Privacy policy.

Box & Party Co. (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share your information when you visit our website, make a purchase, or interact with us in other ways.

Box & Party Co. is a UK-based business supplying themed party boxes. We are the data controller of the personal data you provide to us.
Contact email: boxandparty@yahoo.com

We may collect and process the following types of personal information:

  • Identity Data (name, title)

  • Contact Data (email address, billing/delivery address, phone number)

  • Transaction Data (payment details, order history)

  • Technical Data (IP address, browser type, pages visited, cookies)

  • Marketing & Communications Data (your preferences in receiving marketing from us)

We only collect what we need to deliver our services.

We use your data to:

  • Process and deliver your orders

  • Communicate with you about orders, queries or complaints

  • Send marketing communications you have consented to.

  • Improve our website, products and services

  • Comply with legal obligations and prevent fraud

Legal bases under UK GDPR: performance of a contract, consent, legal obligation, legitimate interests.

We never sell your personal information. We only share it with trusted third-party service providers who help us operate our business, such as:

  • Payment processors (e.g., Stripe, PayPal)

  • Couriers and delivery partners

  • Email and marketing platforms

These providers are only allowed to use your data for agreed purposes and must keep it secure.

Where our third-party providers are outside the UK or EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

Our website uses cookies and similar technologies to improve functionality and analyse traffic. You can set your browser to refuse cookies, but some parts of the site may not work properly. See our Cookie Policy for more details.

We only keep your personal data for as long as necessary to fulfil the purposes we collected it for, including legal, accounting or reporting requirements.