Last updated: 13 October 2026
This Privacy Policy explains how Custom Boxes Aazz (“we”, “us” or “our”), operating the website customboxesaazz.co.uk, collects, uses, stores and protects your personal data when you visit our website, request a quote, place an order or contact us. We are committed to handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Custom Boxes Aazz is the data controller responsible for your personal data.
- Address: 7 Elthorne Rd, London NW9 8BH, United Kingdom
- Email: sales@customboxesaazz.co.uk
- Phone: +44 7988 595628
If you have any questions about this policy or how we handle your data, please contact us using the details above.
2. The personal data we collect
We only collect the information we need to respond to you and provide our packaging and printing services. This may include:
- Contact details – your name, email address, phone number and company name.
- Quote and order details – box type, sizes, quantities, printing options, messages you send us and any artwork, logos or files you upload.
- Delivery and billing details – delivery address, billing address and order history.
- Payment information – payments are processed securely by our payment providers (such as Stripe and PayPal). We do not see or store your full card details.
- Technical data – IP address, browser type, device information, pages visited and how you use our website, collected through cookies and similar technologies.
- Communications – emails, phone calls and chat messages (for example via WhatsApp) you exchange with us.
3. How we collect your data
- When you fill in our quote request or contact forms.
- When you place an order, create an account or make a payment.
- When you email, call or message us.
- Automatically when you browse our website, through cookies and analytics tools.
4. How and why we use your data
We use your personal data for the following purposes and on the following lawful bases under UK GDPR:
| Purpose | Lawful basis |
|---|---|
| Responding to quote requests and enquiries | Steps taken at your request before entering into a contract / legitimate interests |
| Designing, producing and delivering your order | Performance of a contract |
| Processing payments and preventing fraud | Performance of a contract / legal obligation |
| Keeping accounting and tax records | Legal obligation |
| Customer service and order updates | Performance of a contract / legitimate interests |
| Improving our website and services (analytics) | Consent (where required) / legitimate interests |
| Sending marketing messages and offers | Consent – you can opt out at any time |
| Protecting our website from spam and abuse | Legitimate interests |
5. Cookies and analytics
Our website uses cookies – small text files stored on your device – to make the site work properly, remember your preferences, keep your basket and checkout secure, and understand how visitors use our website.
- Essential cookies – needed for the website, shopping basket, checkout and forms to work.
- Analytics cookies – we use Google Analytics to understand how visitors use our website so we can improve it. This information is collected in an aggregated form.
- Security cookies – our forms use Google reCAPTCHA to protect against spam. Google’s Privacy Policy and Terms of Service apply.
You can control or delete cookies at any time through your browser settings. Blocking some cookies may affect how the website works.
6. Who we share your data with
We never sell your personal data. We only share it with trusted third parties where necessary to run our business, including:
- Payment providers (such as Stripe and PayPal) to process your payments securely.
- Printing, manufacturing and delivery partners to produce and deliver your order.
- Website hosting, security and email providers that help us operate our website and communicate with you.
- Analytics and anti-spam providers such as Google (Google Analytics and reCAPTCHA).
- Messaging services such as WhatsApp, if you choose to contact us that way.
- Professional advisers and authorities where required by law, such as accountants, HMRC or law enforcement.
All third parties are required to protect your data and use it only for the purposes we specify.
7. International transfers
Some of our service providers may process data outside the United Kingdom. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
8. How long we keep your data
- Quote requests and enquiries that do not lead to an order – up to 2 years, so we can follow up on your request.
- Order, invoice and accounting records – 6 years, as required by UK tax law.
- Artwork and design files – kept for as long as needed to fulfil and repeat your orders, unless you ask us to delete them.
- Marketing preferences – until you unsubscribe or withdraw your consent.
9. How we keep your data secure
We use appropriate technical and organisational measures to protect your personal data, including secure (HTTPS) connections, restricted access to customer information and trusted, secure payment providers. While no online service can be 100% secure, we work hard to protect your information.
10. Your rights
Under UK data protection law you have the right to:
- Access – request a copy of the personal data we hold about you.
- Rectification – ask us to correct inaccurate or incomplete data.
- Erasure – ask us to delete your data where there is no good reason for us to keep it.
- Restriction – ask us to limit how we use your data.
- Objection – object to processing based on legitimate interests or for direct marketing.
- Data portability – ask us to transfer your data to you or another organisation.
- Withdraw consent – where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, email us at sales@customboxesaazz.co.uk. We will respond within one month. There is normally no charge.
11. Marketing
We will only send you marketing emails or messages if you have agreed to receive them, or if you are an existing customer and have not opted out. Every marketing message includes a simple way to unsubscribe.
12. Children’s privacy
Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 16.
13. Third-party websites
Our website may contain links to other websites. We are not responsible for the privacy practices of those websites, so we encourage you to read their privacy policies.
14. Complaints
If you are unhappy with how we have handled your personal data, please contact us first so we can try to put things right. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.
15. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the “Last updated” date shown at the top.