Who we are

This website is operated by Craft Boxes UK. References in this policy to “Craft Boxes UK”, “we”, “us” and “our” mean the organisation responsible for operating craftboxes.co.uk and handling the personal information described in this policy.

Information we collect

We may collect personal and business information that you provide voluntarily when you contact us, complete a form, request a quotation, upload artwork or place an order.

Standard web-server logs do not ordinarily include your email address unless you actively provide it through a website form or another communication method.

How we use personal information

We use personal information only where there is a legitimate and relevant business or legal purpose.

Lawful bases for processing

The lawful basis depends on why we are using the information. Depending on the circumstances, we may rely on one or more of the following bases.

When information may be shared

We do not sell or rent personal information. Information may be shared only where reasonably necessary to operate the business, fulfil a request, comply with the law or protect legal rights.

Service providers are expected to process information only for the relevant service and subject to appropriate contractual and security requirements.

We may also disclose information where required by law, a court order, regulatory request or legal proceeding, or where we reasonably believe disclosure is necessary to protect our rights, users, customers or other people.

Payments and financial information

Where payment information is required, it may be processed by a bank, card provider or payment service provider involved in completing the transaction.

Payment details are used only to authorise, process, record or refund relevant transactions. Craft Boxes UK does not use financial information for unrelated purposes.

Cookies and similar technologies

Cookies are small files or identifiers placed on or accessed from your device. They may be used to operate the website, remember preferences, maintain security and understand how the website is used.

Non-essential cookies should be controlled through the website’s cookie-consent tool where applicable. You may also manage or delete cookies using your browser settings, although disabling essential cookies may affect website operation.

How long information is retained

We retain personal information only for as long as reasonably required for the purpose for which it was collected, including customer service, contractual, accounting, tax, dispute-resolution and legal requirements.

The relevant retention period may depend on:

• The nature and sensitivity of the information
• Whether an enquiry becomes an order
• The duration of the customer relationship
• Warranty, complaint or dispute requirements
• Accounting, taxation and record-keeping obligations
• Security and fraud-prevention requirements
• Whether the information remains necessary for its original purpose

Information that is no longer reasonably required may be deleted, anonymised or securely archived, subject to legal and operational requirements.

International data transfers

Some website, hosting, analytics, communication or technology providers may process information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards should be used as required by applicable data-protection law. These may include adequacy regulations, recognised contractual safeguards or another permitted transfer mechanism.

Your data-protection rights

Depending on the circumstances and the lawful basis being used, you may have rights concerning your personal information.

To exercise a right, contact [email protected] . We may need to verify your identity before responding.

Marketing communications

Where permitted, we may send information about relevant services, website updates, packaging guidance or offers that may be of interest.

You may ask us to stop sending marketing communications at any time by using an unsubscribe option where provided or emailing:

Opting out of marketing does not prevent us from sending necessary service messages about an enquiry, quotation, order or existing customer relationship.

Links to third-party websites

Our website may contain links to websites, services or resources operated by third parties. Craft Boxes UK is not responsible for the privacy practices, security or content of those external websites.

We recommend reviewing the privacy notice of any third-party website before providing personal information.

Business transfers

If Craft Boxes UK is involved in a merger, acquisition, restructuring, sale or transfer of business assets, relevant information may be transferred as part of that transaction.

Any such transfer will be handled subject to applicable law and appropriate confidentiality and data-protection requirements.

Changes to this policy

We may update this Privacy Policy to reflect changes to our services, website, technology, providers or legal obligations.

The latest version will be published on this page, together with the date it was last updated. Material changes may also be communicated through another appropriate method.