Last updated: 5 March 2026
ToolBoxHQ is a trading name of Snorlabs Ltd, a company registered in England & Wales. Contact: hello@snorlabs.com.
We are the data controller for personal data processed through the ToolBoxHQ platform.
Account data: Name, email address, password (hashed), business name, phone number, address, VAT number.
Client data: Names, email addresses, phone numbers, addresses, and postcodes of your clients that you enter into the platform.
Job data: Job descriptions, quotes, invoices, photos, costs, tasks, and communications between you and your clients via the portal.
Usage data: Pages visited, features used, device type, browser type. We do not use third-party analytics trackers.
Payment data: If you subscribe to a paid plan, payment is processed by Stripe. We do not store your full card details.
We process your data under the following lawful bases (UK GDPR Article 6):
Contract: To provide the ToolBoxHQ service you signed up for.
Legitimate interest: To improve our service, prevent fraud, and ensure security.
Consent: For optional marketing communications (you can opt out at any time).
Legal obligation: To comply with tax, accounting, and legal requirements.
To operate and maintain your account and business on the platform. To generate quotes, invoices, and PDF documents. To enable the client portal for your customers. To send transactional emails (confirmations, password resets). To provide AI-powered features (quote generation). To provide customer support via Crisp chat.
We share data only with essential service providers:
Supabase (database hosting, EU region) — stores all platform data.
Vercel (website hosting) — serves the application.
Anthropic (AI features) — job descriptions are sent for AI quote generation only. No personal data is sent.
Crisp (customer support chat) — chat messages and basic device info.
Stripe (payments) — processes subscription payments.
We do not sell your data to third parties. We do not share data with advertisers.
We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days. Some data may be retained longer where required by law (e.g. invoices for HMRC — 6 years).
Under UK GDPR, you have the right to:
Access — download a copy of all your data (available in Profile → Data Export).
Rectification — update or correct your data at any time via your profile.
Erasure — request deletion of your account and data (available in Profile → Delete Account).
Portability — export your data in a machine-readable format (JSON).
Object — object to processing based on legitimate interest.
Withdraw consent — withdraw consent for marketing at any time.
To exercise any of these rights, contact us at hello@snorlabs.com or use the in-app tools.
All data is encrypted in transit (TLS/HTTPS) and at rest. Passwords are hashed using bcrypt. Access to the database is restricted by row-level security policies. We conduct regular security reviews.
We use essential cookies only for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.
ToolBoxHQ is not intended for use by anyone under 18. We do not knowingly collect data from children.
We may update this policy from time to time. We will notify you of significant changes via email or in-app notification.
Snorlabs Ltd, trading as ToolBoxHQ. Email: hello@snorlabs.com
If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.