This website is operated by Win Every Time Limited, trading as Box Clever Tax (“we”, “us”, “our”), a private company limited by shares registered in Ireland (Company Registration Number: 609656), with its registered office at 90 Bridge Water Quay, Conyngham Road, Dublin 8, D08 N069, Ireland.
For the purposes of the General Data Protection Regulation (GDPR) and the Data Protection Acts 1988–2018, Win Every Time Limited is the data controller for personal data collected through this website.
If you have any questions about this policy or how we handle your personal data, you can contact us at:
When you complete the enquiry form on this website, we collect:
If you contact us directly by email or phone, we will hold the contact details and correspondence associated with that communication.
If you consent to analytics cookies, we use Google Analytics 4 to understand how visitors use this website. This collects:
Google Analytics does not receive your full IP address — it is truncated before storage and is not used to identify you personally.
If you do not consent to analytics cookies, Google Analytics is not loaded and none of the above is collected.
Our web server also maintains standard access logs, which may include IP addresses, for security and diagnostic purposes. These are necessary for the operation and protection of the website.
| Purpose | Legal basis under GDPR |
|---|---|
| Responding to your enquiry | Legitimate interests (Art. 6(1)(f)) — responding to a request you have initiated |
| Entering into and performing a client engagement | Performance of a contract (Art. 6(1)(b)) |
| Providing tax advisory and compliance services | Performance of a contract (Art. 6(1)(b)) |
| Meeting anti-money laundering and record-keeping obligations | Legal obligation (Art. 6(1)(c)) |
| Website analytics | Consent (Art. 6(1)(a)) — given through our cookie banner |
| Website security and server logging | Legitimate interests (Art. 6(1)(f)) — protecting and maintaining the site |
We do not use your personal data for automated decision-making or profiling.
We do not add enquirers to a marketing list without consent. If at any point we introduce a newsletter or similar communication, we will process your data for that purpose only on the basis of your explicit consent (Art. 6(1)(a)), and you will be able to withdraw that consent at any time.
Enquiries that do not lead to an engagement: retained for up to 24 months, after which they are deleted.
Client records: retained for the duration of the engagement and for a minimum of six years afterwards, in line with our obligations under Irish tax legislation, the Criminal Justice (Money Laundering and Terrorist Financing) Acts, and professional body requirements.
Google Analytics data: retained for 14 months from the point of collection, in line with our configured retention setting.
Server logs: typically retained for up to 30 days.
We do not sell your personal data. We do not share it with third parties for marketing purposes.
We may share personal data with:
Some of our service providers may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards, including European Commission adequacy decisions or Standard Contractual Clauses.
Google Analytics: operated for EEA users by Google Ireland Limited. Data may be transferred to Google LLC in the United States, which is certified under the EU–US Data Privacy Framework.
Email: provided through Microsoft 365. Microsoft’s data protection commitments and transfer safeguards are set out in the Microsoft Products and Services Data Protection Addendum.
Cookies are small text files placed on your device when you visit a website. The table below is generated automatically and lists every cookie currently in use on this site, what it does, and how long it lasts.
Some pages contain embedded podcast episodes (Spotify) or videos (Vimeo). When you play this content, those providers may set their own cookies. We do not control these. Their policies are available at:
You can change or withdraw your cookie consent at any time using the cookie settings link on this website. You can also control or delete cookies through your browser settings, though disabling strictly necessary cookies may affect how the site functions.
Under the GDPR, you have the right to:
To exercise any of these rights, contact us using the details at the top of this policy. We will respond within one month.
Please note that where we hold data to meet a legal obligation — for example, records we are required to keep under tax or anti-money laundering legislation — we may not be able to delete it on request.
If you are unhappy with how we have handled your personal data, please contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with the Irish supervisory authority:
Data Protection Commission
6 Pembroke Row, Dublin 2, D02 X963
Website: dataprotection.ie
Phone: +353 578 684 800
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure. This website uses TLS encryption (HTTPS) for all traffic, and access to client records is restricted and protected.
No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
We may update this policy from time to time. Any changes will be published on this page with a revised “last updated” date. We encourage you to review it periodically.
This website contains links to external sites, including LinkedIn and Spotify. We are not responsible for the privacy practices or content of those sites.
