Office 365 Cloud-Based Backup Services, Data Backup Solutions

What we use your personal data for	Our reasons
Creating and managing your account with us	To perform our contract with you or to take steps at your request before entering into a contract
Providing products and/or services to you	To perform our contract with you or to take steps at your request before entering into a contract
Conducting checks to identify you and verify your identity or to help prevent and detect fraud against you or us	To comply with our legal and regulatory obligations
Enforcing legal rights or defend or undertake legal proceedings	Depending on the circumstances: — to comply with our legal and regulatory obligations — in other cases, for our legitimate interests, i.e. to protect our business, interests and rights
Customising our website and its content to your particular preferences based on a record of your selected preferences or on your use of our website	Depending on the circumstances: — your consent as gathered e.g., by the separate cookies tool on our website—see ‘Cookies and other tracking technologies’ below — where we are not required to obtain your consent and do not do so, for our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price If you have provided such a consent, you may withdraw it at any time by changing the setting on the cookies tool (this will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn)
Retaining and evaluating information on your recent visits to our website and how you move around different sections of our website for analytics purposes to understand how people use our website so that we can make it more intuitive or to check our website is working as intended	Depending on the circumstances: — your consent as gathered by the separate cookies tool on our website]—see ‘Cookies and other tracking technologies’ below — where we are not required to obtain your consent and do not do so, for our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price If you have provided such a consent you may withdraw it at any time by clearing your cookie settings and rejecting when you revisit our website (this will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn)
Communications with you not related to marketing, including about changes to our terms or policies or changes to the products AND/OR services or other important notices	Depending on the circumstances: — to comply with our legal and regulatory obligations — in other cases, for our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price
Protecting the security of systems and data used to provide the services	To comply with our legal and regulatory obligations We may also use your personal data to ensure the security of systems and data to a standard that goes beyond our legal obligations, and in those cases our reasons are for our legitimate interests, i.e., to protect systems and data and to prevent and detect criminal activity that could be damaging for you and/or us
Statistical analysis to help us understand our customer base	For our legitimate interests, i.e., to be as efficient as we can so we can deliver the best service to you at the best price
Updating and enhancing customer records	Depending on the circumstances: — to perform our contract with you or to take steps at your request before entering into a contract — to comply with our legal and regulatory obligations — where neither of the above apply, for our legitimate interests, e.g., making sure that we can keep in touch with our customers about existing orders and new products
Disclosures and other activities necessary to comply with legal and regulatory obligations that apply to our business, e.g. to record and demonstrate evidence of your consents where relevant	To comply with our legal and regulatory obligations
Marketing our services to existing and former customers	For our legitimate interests, i.e., to promote our business to existing and former customers. See Marketing below for further information
The audit of our ISO certifications (to the extent not covered by ‘activities necessary to comply with legal and regulatory obligations’ above)	For our legitimate interests, i.e., to maintain our accreditations so we can demonstrate we operate at the highest standards
To share your personal data with members of our group and third parties that will or may take control or ownership of some or all of our business (and professional advisors acting on our or their behalf) in connection with a significant corporate transaction or restructuring, including a merger, acquisition, asset sale, initial public offering or in the event of our insolvency. In such cases information will be anonymised where possible and only shared where necessary	Depending on the circumstances: — to comply with our legal and regulatory obligations — in other cases, for our legitimate interests, i.e., to protect, realise or grow the value in our business and assets

Recipient	Processing operation (use) by recipient	Relevant categories of personal data transferred to recipient
Google	We use Google Analytics (GA4) cookies to collect data about the visitors to the site which includes the number of visitors, session duration, pages visited during the session etc. and whether visitors return. Google Analytics will assign a unique “ID” to a user of the boxxe website at the point they register an account with us for the purpose of tracking their activity on the boxxe website. This information is anonymous and cannot be used to identify you personally unless you end up becoming a boxxe customer. Google Analytics cannot use the ID to work out who you are.	Device’s IP address (processed during your session and stored in a de-identified form) geographic location (country only), and the preferred language used to display our website. Google Analytics stores this information on our behalf in a pseudonymized user profile.
Hotjar Ltd	We use Hotjar in order to better understand our users’ needs and to optimize this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. Hotjar is contractually forbidden to sell any of the data collected on our behalf.	This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile.
Klevu	Klevu offers a machine learning algorithm which takes several parameters into account when establishing what a customer may like and eventually buy on the store. Javascript keeps track of what customers are searching for and visiting. These products visited by these customers and any recent search queries fired by them are used as a context to the search queries fired by them. Klevu perform semantic and statistical analysis of this data to identify the intent and to build multiple, product-noun (e.g. bag, shoe, chair) specific profiles of preferences. Klevu also employs a method called collaborative filtering, which involves analyzing the history of other customers who have or had performed similar searches and visited products similar to the products visited by the current customer. Only those products that are relevant to the current search query are picked up and analyzed to identify common factors within them.	Device’s IP address (processed during your session and stored in a de-identified form) geographic location (country only), and the preferred language used to display our website. Klevu stores this information on our behalf in a pseudonymized user profile.
Dotdigital	Dotdigital is a SaaS cross-channel marketing automation platform and services provider that helps brands devise successful, personalized marketing campaigns across multiple channels (e.g. email). Paired with its Microsoft Dynamics 365 CRM integration, boxxe is able to deliver tailored marketing to its customers.	Contact data (such as email address, contact number, name or other contact details), marketing preferences, IP address and usage information (including online navigation data, location data and browser data).
Darktrace	Darktrace’s Security Platform enhances boxxe’s cybersecurity position by providing endpoint protection, cloud security, and email security. Darktrace uses AI-driven tools to detect and respond to potential threats, such as malware, phishing attacks, and insider threats, by continuously monitoring network traffic, user behaviour, and cloud-based resources. It aims to prevent data breaches and minimize cyber risks by identifying and mitigating security threats in real-time.	Contact data (name, email address, user name), devide identifiers (e.g. IP address) and/or mobile identifiers, location data to nearest city, usage information (including tracking or browsing behavior).
Greenhouse	Greenhouse ATS is a cloud-based software that helps companies manage their recruitment processes. It organizes and tracks job applications, resumes, and candidate information. Greenhouse ATS collects applications and stores data about the applicants, such as which source they came from, which role they applied to and where they are in the application process. Greenhouse ATS features applicant tracking, background screening, interview scheduling, and onboarding.	Contact details (name, email address, home address, telephone number) and any special accommodations needed if successful for interview and employment.

Recipient country	Recipient	Processing operation (use) by recipient	Lawful safeguard
Ireland	Hotjar	Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymized user profile.	Adequacy regulation further to paragraph 5(1)(a) of Part 3 of Schedule 21 to the Data Protection Act 2018 https://www.hotjar.com/legal/support/dpa/
USA	Stripe Inc	In order to facilitate online payments through boxxe’s ecommerce portal, where applicable, Stripe may Process Payment Account Details, bank account details, billing/shipping address, name, date/time/amount of transaction, device ID, email address, IP address/location, order ID, payment card details, tax ID/status, unique customer identifier, identity information including government issued documents (e.g., national IDs, driver’s licenses and passports).	UK Data Transfer Addendum https://stripe.com/gb/legal/dpa
EEA	Vaimo	Vaimo has access to certain categories of boxxe customer personal data (names, addresses, DOB, email, number, location, device and diagnostic data, connection data), by virtue of hosting the boxxe website.	Adequacy regulation further to paragraph 5(1)(a) of Part 3 of Schedule 21 to the Data Protection Act 2018. Vaimo also has a legally valid intra-group agreement in place and no data is transferred to any entity who is not a party to it.
EEA	Dotdigital	Boxxe will provide certain information about its customers to Dotdigital in order for it to be able to provide automated marketing services that are tailored to its specific customer interests.	Adequacy regulation further to paragraph 5(1)(a) of Part 3 of Schedule 21 to the Data Protection Act 2018. https://dotdigital.com/terms/data-processing-agreement/
Ireland/EEA/USA	Greenhouse	Data will primarily be stored at rest in Greenhouse’s Silos - EU-Central-1 (Frankfurt) and EU-West-1 (Ireland) for disaster recovery. Data will only be transferred to and from Greenhouse servers in the EU and the US for essential business activities, including technical support, sub-processor services, and others as outlined in the Greenhouse DPA (data processing agreement).	Legal – Data processing addendum \| Greenhouse

Access to a copy of your personal data	The right to be provided with a copy of your personal data
Correction (also known as rectification)	The right to require us to correct any mistakes in your personal data
Erasure (also known as the right to be forgotten)	The right to require us to delete your personal data—in certain situations
Restriction of use	The right to require us to restrict use of your personal data in certain circumstances, e.g. if you contest the accuracy of the data
Data portability	The right to receive the personal data you provided to us, in a structured, commonly used and machine-readable format and/or transmit that data to a third party—in certain situations
To object to use	The right to object: at any time to your personal data being used for direct marketing (including profiling in certain other situations to our continued use of your personal data, e.g. where we use your personal data for our legitimate interests unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise or defence of legal claims
Not to be subject to decisions without human involvement	The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you We do not make any such decisions based on data collected by our website
The right to withdraw consents	If you have provided us with a consent to use your personal data you have a right to withdraw that consent easily at any time You may withdraw consents by emailing ecommerce@boxxe.com. Withdrawing a consent will not affect the lawfulness of our use of your personal data in reliance on that consent before it was withdrawn

Home
Services & Solutions
Modern Workplace
boxxe Cloud-Based Backup Services (BaaS)

Fill the backup gaps in Microsoft 365

Relying on Microsoft 365’s built-in protections to secure your data? You may be at risk without even knowing it.

"It's a common misconception that cloud services like Microsoft 365 automatically include comprehensive backup of your data – but this isn’t true. While M365 provides a wide array of powerful services, it operates on a shared responsibility model. This means you are responsible for securing and backing up your data on Microsoft 365 programmes."

Microsoft 365 Backup Expert, boxxe

Without a proper data backup solution for your business, you could lose access to critical files due to accidental deletion, cyber-attacks or system outages. Microsoft’s own service documentation makes it clear: If disaster strikes, your first step should be to turn to your backup provider.

The solution? boxxe's Cloud-Based Backup Services, powered by Druva, is a cloud-native data protection platform designed to ensure your Microsoft 365 data is always protected, accessible and easily recoverable. With its innovative features and advanced functionalities, our backup as a service (BaaS) provides comprehensive backup, recovery and governance capabilities for M365 environments.

Key features of boxxe's Cloud-Based Backup Services

boxxe logo symbol - Microsoft 365 backup with Druva

Automated Backup: Backup as a service provides automated backup capabilities for Microsoft 365 services, ensuring that data is continuously protected without manual intervention.
Granular Recovery: Users can perform granular recovery of Microsoft 365 data, including emails, files, folders and SharePoint sites, enabling swift recovery of specific items when needed.
Comprehensive Coverage: Our backup data backup solution supports all Microsoft 365 services, including Exchange Online, SharePoint Online, OneDrive for Business, Microsoft Teams and Exchange Online Archives, providing comprehensive coverage for all critical data.

Secure Cloud Storage: Backed by a secure and scalable cloud storage infrastructure, BaaS ensures that Microsoft 365 backups are stored safely and can be accessed anytime, anywhere.
Advanced Data Governance: boxxe's BaaS offers advanced data governance capabilities, including retention policies, legal hold and compliance reporting, helping companies meet regulatory requirements and enforce data management best practices.

Watch our video

Cloud-Based Backup as a Service

Do you have a Microsoft 365 backup yet?

(8 mins)

boxxe's Malcolm Plested and Druva's Ian Heptinstall discuss the importance of data protection and how boxxe's backup services meet our customers' requirements for secure backup of M365 cloud data.

How our data backup solutions protect each Microsoft 365 application

boxxe's Cloud-Based Backup Services protect the full range of Microsoft 365 applications.

A breakdown of each of these is detailed below:

Exchange Online

Our backup as a service stores copies of Exchange Online mailboxes, ensuring that emails, contacts, calendars and attachments are securely protected and available for recovery in case of accidental deletion, corruption or cyber threats.

SharePoint Online

BaaS provides comprehensive backup and recovery for SharePoint Online sites, lists, libraries and documents, enabling organisations to restore critical business data with ease.

OneDrive for Business

Using our Microsoft 365 backup solutions, you can safeguard user files and folders stored in OneDrive for Business, ensuring data resilience and compliance with data protection policies.

Microsoft Teams

Our cloud backup services protect your Microsoft Teams data, including chat messages, files and team settings, enabling seamless recovery of Teams content in the event of data loss or security incidents.

Exchange Online Archives

BaaS extends its backup capabilities to Exchange Online Archives, ensuring that archived emails and data are securely preserved and can be restored whenever needed.

Why choose boxxe for your Office 365 backup?

With more than three decades of experience, we've learned how to transform businesses and make lives better with tech. Here's what you can expect if you partner with us:

Broad capabilities: We've partnered with a wide range of private and public sector clients, so we have the know-how to help you navigate whatever difficulties you're facing.
Accredited experts: We're ISO27001 certified security specialists and have safeguarded some of the most targeted organisations in the nation, so you can count on the highest levels of integrity when you work with us.
Innovative partners: Our partnerships with leading vendors like Druva help us provide solutions like our Cloud-Based Backup Services.
Incredible outcomes: We pride ourselves on delivering exceptional results for our customers. We'd love to deliver them for you too.

Our customers love us?

Read what our happy customers have to say about our Microsoft 365 backup and other modern workplace solutions.

"Working with boxxe has been a fantastic experience, they saw my vision and brought it to life, adding their own innovative and forward-thinking ideas. It’s paved the way to Thirteen Group being Microsoft-first in our future developments."

Jayne Allport , Head of Service, Systems & Application Improvement, Thirteen Group

FAQs about our Cloud-Based Backup Services

Why should I backup M365 data?

Having backups in place enables your business to quickly restore its data in the event of data loss, which can occur due to human error, technical glitches, cyber attacks or natural disasters. This ensures that your business operations can continue with minimal interruption should disaster strike.

Does data backup come included with M365?

No, Microsoft doesn't back up your data as part of your Microsoft 365 plan.Microsoft 365 is built on a shared responsibility model, which means that Microsoft is responsible for the infrastructure but you're responsible for protecting your data. Microsoft will solve any issues you experience due to software failures but won't help you if your data is damaged, lost or stolen.

How does boxxe backup Microsoft 365 data?

The boxxe solution uses the 3-2-1 rule, which is a data protection strategy that involves:

Maintaining three copies of data, including the original data and two copies
Storing the copies in two different media types
Keeping at least one copy off-site – in this case, with the Druva cloud platform, away from Microsoft

Diversifying your backup across mediums and locations enhances the security and accessibility of your critical data, enabling swift recovery in the face of unexpected disasters.

What are the benefits of boxxe's Cloud-Based Microsoft 365 Backup Services?

In addition to cost-effective and reliable data protection, you can expect the following benefits by partnering with us:

Ease of use: Enjoy enhanced capabilities with reduced administrative overhead by restoring your data via self-service.
Simple billing: Make your data protection costs predictable by eliminating the need to acquire backup software and hardware, as well as in-house expertise.
Expert support: Our operations team can equip you to manage your backup data yourself or provide a fully managed service that takes away the worry.

Enquire now

Interested in better data protection with boxxe's Cloud-Based Backup Services?

Call the number below or complete this form to get in touch with one of our Microsoft 365 backup experts.

0330 236 9429

First name

Last name

Contact number

Email address

Company name

Sector

Institute

Message (optional)

I would like to receive news and updates:

by email

by SMS

The boxxe Shop

Get top-brand hardware and accessories, with next day delivery

Windows 11 - Not your average upgrade

Windows 11 - Not your average upgrade

Explore our bestselling computers

Explore our bestselling accessories

Latest Case Studies

boxxe x IBM - Accelerating Cybersecurity with AI

DeMontfort Fine Art - Where Culture meets Cybersecurity

Derbyshire Healthcare NHS Foundation Trust Data Migration

Helpful Insights

Already a customer?

Already a customer?

Cloud-Based Backup Services (BaaS)

Fill the backup gaps in Microsoft 365

Key features of boxxe's Cloud-Based Backup Services