Privacy Policy

Interpretation & Definitions

Interpretation

Words with initial capital letters have meanings defined under the following conditions. The following definitions shall have the same meaning whether they appear in singular or plural.

Definitions

• Account means a unique account created for you to access our Service.
• Affiliate means an entity that controls, is controlled by or is under common control with a party.
• Application refers to CraveBoxx, the software provided by the Company.
• Company (“we”, “us”, “our”) refers to CraveBoxx.
• Country refers to the United Kingdom.
• Device means any device that can access the Service, such as a phone, tablet or computer.
• Personal Data is any information relating to an identified or identifiable individual.
• Service refers to the Application and related websites.
• Service Provider means any natural or legal person who processes data on behalf of the Company.
• Usage Data refers to data collected automatically, e.g. IP address, browser type, pages visited, timestamps and diagnostics.
• You means the individual using the Service, or the company or other legal entity on whose behalf an individual uses the Service.

Who We Are (Data Controller)

For the purposes of the UK GDPR, the data controller is CraveBoxx, operating in the United Kingdom.

Contact email: craveboxx21@gmail.com

Collecting & Using Your Personal Data

Types of Data Collected

Personal Data

We may collect the following information to provide and improve the Service:

• Email address
• First and last name
• Phone number
• Address, City, County, Postcode
• Order details and preferences

Usage Data

Collected automatically when using the Service and may include your IP address, browser type and version, pages visited, time and date of visit, time spent, unique device identifiers, mobile OS and diagnostics. We may also collect similar information when you access the Service via a mobile device.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

• Provide and maintain the Service, including to monitor usage.
• Manage your Account and provide registered-user features.
• Perform a contract, including purchases and customer support.
• Contact you by email, phone, SMS or push notifications regarding updates or information related to the Service.
• Provide news and offers similar to those you have purchased or enquired about, unless you opt out.
• Manage your requests (enquiries, complaints, rights requests).
• Business transfers (e.g. merger or acquisition evaluations).
• Other purposes such as analytics, trend identification and improving our products and marketing.

Legal Basis (UK GDPR)

We process Personal Data under one or more of the following legal basis:

• Consent – where you have given clear consent (e.g. marketing).
• Contract – processing necessary to perform our contract with you (e.g. orders, account).
• Legal obligation – to comply with UK law (e.g. accounting, tax).
• Legitimate interests – to operate, secure and improve the Service, provided your rights are not overridden.

Sharing Your Personal Data

• Service Providers – to operate the Service, analytics, communications and support.
• Business transfers – in connection with a merger, sale or reorganisation.
• Affiliates and partners – subject to this Privacy Policy.
• Other users – when you share information in public areas.
• With your consent – as separately agreed.
• Law enforcement and legal requests – where required by law.

Retention

We retain Personal Data only as long as necessary for the purposes set out in this Policy, to comply with legal obligations, resolve disputes and enforce our agreements. Usage Data is generally kept for a shorter period unless required for security or functionality improvements.

International Transfers

Your data may be processed outside the UK. Where applicable, we use appropriate safeguards (e.g. standard contractual clauses) to protect your Personal Data.

Security

We use commercially acceptable measures to protect Personal Data. However, no method of transmission over the internet or electronic storage is 100% secure.

Your Rights (UK GDPR)

You have the right to:

• Access your Personal Data and obtain a copy
• Request correction of inaccurate or incomplete data
• Request deletion of your data in certain circumstances
• Object to processing based on legitimate interests or direct marketing
• Request restriction of processing in certain cases
• Request data portability
• Withdraw consent at any time (where processing is based on consent)
• Not be subject to decisions based solely on automated processing, including profiling, that have legal or similar significant effects

To exercise these rights, contact us at craveboxx21@gmail.com. We may need to verify your identity before responding.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Delete Your Personal Data

You can request deletion of Personal Data we hold about you. Where available, you can delete certain information in the Application (e.g. account settings). We may retain some data where permitted or required by law.

Children’s Privacy

Our Service is not directed to children under 13. We do not knowingly collect Personal Data from anyone under 13. If you believe a child has provided Personal Data, please contact us so we can delete it.

Links to Other Websites

Our Service may contain links to third-party websites. We do not control and are not responsible for their content or privacy practices. Please review their policies.

Changes to this Policy

We may update this Policy from time to time. We will post the new Policy on this page and update the “Last updated” date. We may notify you by email or an in-app notice where appropriate.

Contact Us

If you have questions about this Privacy Policy, contact us at craveboxx21@gmail.com.

Note: Parts of this Policy were adapted from a standard template; please tailor to your actual data flows and providers.