c. Third-Party Data Sources (NEW – CRITICAL ADDITION)
We may obtain business-related information from trusted third-party providers, including:
- Lead Forensics (to identify business IP addresses visiting our website)
- Apollo.io (to source professional contact data)
- LinkedIn (for business profiling and outreach relevance)
This data is limited to professional/business information only.
How We Use Your Information
We use your data to:
- Respond to enquiries and provide quotations
- Deliver our office fit-out and refurbishment services
- Improve website performance and user experience
- Send relevant business communications
- Conduct targeted B2B outreach
- Analyse marketing effectiveness
Lawful Basis for Processing (GDPR Compliance)
We process your data under the following legal bases:
a. Consent
- For non-essential cookies (analytics, tracking, advertising)
- You can withdraw consent at any time via our cookie settings
b. Legitimate Interest (NEW – VERY IMPORTANT)
We process professional contact data under legitimate interest for B2B outreach purposes. This includes:
- Business name
- Work email address
- Job title
We have conducted a Legitimate Interest Assessment (LIA) to ensure this processing does not override your rights.
B2B Outreach Policy (NEW – HIGH PRIORITY SECTION)
If your business interacts with our website, we may initiate professional contact.
Outreach Conditions:
- Audience: Relevant professionals (e.g., CEOs, Facilities Managers, HR Directors)
- Frequency: Maximum of 7 emails within 60 days
- Purpose: Workspace and office fit-out solutions
Opt-Out:
- Every email includes an unsubscribe link
- Once opted out, your data is added to a suppression list, and no further contact will occur
Data Retention
We retain personal data only as long as necessary:
- Enquiry data: retained during active communication
- Lead/outreach data: maximum 60 days if no engagement (NEW)
- Legal/compliance data: retained as required by law
After this, the data is securely deleted or anonymised.
Cookies & Tracking Technologies
We use cookies to:
- Improve website functionality
- Analyse traffic
- Deliver personalised advertising
Cookie Consent (UPDATED – GDPR COMPLIANT)
You will be presented with a cookie banner allowing you to:
- Accept all cookies
- Reject non-essential cookies
- Customise preferences
Non-essential cookies will NOT be activated without your consent.
Data Sharing
We do not sell your personal data.
We may share your data with:
- CRM systems (e.g., HighLevel)
- Analytics providers
- Marketing platforms (Meta, LinkedIn)
- Service providers supporting our operations
All third parties are contractually obligated to protect your data.
Data Security
We implement appropriate technical and organisational measures, including:
- SSL encryption
- Secure data storage
- Access controls
Despite our efforts, no system is completely secure, and we encourage safe data practices.
Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion
- Restrict or object to processing
- Withdraw consent
- Lodge a complaint with the ICO
To exercise your rights, contact: [email protected]
International Data Transfers
Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted on this page with a revised effective date.
Contact Us
If you have any questions about this Privacy Policy, please contact:
📧 [email protected]