ROUTING SLIP / PRIVACY

Privacy policy.

Effective [DATE TO FILL] · Plybox Ltd

This policy explains what personal data Plybox collects, why we use it, who we share it with, and the rights you have. We keep it short and plain. If anything is unclear, email hello@plybox.co.

Who we are

Plybox Ltd is the data controller for the personal data described here.

What we collect

• Your work email, when you sign in to a shop or get in touch with us.
• Your name and delivery address, when you place an order, so the item can be made and posted to you.
• Order details: the products, sizes and quantities you buy, and the order reference.

Your card details are handled entirely by Stripe, our payment provider. Plybox never sees or stores your full card number.

Why we use it and our legal basis

• To run your shop and sign you in by magic link — our legitimate interest in giving your company a secure, private shop.
• To take payment and fulfil your order — to perform our contract with you.
• To send service emails (your sign-in link and order confirmations) — to perform our contract and our legitimate interest in keeping you informed.
• To respond to enquiries, including when someone from a company we do not yet work with emails us — our legitimate interest in answering and following up.

Who we share it with

We do not sell your data, and we never share one company's shop, orders or designs with another. We use a small set of trusted providers who process data only on our instructions:

• Stripe — takes payment securely.
• Printify — produces and posts your order (receives your name and delivery address).
• Resend — sends our emails.
• Cloudflare — hosts the site and stores order records.

Some of these providers are based outside the UK. Where data is transferred abroad, it is protected by appropriate safeguards (such as the UK International Data Transfer Agreement or equivalent terms in our providers' contracts).

How long we keep it

• Order records: kept for six years, to meet UK tax and accounting rules.
• Sign-in and enquiry emails: kept only while we need them for the purpose above, then deleted. You can ask us to delete yours sooner.

Cookies

We use a single, strictly necessary cookie that keeps you signed in to your shop. It is essential for the site to work, so no consent banner is required for it. We do not use analytics, advertising or tracking cookies, and we do not track you across other websites.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Where we rely on your consent, you can withdraw it at any time. Email hello@plybox.co and we will respond within one month.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

Changes to this policy

If we change this policy we will update the date at the top. Please check back from time to time.