Dated: December 2023

 

  1. Who is responsible for managing my information?

https://www.thecardboardbox.co.uk and all websites operated and/or produced in relation to it are owned and maintained by:-

THE CARDBOARD BOX COMPANY LIMITED

whose registered office is at 2 Franks Road, Bardon Hill, Coalville, Leicestershire, England, LE67 1TT

and whose company registered number is 04012577

(“we” or “us“)

This is our Privacy Notice and it explains how we collect, use, share and protect your personal data.

We are responsible for the collection and proper management of any personal information you submit. We will keep your personal details secure and use the information you provide consistently with applicable privacy and data protection laws and the terms of this Privacy Notice.

 

  1. What information do we collect?

If you choose to buy any products from us  or make a query about buying products form us we will collect details that you provide in relation to your purchase or query.

Information held is likely to include your name, the company you work for, contact details, payment details, information about your purchase, order or query and any additional information we may need to help meet your specific requirements.

We also collect website usage information and do this using “cookies” and other technologies to collect information when you visit our site(s), view our online advertisements  or promotions, or use our mobile applications or other services. The following are examples of information we may collect with these technologies:

  • information about your device browser and operating system;
  • IP address;
  • web pages you view;
  • links you click and/or
  • information about the way you use the application..

 

For further information about cookies and online technologies and how we use them please see our Cookie Policy.

We may also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your personal data but is not considered personal data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your data relating to use of our website to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy policy.

We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

 

  1. How do we use your information?

The information you provide may be used in a number of ways, for example:

  • to enable us to provide products you (or your company) have ordered
  • to enable us to provide related support services;
  • for statistical purposes when we evaluate our range of services;
  • to personalise repeat visits to our websites or inform you about issues;
  • to tell you about other products [and services] we think may be of interest to you (see below);
  • to manage customer service queries;
  • to develop new products and services;
  • to process payments;
  • to protect against or identify possible fraudulent transactions;
  • to create and manage your/your company’s account;
  • to enforce our Terms and Conditions and otherwise manage our business; and
  • to help us to provide details or information you may have requested.

 

  1. On what legal basis will we process your information?

We will always process your personal information on lawful grounds and in particular on one or more of the grounds set out below:-

Performance of a Contract

If you are purchasing products from us  we will use the details that you give to provide those products to you. This information is likely to include your name, contact details, payment details, information about your order and any additional information we may need to help meet your specific requirements and to provide the products you have ordered.

If you do not provide us with the information set out in this paragraph, then we may not be able to provide you with the products you have ordered.

Legitimate Interest

We want to give you the best possible customer experience whilst respecting your privacy.

We may ask to use your name and contact details to tell you about our own products and services which we think may be of interest to you. If we do this you can ask us to stop doing so at any time. Where you do so we may continue to communicate with you on other grounds, such as to provide you with our services.

We may also use some of your personal information to administer the provision of our services for statistical purposes when we evaluate our range of services.

We may also share your details with third parties to whom we may choose to sell, transfer or merge parts of our business or our assets. Alternatively, we may seek to acquire other businesses or merge with them. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.

Data privacy law allows these uses as part of our legitimate interest in understanding our customers, marketing our services to them, helping us to provide them with the highest levels of service, providing continuity of service  and provided that this does not override your own interests and fundamental rights .

We may also make use of your personal data to the extent required to establish, exercise, protect or defend our legal rights, enforce our terms and to take legal advice.

Consent

We may sometimes ask your consent to share your name and contact details with selected third parties so that they can tell you about their products and services or so that we can share details of their products or services with you. Where we do not get your specific permission we will not do this.

If you agree, we may also pass on your information, in certain cases, for the purposes of conducting a credit check.

Where this happens you can withdraw your consent at any time. Where you do so we may continue to communicate with you on other grounds, such as to provide you with our services.

You may also expressly instruct us to pass your information to or share your information with a third party.

Legal Obligation and Compliance

We may also use and disclose your personal data for compliance purposes, as required by any legal, regulatory, law enforcement, professional or taxation authority and to the extent that we are required to do so by law, regulation or court order.

 

  1. Who will you share my information with?

In order to provide you with the products and services that we offer and/or which you have ordered we may share your information with:

  • our service providers;
  • other members of our group of companies and their service providers (see also section 6 below);
  • credit/debit card companies; and
  • other third parties who we may need to work with to deliver services or goods or fulfil orders on your behalf, for example couriers, hauliers  and other suppliers.

We may also use, share and disclose your personal data without your permission:-

  • in connection with any legal proceedings or claims or prospective legal proceedings or claims,
  • to legal, judicial, regulatory, law enforcement, public health, professional standards and taxation authorities,
  • to prevent crime;
  • to take legal advice; and
  • to establish, exercise, protect, enforce or defend our legal rights

 

  1. How do you manage my information?

We will only ever transfer your information to service providers who help manage our systems, or overseas, where we are satisfied that this is lawful and that adequate levels of protection are in place to protect the integrity and security of any information being processed and in compliance with applicable privacy laws.

We do not currently expect that we will need to  transfer your personal data to service providers outside the United Kingdom.

 

  1. Updating Your Details?

If you would like to update any of your details that we hold please contact us and we will do so.

 

  1. How long will we hold your information for?

We have a system of retention periods in place to ensure that your information is only stored whilst it is required for the relevant purposes or to meet legal requirements. Where your information is no longer required, we will ensure it is disposed of or deleted in a secure manner.

 

  1. Your rights

You have the right to ask us at any time:-

  • to confirm whether we hold any of your personal data;
  • to send you a copy of any personal data that we hold about you;
  • to correct any inaccuracies in your personal data and to add relevant details where the personal data we hold is incomplete;
  • to delete (to the extent possible) any of your personal data, where we are required by law to do so;
  • to stop processing your personal data, where we are required by law to do so;
  • to let you have a portable copy of the personal data we hold about you, where we are required by law to do so;
  • to stop processing any of your personal data that we process on the basis of our legitimate interests; and
  • to stop sending you marketing material. However please note that we may continue to send you service related (i.e. non-marketing) communications, such as email updates

Where we have reached a decision that affects you by processing your personal data automatically then you have the right to speak to someone to discuss that decision.

We do not use your personal data for the purpose of profiling.

Where we process your personal data on the basis that you have given us your consent to do so then you may contact us at any time to withdraw your consent

If you wish to exercise any of these rights, or wish to object to our use of your personal information, please write to us at the address given below.

Data Protection Co-ordinator

Lee Mansfield, Cardboard Box Co, Petre Rd, Clayton Le Moors, Accrington, BB5 5JB. lmansfield@thecardboardbox.co.uk

 

  1. Does the notice apply to linked websites?

Our websites may contain links to other websites. This privacy notice only applies to this website so when you link to other websites you should read their own privacy policies.

 

  1. When do you monitor telephone calls?

We do not currently record telephone calls you may have with members of our staff.

 

  1. How do we update this privacy notice?

We keep our privacy notice under regular review and we will place any updates on our webpage.

 

  1. Who can I contact if I have queries about this privacy notice?

You can also contact us directly if you have any questions about our privacy notice or information we hold about you.

Please write to us at the address given below.

Data Protection Co-ordinator

Lee Mansfield, Cardboard Box Co, Petre Rd, Clayton Le Moors, Accrington, BB5 5JB. lmansfield@thecardboardbox.co.uk

 

If you are dissatisfied with our handling of any query or complaint you also have the right to raise concerns with The UK Information Commissioner:  https://ico.org.uk