Privacy Policy

Last updated: 19 July 2026

This Privacy Policy explains how Valkari Limited trading as Sendblox ("Sendblox", "we", "us" or "our") collects, uses, shares and protects personal data in connection with our website, the Sendblox Platform, related services that link to this Privacy Policy, and associated marketing and business activities.

It also explains when Sendblox acts as a controller of personal data and when Sendblox acts as a processor on behalf of its customers.

1. Who we are

Valkari Limited is a company incorporated in England and Wales under company number 09841692, with its registered office at:

4 Beaufort Parklands
Railton Road
Guildford, Surrey
England
GU2 9JX

If you have any privacy or data protection questions, you can contact us at:

Email: legal@sendblox.ai

2. Scope of this Privacy Policy

This Privacy Policy applies to:

• our public-facing website and legal pages;
• the Sendblox Platform and related services;
• communications with prospects, customers and business contacts;
• customer support, billing and account management activities;
• data processed in connection with our marketing, analytics, security and compliance operations.

This Privacy Policy does not override any separate agreement we have with a customer, including any Data Processing Addendum, where we process personal data on that customer's behalf.

3. When Sendblox is a controller and when Sendblox is a processor

Sendblox as controller

Sendblox acts as a ‘controller’ when we decide how and why personal data is processed for our own business purposes, including in relation to:

• visitors to our website;
• account holders, administrators and billing contacts;
• our own sales, marketing and business development activities;
• service analytics, diagnostics, security and fraud prevention;
• legal, regulatory and compliance obligations.

Sendblox as processor

Sendblox acts as a ‘processor’ when we process personal data on behalf of our customers in connection with the Sendblox Platform, including:

• customer-uploaded or customer-connected data;
• CRM and contact data used in outreach workflows;
• customer message content and campaign settings;
• delivery and engagement telemetry generated when customer emails are sent through our infrastructure.

Where we act as a processor, the relevant customer is responsible for the lawful basis for processing and for providing any required privacy notices to data subjects.

4. Personal data we collect

Depending on how you interact with us, we may collect the following categories of personal data.

Website and marketing data

• name, email address, company name, job title and other contact details you provide;
• information submitted through forms, demo requests, downloads or enquiries;
• website usage data such as IP address, browser type, device information, pages viewed, referring URLs and approximate location.

Account and platform data

• user account details such as name, email address, role, organisation and login identifiers;
• subscription, billing and transaction information;
• support requests, communications and service-related correspondence;
• usage, event, performance and error data relating to use of the Sendblox Platform.

Customer content and communications data

Where customers use the Sendblox Platform, we may process on their behalf:

• contact records and CRM fields;
• uploaded spreadsheets, lists, prompts, notes and connected data;
• outreach content, campaign settings and communication history;
• delivery, bounce, reply, open and unsubscribe data.

Compliance and risk data

• logs, audit records and technical data used to secure the platform;
• information relevant to fraud prevention, abuse detection, complaints, legal claims and regulatory obligations.

5. Sensitive and restricted data

Unless expressly agreed in writing, Sendblox is not intended for the routine processing of highly sensitive or restricted data through ordinary public website features or general platform use.

Customers and users should not submit:

• special category personal data;
• criminal convictions data;
• children's data;
• payment card data;
• government-issued identification numbers;
• passwords or highly sensitive access credentials;
• health or medical information,

unless Sendblox has expressly agreed to support that processing and appropriate safeguards are in place.

6. How we use personal data

We use personal data, depending on context, to:

• operate, maintain and secure our website and the Sendblox Platform;
• create and manage user accounts and subscriptions;
• provide customer support and respond to enquiries;
• process payments, billing and account administration;
• enable integrations, uploads and connected workflows;
• support AI-assisted outreach and content generation features;
• send, record and analyse communications and campaign outcomes;
• monitor usage, diagnose issues and improve performance;
• enforce our terms, investigate misuse and protect our rights;
• comply with legal, regulatory and contractual obligations.

7. Legal bases for processing

Where Sendblox acts as a controller, we rely on one or more of the following legal bases:

• Performance of a contract: where processing is necessary to provide the Sendblox Platform or related services to you.
• Legitimate interests: where processing is necessary to operate, secure, improve and market our services, provided those interests are not overridden by your rights.
• Consent: where required, including for certain website cookies or marketing communications.
• Compliance with legal obligations: where we must process data to comply with applicable law or lawful requests.

Where Sendblox acts as a processor, we process Customer Personal Data on the documented instructions of the relevant customer.

8. Cookies, analytics and similar technologies

Public website

We use cookies and similar technologies on our public website for:

• strictly necessary site functions;
• website analytics and performance measurement;
• security and fraud prevention.

Where required by law, non-essential cookies, including analytics cookies, are only set with your consent through our cookie settings mechanism.

Sendblox Platform

Within the authenticated Sendblox Platform, we use technologies such as session cookies and local storage that are necessary to:

• authenticate users;
• maintain secure sessions;
• protect against misuse and attacks;
• support core platform functionality.

We also use first-party telemetry and analytics within the Platform to understand usage, monitor performance, diagnose errors and improve the service. We do not use Platform telemetry for third-party advertising or cross-site behavioural profiling.

For more detail, please see our Cookie Policy.

9. AI-assisted features

The Sendblox Platform may use AI and machine learning features to support communication drafting, personalisation, workflow suggestions and related service functionality.

Where customers use these features:

• content may be generated or refined in whole or in part by AI;
• AI may be used to personalise outreach and improve engagement workflows;
• customers remain responsible for how they use generated content and for ensuring their use is lawful and appropriate.

Where applicable under data protection law, individuals may object to certain profiling-related processing or raise concerns using the contact details in this Privacy Policy.

10. Sharing personal data

We may share personal data with:

• our group companies and corporate affiliates;
• service providers who help us host, secure, support, monitor, analyse and improve the Services;
• providers involved in communications delivery, AI functionality, payments, infrastructure and support operations;
• professional advisers such as lawyers, auditors, accountants and insurers;
• regulators, law enforcement agencies and competent authorities where required by law;
• actual or prospective buyers, investors or transaction counterparties in connection with a merger, financing, acquisition or business reorganisation.

We use trusted third-party sub-processors to help us provide the Sendblox Platform. A current list of key sub-processors is available on our Sub‑processor page and may be updated from time to time.

We do not sell personal data in the ordinary sense of the term.

11. International transfers

Personal data may be transferred to and processed in countries outside the UK or EEA where Sendblox or its service providers operate.

Where we make such transfers, we use appropriate safeguards as required by applicable data protection law, which may include:

• adequacy regulations or adequacy decisions;
• the EU Standard Contractual Clauses;
• the UK International Data Transfer Agreement or UK Addendum;
• other lawful transfer mechanisms.

12. Data retention

We retain personal data for as long as necessary for the purposes described in this Privacy Policy, including to:

• provide the website and services;
• maintain accounts and records;
• comply with legal and regulatory obligations;
• resolve disputes;
• enforce agreements;
• protect against fraud and abuse.

Where we process Customer Personal Data as a processor, we retain and delete that data in accordance with our agreement with the customer, our retention practices and applicable law.

13. Your rights

Depending on where you are located and subject to applicable law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing;
• request portability of certain personal data;
• withdraw consent where processing is based on consent.

If you wish to exercise any of these rights, contact us at legal@sendblox.ai.

Where Sendblox processes personal data on behalf of a customer, we may direct you to that customer, as they are the controller responsible for the relevant processing.

14. Complaints

If you are not satisfied with how we handle your personal data, you may have the right to complain to the UK Information Commissioner's Office or another relevant supervisory authority in your jurisdiction.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, regulation, our services or our data practices. When we do, we will post the updated version here and revise the "Last updated" date above.