This Privacy Policy describes how Goblin Box (referred to as “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit or make a purchase from GoblinBox.shop (the “Site”).
We are committed to protecting your privacy. Operating in the United Kingdom, we process your personal data in strict compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Personal Information We Collect
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases.
Device Information
- Examples of Personal Data collected: Version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
- Purpose of collection: To load the Site accurately for you, and to perform analytics on Site usage to optimize our store.
- Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
Order Information
- Examples of Personal Data collected: Name, billing address, shipping address, payment information (including credit card numbers, PayPal, or other accepted payment methods), email address, and phone number.
- Purpose of collection: To provide products to you to fulfill our contract, to process your payment information, arrange for shipping (1–2 business days processing, 3–5 business days delivery), provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and provide you with information or advertising relating to our products.
- Source of collection: Collected from you directly when you make or attempt to make a purchase.
2. How We Use Your Personal Information
We use your personal data to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.
Legal Bases for Processing (for UK/EU Users)
Under the UK GDPR, we process your information based on the following lawful bases:
- Your consent: Where you have given clear consent (e.g., signing up for a newsletter).
- Performance of a contract: When processing your data is necessary to fulfill an order (e.g., passing your address to our shipping carriers).
- Compliance with a legal obligation: To comply with tax, accounting, or consumer laws.
- Our legitimate interests: To protect our business against fraud or to improve our services, provided these interests do not override your fundamental rights.
3. Sharing Your Personal Information
We share your Personal Data with third-party service providers to help us use your Personal Data, as described above. For example:
- E-commerce Platform: We use Shopify (or our designated platform) to power our online store.
- Payment Processors: Your payment data is handled securely by certified payment gateways (like Stripe or PayPal). We do not store your credit card details on our servers.
- Shipping Carriers: We share your name, shipping address, and email/phone number with UK delivery services to ensure your hobby boxes arrive safely within our 3–5 business days shipping window.
- Legal Compliance: We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive, or to otherwise protect our rights.
4. Security of Your Data
We take the security of your personal data seriously. All sensitive data (such as payment information and personal details) is encrypted using Secure Socket Layer (SSL) technology during transmission. While no method of transmission over the Internet is 100% secure, we implement industry-standard practices to prevent unauthorized access, disclosure, or alteration of your data.
5. Your Rights Under UK GDPR
If you are a resident of the United Kingdom, you have the following rights regarding your personal information:
- The right to be informed about how your data is being used.
- The right of access to the personal data we hold about you.
- The right to rectification if your personal data is inaccurate or incomplete.
- The right to erasure (also known as the “right to be forgotten”) under certain conditions.
- The right to restrict processing of your personal data.
- The right to data portability to move your data to another service.
- The right to object to the processing of your data (e.g., opting out of direct marketing).
If you would like to exercise any of these rights, please contact us using the contact information below.
6. Cookies
A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection).
You can control and manage cookies through your browser settings. Please note that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
7. Changes to This Policy
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons.
8. Contact Us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email or by mail using the details provided below:
- Store Name: Goblin Box
- Customer Support Email: contactsupport@GoblinBox.shop
- Business Address: Unit 4, Indoor Market, Green St, Neath, SA11 1DP, United Kingdom