Privacy Policy

1. Who We Are (Data Controller)

For the purposes of applicable data protection legislation, the Data Controller is:

  • Company Name: The Depot Box Ltd (trading as Parcel Keep)
  • Address: 80 Bond Street, Yeovil, Somerset, BA22 8SP, United Kingdom
  • Contact Email: info@thedepotbox.co.uk

2. Information We Collect

We may collect and process the following personal information when you interact with our website:

  • Identity & Contact Data: Name, billing address, shipping address, email address, and phone number.
  • Order & Transaction Data: Details about products you have purchased and payments made (payment details are processed securely by third-party payment gateways; we do not store full credit/debit card numbers on our servers).
  • Technical Data: IP address, browser type and version, time zone setting, operating system, and pages visited (collected automatically via cookies and analytics).
  • Communication Data: Information you provide when contacting us via customer support forms or email.

3. How We Use Your Information

We use your personal data for the following purposes:

  • Order Processing: To process payment, dispatch goods, and send order updates (Legal basis: Contractual necessity).
  • Customer Support: To respond to inquiries, handle returns, or honor warranty claims (Legal basis: Contractual necessity / Legitimate interests).
  • Legal Compliance: To maintain financial records for tax purposes and comply with legal requirements (Legal basis: Legal obligation).
  • Website Improvement: To analyze user behavior and optimize site performance (Legal basis: Legitimate interests).

4. Sharing Your Personal Data

We do not sell, rent, or trade your personal information. We only share data with trusted third parties necessary to run our business, such as:

  • Delivery Couriers: Courier services (e.g., DPD, Royal Mail, Evri) to dispatch and deliver your parcel box.
  • Payment Processors: Secure third-party gateways used during checkout to process payments.
  • IT & Hosting Providers: Website hosting and technical infrastructure services.

All third-party service providers are required to handle your personal data in accordance with UK data protection laws.

5. Data Security & Storage

  • We implement security measures to protect your personal information against unauthorized access, alteration, or disclosure.
  • We retain order and financial records for as long as necessary to comply with UK statutory tax laws (typically up to 6 years) and to support your 10-year structural warranty.

6. Your Legal Rights (UK GDPR)

Under UK data protection law, you have rights regarding your personal data, including the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data where there is no good reason for us to continue processing it.
  • Object / Restrict: Object to or restrict processing of your data under certain conditions.

To exercise any of these rights, please contact us through our website. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk if you believe your data has been handled improperly.

7. Cookies

Our website uses standard cookies to enhance user experience, manage shopping basket functionality, and collect basic analytical data. You can set your browser to refuse or disable cookies, though some features of the site may not function properly.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or statutory requirements. Any updates will be posted directly to this page.