Privacy policy

Privacy Policy

Effective Date: 16/09/2024

The Box Furniture (“we,” “our,” or “us”), which is the principal operating entity. This Privacy Policy sets out how we collect, use, disclose, and protect your personal data when you use our website theboxfurniture.co.uk, operated via the Shopify platform.

We process personal data in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you confirm that you have read and understood this Privacy Policy and agree to the terms set out herein. If you do not agree, you must immediately discontinue use of the website.

1. Information We Collect

We may collect both personal information and non-personal information for the purposes described in this Policy.

Personal Information may include:

  • Contact details: name, email address, telephone number, billing and shipping address.
  • Account details: username, password (if applicable).
  • Payment details: processed securely via Shopify or trusted third-party payment providers.
  • Transaction history: records of purchases, orders, and related correspondence.

Non-Personal Information may include:

  • Technical data: IP address, browser type, device identifiers, pages visited.
  • Cookies and tracking technologies: used for analytics, performance optimisation, and user experience improvements.

2. How We Use Your Information

We may process your personal data for the following purposes:

  • To process, fulfil, and deliver your orders, including payment processing and shipping.
  • To provide customer service and respond to inquiries.
  • To send promotional communications (only where lawful and with your consent).
  • To personalise and improve your online experience.
  • To analyse website usage, trends, and performance.
  • To detect and prevent fraud, misuse, or unlawful activity.
  • To comply with applicable legal, regulatory, and tax obligations.

3. Legal Basis for Processing

We process personal data under the following lawful bases:

  • Contractual necessity: To perform our contract with you when fulfilling orders.
  • Legitimate interests: To improve our services, secure our platform, and market our products.
  • Consent: For marketing communications and certain optional data uses (you may withdraw consent at any time).
  • Legal obligation: To comply with laws, regulations, or enforceable governmental requests.

4. Sharing Your Information

We do not sell, rent, or trade your personal data. We may disclose information only as follows:

  • Shopify: As our website host and payment processor (see Shopify’s Privacy Policy).
  • Service providers: Trusted third parties for shipping, payment processing, marketing, and analytics, under strict confidentiality and data protection agreements.
  • Legal authorities: Where required to comply with applicable law, enforce our terms, or protect our rights and the safety of others.

5. International Data Transfers

Your data may be processed outside the UK, including in Canada and the United States, where Shopify and some service providers are located. These transfers are safeguarded through lawful mechanisms such as adequacy decisions, contractual clauses, or other appropriate measures under UK GDPR. By using our services, you consent to these transfers.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law. When no longer needed, data will be securely deleted, anonymised, or otherwise disposed of in compliance with data protection requirements.

7. Security

We implement appropriate technical and organisational measures, including encryption, SSL technology, and access controls, to safeguard personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute protection of your information.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of access to the personal data we hold about you.
  • Right to rectification of inaccurate or incomplete data.
  • Right to erasure (“right to be forgotten”), subject to legal limitations.
  • Right to restrict processing in certain circumstances.
  • Right to data portability, to receive your data in a structured, machine-readable format.
  • Right to object to processing, including direct marketing.
  • Right to withdraw consent at any time where processing is based on consent.

To exercise your rights, please contact us at theboxfurniture@outlook.com. We may require proof of identity before processing requests.

9. Cookies and Tracking

We use cookies and similar technologies to enhance functionality, personalise your experience, and analyse site performance. You can disable cookies in your browser settings, though some features may not function correctly. Please see our separate Cookie Policy for further details.

10. Third-Party Links

Our website may include links to external sites. We are not responsible for the privacy practices or content of third-party websites. Please review their policies before submitting personal data.

11. Children’s Privacy

Our services are not directed to children under 13, and we do not knowingly collect personal data from them. If we become aware that a child has provided us with data, we will promptly delete it.

12. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect legal, regulatory, or business developments. Updates will be posted on this page with a new effective date. We encourage you to review this Policy periodically.

13. Contact Us

The Box Furniture
82 Western Street, Sandfields, Swansea, SA1 3JS
Email: theboxfurniture@outlook.com
Phone: 07578 064082