UK GDPR

Nov, 21 2024

UK GDPR Compliance

The Packing Box is committed to respecting your data protection rights under the UK General Data Protection Regulation (UK GDPR). This page explains how we comply with the law, what rights you have, and how to exercise them.

Scope and Applicability

This UK GDPR compliance page applies to all visitors of thepackingbox.co.uk. While we do not require registration or maintain a user database, we may collect limited personal data through automated means such as web analytics, cookies, and server logs to improve site functionality and user experience.

Your Rights Under UK GDPR

Under the UK GDPR, you have the following rights:

  • Right of access – You can request confirmation of whether we process your personal data and receive a copy of it.
  • Right to rectification – You may request correction of inaccurate or incomplete personal data.
  • Right to erasure – You may request deletion of your personal data where there is no compelling reason for its continued processing.
  • Right to restriction of processing – You may request we limit how we use your data under certain conditions.
  • Right to data portability – You may request your data in a structured, commonly used format.
  • Right to object – You may object to processing based on legitimate interests, including profiling or direct marketing.

How We Comply

We do not store personal data in identifiable databases. Any data collected (e.g., IP addresses via analytics tools) is aggregated and anonymised. We use cookies only for essential site functionality and analytical purposes, with clear notice and consent mechanisms. We do not sell or share personal data with third parties for commercial purposes.

Data We Process

The only personal data we may process includes:

  • IP addresses (anonymised via server logs)
  • Cookie identifiers for session and analytics purposes
  • Information voluntarily submitted via contact forms (e.g., name and email)

This data is retained only as long as necessary for the purpose for which it was collected.

Legal Basis for Processing

We process personal data based on the following lawful grounds under UK GDPR:

  • Legitimate interests – To ensure website security, improve user experience, and analyse site traffic.
  • Consent – For non-essential cookies and marketing communications (if opted in).

How to Exercise Your Rights

To exercise any of your rights under UK GDPR, please contact us via email at [email protected]. Include your full name, the right you wish to exercise, and any relevant details (e.g., email address used on the site). We will respond without undue delay.

Response Timeframes

We aim to respond to all requests within one calendar month. In complex cases, we may extend this by two additional months and will notify you within one month of receipt.

No Discrimination Policy

You will not be denied service, charged different prices, or receive a lower quality of service for exercising your rights under UK GDPR.

Updates and Changes

We will update this page if our data practices change. The most recent version will always be posted here with an updated effective date.

Contact Information

For any questions, requests, or complaints regarding your data rights under UK GDPR, please contact:

Quentin Hadley
1 Victoria Street, Wellington Central, Wellington 6011, New Zealand
Email: [email protected]

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.