Privacy notice.

Controller: Netro Technology Ltd, company no. 10081362, registered office 22 Darin Court, Crownhill, Milton Keynes, England, MK8 0AD. PBXCloud is our trade name.

Information we collect

When you make an enquiry we may receive your name, business name, email address, telephone number, service interest, message and technical request information sent by your browser. Please avoid including information that is not needed for the enquiry.

Why we use it and our lawful basis

We use enquiry information to respond, understand requirements, prepare or discuss quotations, and take requested steps before a possible business relationship. Our lawful bases are legitimate interests in handling business enquiries and, where applicable, steps requested before entering a contract. We may also use information where necessary to comply with legal obligations.

Who receives information

Information may be handled by service providers supporting website hosting, email and business communications. They process information on our behalf or under their own legal responsibilities as applicable. We do not use the website form to store enquiry data in local files on the web server.

Retention

We keep enquiry information only for as long as necessary for the enquiry, related business discussions, record-keeping and applicable legal needs. The appropriate period depends on the context and whether a business relationship develops.

Cookies and form security

The contact form uses an essential, session-only cookie to hold a random one-time security token, its issue time and a recent-submission timestamp. These values support CSRF protection, form-expiry checks and a short submission cooldown; they do not contain your form answers or other submitted personal information. The cookie uses Secure, HttpOnly and SameSite=Lax protections, is not used for advertising, and normally expires when you close your browser.

Enquiry rate limit

To prevent automated abuse across browser sessions, the server applies a rate limit using the connection IP address supplied by the web server. It immediately converts that IP address into a pseudonymous keyed hash and stores only that hash with integer submission timestamps in one private state file; it does not store the raw IP address or form answers. Attempts are counted for 10 minutes, all timestamps older than 20 minutes are removed during locked updates, and the data is used only for website security.

Your rights

Depending on the circumstances, UK data protection law may give you rights to request access, correction, erasure, restriction, objection or portability. You can contact us using the details on the contact page. You may also complain to the UK Information Commissioner’s Office if you are unhappy with our response.

Changes

We may update this notice when our website or processing changes. The version published here is the current website notice.