Privacy Policy (GDPR)

Last Updated: 30/09/24

At Everything. Boxed., we are committed to protecting your privacy and ensuring the security of your personal data. This GDPR Privacy Policy outlines how we collect, use, and protect your information in compliance with the General Data Protection Regulation (GDPR).

1. Introduction

This policy applies to personal data collected through our website, www.everything-boxed.com (the "Website"), and outlines your rights regarding your personal data.

2. What Personal Data Do We Collect?

We may collect the following types of personal data:

Contact Information: Name, email address, phone number, and mailing address.
Account Information: Username, password, and profile details if you create an account with us.
Payment Information: Credit/debit card details and billing address for processing orders (processed securely via third-party payment providers).
Technical Data: IP address, browser type, operating system, and browsing behavior on our Website.
Communication Data: Any messages or communications you send us.

3. How We Use Your Personal Data

We use your personal data for the following purposes:

To process your orders: Including payment processing and order fulfillment.
To communicate with you: Responding to inquiries, sending updates, and providing customer support.
To improve our services: Analysing data to enhance user experience and Website functionality.
To comply with legal obligations: Meeting our legal, regulatory, and compliance requirements.

4. Legal Basis for Processing Your Data

We will process your personal data only when we have a lawful basis to do so, including:

Consent: When you have given us explicit permission to process your data.
Contractual Necessity: When processing is necessary for the performance of a contract with you.
Legal Obligation: When we need to comply with a legal or regulatory requirement.
Legitimate Interests: When processing is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests.

5. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including legal, accounting, or reporting requirements.

6. Your Rights

Under GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request correction of inaccurate or incomplete data.
Right to Erasure: You can request deletion of your personal data when it is no longer necessary.
Right to Restrict Processing: You can request restriction of processing your data in certain circumstances.
Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your data based on legitimate interests or for direct marketing purposes.

7. Security of Your Personal Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. However, please remember that no method of transmission over the Internet or method of electronic storage is 100% secure.

8. Sharing Your Data

We do not sell or rent your personal data to third parties. We may share your data with trusted third-party service providers who assist us in operating our Website, conducting our business, or servicing you, provided they agree to keep your information confidential.

9. Changes to This Policy

We may update this GDPR Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our Website with an updated effective date.

10. Contact Us

If you have any questions, concerns, or requests regarding this GDPR Privacy Policy, please contact us at:

policies@everything-boxed.com

Thank you for trusting Everything. Boxed. We are dedicated to protecting your privacy and ensuring the security of your personal data.