Sandbox Futures Ltd
Last updated: 14 October 2026

 

1. Who We Are

Sandbox Futures Ltd is a UK-based consultancy specialising in innovation, futures thinking, systems thinking, facilitation and professional development.

We believe in asking better questions, making connections and exploring possibilities. We also believe in being clear about how we handle your personal information.

This Privacy Policy explains what information we collect, why we collect it, how we use it and the rights you have over your information.
 

Company name: Sandbox Futures Ltd
Company registration number: 17511890
Registered in: England and Wales
Registered office: 16 Granby End, Burghfield Common, RG7 3NW
Email: laura@sandboxfutures.com
Website: https://sandboxfutures.com

Sandbox Futures Ltd is the data controller responsible for personal information collected through our website, events, consultancy services and interactive applications.

 

2. What Information We Collect

Depending on how you interact with Sandbox Futures, we may collect:

Contact and professional information

• Your name and email address.

• Your organisation and job title.

• Contact details you choose to provide.

• Information included in enquiries or correspondence.

Event and training information

• Event bookings and attendance records.

• Booking and payment information, including transaction records provided by our payment processors.

• Feedback and evaluation responses.

• Accessibility or participation requirements that you voluntarily share.

Innovation Mindset Audit information

• Your name, work email, organisation and role.

• Your answers to audit questions.

• Information about organisational challenges, innovation practices and ways of working.

• Your preferences regarding follow-up communications.

Website and application information

• Technical information such as IP addresses, browser types and device information, where collected.

• Cookies and similar technologies used for website functionality, security and analytics, where enabled.

• Information voluntarily submitted through our interactive resources.

We ask that you avoid including sensitive personal information, confidential business information or identifiable information about third parties in free-text submissions unless specifically requested and appropriate arrangements are in place.

 

3. How We Use Your Information

We use personal information to:

• Respond to enquiries and communicate with you.

• Provide consultancy, facilitation and professional development services.

• Process bookings and administer events and workshops.

• Send booking confirmations, joining instructions and event-related updates.

• Review Innovation Mindset Audit submissions and prepare personalised follow-up conversations.

• Provide resources and information you have requested.

• Collect feedback and improve our services.

• Maintain appropriate business and financial records.

• Protect the security and functionality of our website and applications.

• Send marketing communications where permitted by applicable law.

We do not sell your personal information.

 

4. Our Legal Basis for Processing Your Information

Under the UK General Data Protection Regulation (UK GDPR), we rely on different lawful bases depending on why we are processing your information.

Contract

Where processing is necessary to fulfil a contract with you or take steps at your request before entering into a contract, such as arranging purchased workshops or providing agreed services.

Legitimate interests

Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

This may include responding to business enquiries, reviewing requested audit submissions, following up on professional enquiries, maintaining service security and improving our services.

Legal obligation

Where we need to retain or process information to comply with applicable legal, accounting or regulatory requirements.

Consent

Where you have given permission for a particular activity, such as receiving optional marketing communications or using non-essential cookies where consent is required.

You can withdraw consent at any time. Withdrawing consent does not affect processing that was lawful before withdrawal.

 

5. Innovation Mindset Audit

Our Innovation Mindset Audit is a free tool designed to help organisations reflect on their approach to innovation, collaboration, organisational change and the relationship between strategic thinking and everyday activities.

When you complete the audit, we collect the contact details and responses you provide.

We use this information to:

• Understand your organisation's current challenges and opportunities.

• Review your responses personally.

• Prepare a relevant follow-up conversation.

• Identify areas where further discussion or support may be useful.

The audit does not produce an automated innovation score or make automated decisions about you.

Completing the audit does not automatically subscribe you to marketing communications.

We will not publish identifiable audit responses or share them with other clients without appropriate permission.

Audit responses are retained for up to 12 months after our last substantive interaction, unless an ongoing business relationship or another legitimate reason requires longer retention.

You may request deletion of your personal information, subject to any applicable legal obligations or exceptions.

 

6. Events, Workshops and Professional Development

When you register for a Sandbox Futures event, workshop or CPD session, we collect information necessary to manage your booking and participation.

We may use your information to:

• Confirm your booking.

• Provide event details, joining instructions and relevant resources.

• Manage attendance and participation.

• Issue certificates of attendance or participation where offered.

• Request feedback following an event.

• Respond to questions or accessibility requirements.

Where accessibility information reveals sensitive personal information, we will handle it with additional care and apply the relevant data protection requirements.

If an event is recorded or photographs are taken, we will explain this to participants and provide appropriate information about how recordings or images may be used.

We do not automatically add event participants to marketing mailing lists.

 

7. Marketing Communications

You may choose to receive occasional updates about Sandbox Futures, including upcoming events, professional development opportunities, resources and services.

Where we rely on consent, we will ask you to opt in separately.

You can unsubscribe at any time by following the instructions in our communications or emailing laura@sandboxfutures.com.

We will respect your communication preferences and comply with applicable electronic marketing rules.

 

8. How We Store and Protect Your Information

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

These measures include appropriate access controls, password protection, limiting access to authorised users and using established technology providers.

We use third-party services to operate our business, which may include:

Wix — Website hosting, event registration and associated website services.

Google Workspace — Business email, document storage, calendar and communications.

Replit — Hosting interactive applications, including the Innovation Mindset Audit.

Payment providers — Secure processing of payments for events and services.

These providers may process personal information in accordance with their applicable contractual terms and privacy arrangements.

Some information may be processed or stored outside the United Kingdom. Where required, we use appropriate safeguards for international transfers in accordance with applicable data protection law.

We do not intentionally store full payment card details ourselves.

 

9. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, or where retention is required by law.

Our general retention periods are:

• Innovation Mindset Audit submissions: Up to 12 months after the last substantive interaction, unless a longer period is justified.

• General enquiries: Up to 12 months after the last substantive interaction, unless they develop into an ongoing business relationship.

• Event and workshop administration records: Up to 24 months after the event, unless a longer period is necessary.

• Financial and accounting records: For the period required by applicable tax and accounting legislation, generally six years or longer where required.

• Marketing information: Until you unsubscribe or the information is no longer required, with limited records retained where necessary to respect opt-out requests.

Where possible, information that is no longer needed will be securely deleted or anonymised.