BOXKIND

Privacy Policy

Last updated: 30 July 2026

This Privacy Policy describes how and when BOXKIND collects, uses, and shares information when you purchase an item, contact the shop, or otherwise use its services through Etsy.com, Facebook.com, or related sites and services.

This Privacy Policy does not apply to the practices of third parties BOXKIND does not own or control. Please refer to their own privacy policies for more information.

Information Collected

To fulfil your order, you must provide certain information (which you authorise Etsy/PayPal to share with BOXKIND), such as your name, email address, postal address, payment information, and order details. You may choose to provide additional personal information — for example, when requesting a custom or personalised box — if you contact the shop directly. For orders discussed via Facebook, you'll provide your email through messages so an invoice can be sent directly via PayPal.

Why Your Information Is Needed and How It's Used

BOXKIND relies on the following legal bases to collect, use, and share your information:

As needed to provide services — fulfilling your order, resolving disputes, or providing customer support
Where you've given affirmative consent, which you may revoke at any time
Where necessary to comply with a legal obligation or court order, or in connection with a legal claim (e.g. retaining purchase records for tax law)
Where necessary for legitimate interests not overridden by your rights — including improving services, and complying with the Etsy Seller Policy and Terms of Use
Information Sharing and Disclosure

Your information is shared only in limited circumstances:

Etsy — as necessary to provide services and comply with the Etsy Seller Policy and Terms of Use
PayPal — as necessary to provide services and comply with PayPal's Terms of Use
Service providers — trusted third parties such as delivery companies, only to the extent necessary to perform their service
Legal compliance — where there is a good-faith belief it's reasonably necessary to respond to legal process, enforce agreements, prevent fraud or illegal activity, or protect the rights, property, and safety of customers or others
Data Retention

Personal information is retained only as long as necessary to provide services, or as required to meet legal and regulatory obligations, resolve disputes, and enforce agreements. Data is generally kept for 4 years.

Your Rights

If you reside in certain territories, including the EU/UK, you have rights relating to your personal information:

Access — request a copy of the personal information held about you
Change, restrict, delete — request corrections, restrictions on use, or deletion (barring legal retention requirements)
Object — object to processing based on legitimate interests, or to receiving marketing messages after consenting to them
Complain — if you reside in the EU/UK, you may raise concerns with your local data protection authority
How to Contact

For purposes of UK/EU data protection law, Trishell Gill is the data controller of your personal information for BOXKIND. Questions or concerns can be sent to: trishellgill1@mail.com