Privacy Notice | MyBrandBox

Who we are

[Company name] Ltd, registered in England and Wales ([number]), [company address]. We operate the website mybrandbox.co.uk and the MyBrandBox packaging service. Contact us at hello@mybrandbox.co.uk.

What personal data we collect

We collect the following categories of personal data:

Contact data — your name, email address, phone number and WhatsApp number, when you submit a sample booking, waiting list signup, contact form or order.
Business data — the name and address of your restaurant or food business.
Order data — details of the products and quantities you order, your delivery address and payment records.
Design data — logos, images and artwork you upload for print.
Usage data — if you accept analytics cookies, we collect anonymised data about how you use the website via Google Analytics 4. This includes pages visited, time on site and general location (country or city). No personally identifiable information is included in analytics data.

Why we collect it and our legal basis

To arrange your free sample visit — on the basis of your consent (by submitting the booking form).
To fulfil your order — necessary for the performance of a contract with you.
To send you order and delivery updates — necessary for the performance of a contract with you.
To manage your account — necessary for the performance of a contract with you.
To contact you about your enquiry — on the basis of your consent (by submitting the contact form).
To improve the website using analytics — on the basis of your consent (via the cookie banner).
To comply with legal obligations — for example, keeping financial records.

How long we keep your data

Sample booking enquiries that do not result in an order: deleted after 12 months.
Order and account data: kept for 7 years for accounting and tax purposes.
Analytics data: retained in Google Analytics for 14 months from the date of collection.

Who we share your data with

We share your data only with:

Netlify — who host our website and receive form submissions. Netlify's privacy policy is at netlify.com/privacy.
Google Analytics — if you accept analytics cookies. Google's privacy policy is at policies.google.com.
Delivery couriers — we pass your delivery address to our courier to fulfil your order.
Payment processors — we use a PCI-compliant payment service to handle card payments. We do not store card details ourselves.

We do not sell your data to third parties.

Your rights under UK GDPR

You have the right to:

Access the personal data we hold about you.
Ask us to correct inaccurate data.
Ask us to delete your data, where we are not required to keep it by law.
Object to processing based on legitimate interests.
Withdraw consent at any time (this does not affect any processing done before withdrawal).
Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. Our ICO registration number is [ICO registration number].

To exercise any of these rights, email us at hello@mybrandbox.co.uk.

Cookies

We use analytics cookies only with your consent. See our Cookie policy for details.

Changes to this notice

We may update this notice from time to time. The current version is always at mybrandbox.co.uk/privacy. If we make significant changes, we will notify you by email if you have an account with us.

This notice is a template and should be reviewed by a qualified adviser before the site goes live to customers.