Privacy Policy
LootBox Solutions — B2B White-Label Mystery Box Platform
Version 1.0 · Last updated: [insert date] 2026
1. Introduction
Arvion Tech Solutions LTD, trading as “LootBox Solutions” (“LBS”, “we”, “us” or “our”), takes your privacy seriously. We are committed to protecting your personal data and to upholding your rights under applicable data protection law.
This Privacy Policy explains what personal data we collect through this website (www.lootboxsolutions.com, the “Website”), why we collect it, how we use it, who we may share it with, how long we keep it, how we protect it, and the rights available to you.
This policy applies to our processing of your personal data in connection with your use of the Website and with any communications, business enquiries, commercial discussions, demonstration requests or job applications that are not covered by a separate agreement or notice. The Website is intended for business and professional visitors; it is not directed at consumers and does not offer any gaming or gambling product to visitors.
2. Who We Are
This Website is operated by Arvion Tech Solutions LTD, a company registered in the United Kingdom, trading as “LootBox Solutions”.
Arvion Tech Solutions LTD determines the purposes and means of the processing of your personal data and therefore acts as the “data controller” for the purposes of the UK GDPR and, where applicable, the EU General Data Protection Regulation (EU Regulation 2016/679).
For any privacy matter, or to exercise your rights, you can contact us by email at admin@lootboxsolutions.com.
Company registration number and registered office address to be inserted prior to publication.
3. Legal Basis for Processing
We rely on one or more of the following legal grounds when processing your personal data. The grounds applicable to each category are set out in the table in Section 4.
Contractual necessity. We may process your personal data where this is necessary to take steps at your request prior to entering into a contract, or to perform a contract between you (or the organisation you represent) and us.
Legitimate interest. We may process your personal data where we have a legitimate business interest in doing so, provided your interests and fundamental rights do not override that interest. Our legitimate interests include operating, securing and improving the Website, conducting and developing our business, and pursuing commercial relationships with prospective clients and partners. You have the right to object to processing carried out on this basis (see Section 7).
Consent. We may process your personal data on the basis of your consent, for example for certain marketing communications or non-essential cookies. Where we rely on consent, you may withdraw it at any time by contacting us at admin@lootboxsolutions.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
Legal obligation. We may process your personal data where this is necessary to comply with a legal or regulatory obligation to which we are subject, or for the establishment, exercise or defence of legal claims.
4. Which Data We Process
The table below sets out the categories of personal data we process, the purposes for which we process them, and the legal basis relied upon. Some categories may be processed for more than one purpose or on more than one legal basis.
| Category of personal data | Purpose of processing | Legal basis |
|---|---|---|
| Contact & identity data — Full name, business email, telephone number, postal address, the company you represent, your job title and any messaging ID you provide. Collected when you use our contact or enquiry forms, request a demonstration, or contact us by other means. | To respond to your enquiries and provide requested information; to take the first steps toward a potential commercial relationship; to maintain accurate records of our communications with you. | Contractual necessity; Legitimate interest |
| Marketing data — Name, business email, company name, industry/sector and your communication preferences. | To send you information about our platform, offers, industry events and other news that may be of interest to your business. You may opt out at any time. | Consent; Legitimate interest |
| Recruitment data — Full name, employment history, education and qualifications, and other information you include in a CV or application. Collected when you apply for a role or submit your CV. | To evaluate your candidacy for current or future vacancies and to communicate with you about opportunities. | Consent; Legitimate interest |
| Activity data — Your activity on the Website, including the pages you visit and the links you click. | To evaluate the performance and reach of the Website and to improve our services and content. | Consent; Legitimate interest |
| Technical data — IP address, approximate (GeoIP) location, browser type, device and operating system information, referring URL, session data and network information. | To operate, secure and improve the Website; to prevent fraudulent or malicious activity and protect the integrity of our systems. | Consent (non-essential cookies); Legitimate interest (security) |
| Other information you provide — Any other data you choose to share with us. | Depends on the nature of the data. Where it does not relate to a purpose set out in this policy, it will be deleted and not processed further. Initial review is carried out to determine the appropriate purpose and basis, or to delete the data. | Legitimate interest |
We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects concerning you.
5. Cookies
The Website uses cookies and similar technologies to enable core functionality, remember your preferences, and understand how the Website is used. You can manage non-essential cookies through your browser settings or any cookie controls provided on the Website. For more detail, please refer to our Cookie Policy, where available.
6. Sharing Your Personal Data
We may share your personal data with the following categories of recipient, in each case under appropriate safeguards and only as necessary for the purposes set out in this policy:
- Group companies. Our parent company, subsidiaries and affiliated companies, where reasonably necessary for the purposes described in this policy.
- Service providers. IT, hosting, email delivery, analytics and related providers (and their sub-processors) who process your data on our behalf under contractual obligations to protect it (for example, cloud hosting providers).
- Professional advisers. Lawyers, auditors, accountants and consultants we engage from time to time, where access to personal data is required.
- Authorities. Courts, regulators, law enforcement or governmental authorities, where we are required or permitted to disclose data by law, or where disclosure is necessary to protect our rights or comply with legal process.
We will never share your personal data with third parties for their own marketing purposes unless you have given your consent. We may share aggregated or anonymised information (which does not identify you) for analysis, reporting and business purposes.
7. International Data Transfers
Some of our service providers may be located outside the United Kingdom or the European Economic Area (EEA). Where we transfer your personal data outside the UK or EEA, we ensure that appropriate safeguards are in place, such as an adequacy decision by the relevant authority, Standard Contractual Clauses, or another lawful transfer mechanism that ensures your data receives an equivalent level of protection.
8. Your Rights
Subject to applicable law, you have the following rights in respect of your personal data. To exercise any of them, please contact us at admin@lootboxsolutions.com. We may ask you to verify your identity before acting on a request, and we will respond within the timeframes required by law.
- Right to be informed and to access the personal data we hold about you.
- Right to rectification of inaccurate or incomplete personal data.
- Right to erasure (“right to be forgotten”), subject to applicable exceptions.
- Right to restrict processing of your personal data in certain circumstances.
- Right to object to processing carried out on the basis of legitimate interest, and to object to direct marketing at any time.
- Right to data portability — to receive certain data in a structured, commonly used, machine-readable format.
- Right to withdraw consent where processing is based on consent.
- Right to lodge a complaint with a competent supervisory authority. We ask that you contact us first so we can try to resolve the matter directly.
9. Data Security
We use a range of technical and organisational measures and industry best practices to protect your personal data against unauthorised access, unlawful processing, accidental loss, destruction or damage. The Website uses secure HTTPS / SSL encryption for communication between your browser and our servers, and access to personal data is restricted to those who need it.
Despite the measures we take, no transmission over the Internet can be guaranteed to be completely secure. We encourage you to take your own steps to protect your information, such as using strong passwords and keeping your software up to date.
10. Data Retention
We retain your personal data only for as long as necessary for the purposes for which it was collected. Typically, we keep data relating to enquiries, communications and recruitment for the duration of our relationship with you and for a reasonable period thereafter. Where data is used to send you marketing communications, we process it until you indicate that you no longer wish to receive them. We may retain certain data for longer where required to comply with a legal or regulatory obligation, or for the establishment, exercise or defence of legal claims.
11. Change in Ownership or Control
In the event of a sale, merger, reorganisation or any other change in ownership or control of our business, your personal data may be disclosed as part of the transaction or in preparation for it (for example, during due diligence). Any new owner or controlling entity will be permitted to use your personal data only in accordance with this Privacy Policy, unless you consent otherwise.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page and take effect when published. We recommend checking this page periodically. Where appropriate, we will also notify you by email. If you do not agree with any change, you should stop using the Website.
13. Contact Us
If you have any questions about this Privacy Policy or our handling of personal data, or if you wish to exercise any of your rights, please contact us:
Arvion Tech Solutions LTD (trading as LootBox Solutions)
Email: admin@lootboxsolutions.com
Web: www.lootboxsolutions.com
This Privacy Policy is a template prepared for commercial use and should be reviewed by qualified counsel before publication. It does not constitute legal advice.