Privacy policy

At EcentualBox, we are committed to protecting your privacy and safeguarding your personal information. We operate as a legitimate UK-based business and comply with applicable UK data protection laws.

This Privacy & Cookie Policy explains how we collect, use, store, and protect your data when you visit our website or make a purchase from us.

By using our website, you agree to the practices described in this policy.

1. Information We Collect

We collect personal information necessary to process orders and provide our services. This may include:

  • Full name

  • Billing and shipping address

  • Email address

  • Phone number

  • Payment details (processed securely via Shopify Payments or authorised third-party gateways)

  • IP address and device information for security and fraud prevention

We collect only the information required to operate our business, fulfil customer orders, and comply with legal obligations.

Providing essential information is required to complete your purchase. You may choose not to provide non-essential information; however, some website features may not function correctly without it.

2. How We Use Your Information

Your personal data is used strictly for legitimate business purposes, including:

  • Processing and delivering customer orders

  • Providing order confirmations and shipping updates

  • Managing returns, exchanges, and refunds

  • Providing customer support

  • Fraud detection and transaction security

  • Complying with legal and tax obligations

  • Sending marketing communications only where you have provided explicit consent

We do not sell customer data and we do not send marketing communications without your explicit consent.

3. Legal Basis for Processing (UK GDPR)

We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) under the following lawful bases:

  • Contractual necessity – to fulfil your order and provide services.

  • Legal obligation – to comply with tax, accounting, and regulatory requirements.

  • Legitimate interests – for fraud prevention, security monitoring, and business administration.

  • Consent – for marketing communications and optional cookies.

4. Data Storage & Security

Your data is securely stored on Shopify’s protected infrastructure. Our website is hosted by Shopify, which uses industry-standard security measures including encryption, firewalls, and strict access controls to protect personal information.

Payment information is processed by certified, PCI-compliant providers and is not stored directly on our servers.

We retain personal data only for as long as necessary to:

  • Fulfil orders

  • Meet legal, accounting, and tax obligations

  • Resolve disputes

  • Enforce our agreements

5. Sharing of Personal Data

We do not sell, trade, or rent your personal information to third parties.

Your data may be shared only with trusted service providers where necessary to operate our business, including:

  • Shopify (our website hosting and transaction platform)

  • Secure payment processors

  • Delivery and logistics partners

  • Professional advisers where legally required

  • Authorities where required by law

Each third party receives only the information necessary to perform their services and is required to maintain appropriate data protection standards.

6. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access

  • Right to rectification

  • Right to erasure

  • Right to restrict processing

  • Right to data portability

  • Right to object

  • Right to withdraw consent (where applicable)

To exercise any of these rights, please contact us at:

Email: help@ecentualbox.com

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

7. Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • Maintain your shopping cart

  • Remember user preferences

  • Improve website performance

  • Analyse website traffic

  • Support security and fraud prevention

Cookies do not store sensitive payment information.

By using our website, you consent to our use of cookies unless you disable them via your browser settings. A cookie consent banner is provided in accordance with GDPR requirements.

For further information on cookies, please visit: www.aboutcookies.org.

8. International Data Transfers

Our store is powered by Shopify. Your information may be processed or stored on secure servers located outside the United Kingdom.

Shopify implements appropriate safeguards, including contractual protections and security standards, to ensure personal data is protected in accordance with applicable data protection laws.

Shopify’s Privacy Policy:
https://www.shopify.com/legal/privacy

9. Payment Security

All transactions are processed through secure, encrypted, and PCI-compliant payment gateways.

We do not store full card details on our servers.

For further details on payment protection, please refer to our Secure Checkout page.

10. Contact Information

If you have any questions regarding this Privacy & Cookie Policy or your personal data, please contact:

EcentualBox
7a Avon Road Charfield Wotton-under-Edge GL12 8TT, United Kingdom

Phone: +44 7476 549709
Email: help@ecentualbox.com

11. Policy Updates

We may update this Privacy & Cookie Policy from time to time to reflect regulatory changes or business practices. Any updates will be published on this page and will take effect immediately upon posting.