Last updated: 29 October 2026
This policy explains what personal data Giftstorebox collects when you visit giftstorebox.com or buy from us, why we use it and what your rights are. Giftstorebox is the data controller. You can contact us at support@giftstorebox.com or by post at 180 Felixstowe Road, London SE2 9RL, United Kingdom.
What we collect
- Order details: your name, delivery and billing address, email address, phone number if you give one, what you ordered and how much you paid.
- Payment details: PayPal handles card and PayPal payments. We never see or store your full card number.
- Account details: if you create an account, your login email and order history.
- Messages: anything you send us by email.
- Basket reminders: if you type your email at checkout and leave without ordering, we may send up to three reminder emails about your basket. Every reminder has an unsubscribe link.
- Website data: your IP address and browser details. We use your IP address to work out your country so we can show prices in your currency and the right delivery times.
Why we use it
- To process and deliver your order, and to handle returns and refunds (to perform our contract with you).
- To reply to your messages and send order and tracking emails (to perform our contract with you).
- To send basket reminders and to understand how the shop is used (our legitimate interest in running the shop; you can opt out at any time).
- To keep records for tax and accounting (legal obligation).
Who we share it with
We only share what each company needs to do its job:
- Our suppliers, including sellers on AliExpress, who pack and post your order. They receive your name, delivery address and phone number. Many suppliers are based outside the UK, mainly in China.
- PayPal, which processes your payment.
- Delivery companies, which carry your parcel and provide tracking.
- Hostinger, which hosts this website and its database.
- Google, for website analytics, only if you accept analytics cookies.
When your data goes to a supplier outside the UK, we send only what is needed to deliver your order. We do not sell your personal data.
Cookies and browser storage
- Essential: WooCommerce cookies that keep your basket and login working. The shop can’t work without these.
- Analytics (optional): Google Analytics cookies that tell us which pages and gifts people look at. If you are in the UK or EU, these only run if you click Accept on the cookie banner.
- Saved in your browser only: your wishlist, recently viewed items, chosen currency and cookie choice. This stays on your device and is not sent to us.
How long we keep it
We keep order records for 6 years because UK tax law requires it. Basket reminder data stays until you finish your order, unsubscribe or ask us to delete it. Account details stay until you ask us to close your account.
Your rights
You can ask to see the data we hold about you, correct it, delete it, limit how we use it, or object to us using it. You can also ask for a copy to take elsewhere. Email support@giftstorebox.com and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would like the chance to sort it out first, so please contact us.
Changes to this policy
If we change this policy, we will update the date at the top of this page.