Privacy policy

Last updated: 10 October 2026

Who we are

We are the data controller for personal information collected through this website. Our details are at the top of this page.

What we collect

Order details: your name, email, billing and delivery address, and the box you chose. You give us these at checkout.
Emails you send us, and our replies.
Technical data: like your IP address, which is processed automatically when your browser loads our website.

Payments are handled by Stripe. We never see or store your full card details.

Why we use it

To take your order, deliver your box and manage your subscription (contract).
To keep accounting and tax records (legal obligation).
To answer your questions and keep the website secure (legitimate interests).

We do not sell your data and we do not use it for advertising.

Who we share it with

Stripe, for payments and subscription billing.
Delivery couriers, who need your name and address.
Cloudflare, which hosts this website.
Google Fonts, which supplies the fonts on our home page. Your browser contacts Google when the page loads, so Google receives your IP address.

Some of these providers may process data outside the UK, using safeguards such as the UK addendum to standard contractual clauses.

Cookies

This website does not use advertising or analytics cookies. Stripe may set cookies on its own checkout pages.

How long we keep it

We keep order and accounting records for 6 years, as tax rules require. Other information is kept only as long as we need it, for example while your subscription is active or while we deal with a query.

Your rights

You can ask to see, correct, delete, restrict or move your personal information, and you can object to how we use it. Email goodboybox@gmail.com and we will reply within one month. If you are unhappy, you can complain to the Information Commissioner's Office at ico.org.uk.