Privacy Policy

Last updated: 20 October 2025

This Privacy Policy explains how we collect, use and protect your personal data when you use datebox.co.uk (“Site”).

1) Who we are (data controller)

Gifting Sorted Limited (company no. 13716464)
Unit 9, Waters Meeting, Britannia Way, Bolton, BL2 2HH
Email: hello@datebox.co.uk

2) The data we collect

  • Identity & contact: name, email, phone, billing and delivery addresses.

  • Order & payment: products purchased, order notes, payment status/ID (we don’t store full card details).

  • Account details (if you create one): username, hashed password.

  • Marketing preferences: your choices for email/SMS.

  • Usage & technical: IP address, device, browser, pages viewed, referral source, approximate location.

  • Support communications: messages and enquiry details.

  • Checkout activity: we may keep your email if you start checkout and don’t finish (abandoned checkout) so we can remind you.

3) How we use your data (purposes & lawful bases)

  • Provide our services (process orders, deliver, support): performance of a contract.

  • Payments & fraud prevention: performance of a contract / legitimate interests.

  • Customer communications (order updates, service emails): performance of a contract / legal obligation.

  • Marketing: consent (where required) or legitimate interests for existing customers; you can opt out at any time.

  • Analytics & improvement: consent (for non-essential cookies) and legitimate interests.

  • Legal & tax compliance: legal obligation.

  • Security: legitimate interests.

We do not sell your personal data.

4) Cookies

We use essential cookies and (with your consent) optional analytics/marketing cookies. See our Cookie Policy.

5) Sharing your data

We share data with trusted providers who help run the Site and fulfil orders (e.g., hosting, payment processors, email providers, analytics/advertising if enabled, delivery couriers, IT/support). They act on our instructions and must keep data secure. We may also share data where required by law.

6) International transfers

Some providers may process data outside the UK/EEA. Where they do, we use safeguards such as UK adequacy regulations or standard contractual clauses.

7) How long we keep your data

  • Orders/invoices: typically 6 years for tax/accounting.

  • Accounts: while active, then a reasonable period for records.

  • Marketing: until you unsubscribe or your account is inactive for a prolonged period.

  • Support messages: as needed to manage your request and for audit.

  • Analytics/logs: typically up to 12 months (varies by provider).
    We delete or anonymise data when no longer needed.

8) Your rights (UK GDPR)

You can access, rectify, erase, restrict, object (including to direct marketing), port your data, and withdraw consent where applicable.
To exercise your rights, email hello@datebox.co.uk

9) Marketing choices

You can unsubscribe at any time using the link in our emails or by contacting us. Service emails about your orders will still be sent.

10) Security

We use appropriate technical and organisational measures to protect your data. No system is 100% secure, but we work to prevent unauthorised access and misuse.

11) Children

Our Site is not intended for children under 13. We do not knowingly collect data from children.

12) Complaints

You can contact us using the details above. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk / 0303 123 1113.

13) Changes to this policy

We may update this policy from time to time. We’ll post the new version here with an updated “Last updated” date.