Privacy Policy

Data Controller

Happily Ever After Book Box is the data controller responsible for your personal data. If you have any questions about this privacy policy or how we handle your data, please contact us at hello@happilyeverafterbookbox.co.uk.

What Data We Collect

We may collect and process the following personal data about you:

Identity data: your name, username, or similar identifier.
Contact data: your email address, postal address, and phone number.
Financial data: payment card details (processed securely by our payment providers).
Transaction data: details of purchases you have made from us.
Technical data: IP address, browser type, and information about how you use our website.
Marketing data: your preferences in receiving marketing from us.

How We Use Your Data

We use your personal data for the following purposes:

To process and deliver your orders.
To manage your subscription and account.
To communicate with you about your orders and subscription.
To send you marketing communications if you have opted in.
To improve our website, products, and services.
To comply with legal obligations.

We rely on the legal bases of contract, consent, and legitimate interests to process your data as appropriate.

Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files placed on your device that help us understand how you use our site. You can set your browser to refuse cookies, but some parts of our website may not function properly as a result.

Data Sharing

We do not sell your personal data. We may share your data with trusted third-party service providers who help us operate our business, such as payment processors, delivery partners, and email marketing platforms. All third parties are bound by contractual obligations to keep your data secure and use it only for the specified purposes.

Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights:

The right to access your personal data.
The right to rectification of inaccurate data.
The right to erasure (the “right to be forgotten”).
The right to restrict processing.
The right to data portability.
The right to object to processing.
The right to withdraw consent at any time.

To exercise any of these rights, please contact us using the details below.

Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it from unauthorised access, loss, or misuse.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at: hello@happilyeverafterbookbox.co.uk