Privacy and Cookies Policy
Organisational and Contact Information
This privacy policy explains how Pedro C., trading under the name Rush Rush Boxes London, collects and processes your personal data. The official address for our business operations is 60 Gossamer Gardens, London, E2 9FN. If you have any questions regarding this policy or how your data is handled, you can contact our Data Protection Officer directly at pedro@rushrushboxeslondon.co.uk or via postal mail. We are committed to protecting your privacy and ensuring your personal information is handled securely and transparently at all times in full compliance with the UK General Data Protection Regulation and the Data Protection Act 2018.
Details of Data Collection and Processing Purposes
When you interact with our website or place an order, we collect specific types of personal data. This information includes your name, email address, phone number, billing details, and the physical delivery address required to fulfil our rapid logistics services in London. We also may collect digital identifiers such as your IP address, web browser type, time zone, and browsing behaviour when you navigate our site. The primary purpose of gathering this information is to process your orders efficiently, screen for potential fraud, and manage your customer account.
Establishing a Lawful Basis
Under the UK General Data Protection Regulation, we must have a valid legal justification for every processing activity we undertake. We rely on the performance of a contract as the primary lawful basis for processing your payment and delivery details to ensure your orders are completed successfully. We rely on legal obligation for retaining financial and transactional records as required by applicable tax law. When you opt in to receive promotional communications or accept non-essential tracking cookies, we rely entirely on your explicit consent. Furthermore, we process certain website usage information based on our legitimate interests in improving our logistics operations and business automation systems, provided these interests never override your fundamental privacy rights. We do not use your personal data for solely automated decision-making or profiling that produces legal or similarly significant effects on you.
Data Sharing and International Transfers
To operate our business effectively, we must share your data with trusted third-party service providers. These partners include our secure payment processors, such as Revolut, Lopay, Wise, and SumUp, which facilitate transactions. We also share necessary data with email and automation platforms, such as WhatsApp by Meta Inc, Google Gmail, Hostinger, and Squarespace, to manage our internal workflows, as well as advertising platforms like Google Ads, Bing for Business, ChatGPT Ads and analytics providers like Google Analytics to optimise our campaigns. If any of these service providers transfer your data outside of the United Kingdom, we ensure that appropriate legal safeguards, such as UK-approved Standard Contractual Clauses, are firmly in place to maintain the strict standards required by UK data protection laws. We may also disclose your personal data where required to comply with applicable laws or in response to a lawful request from a public authority.
Retention Periods and Contractual Obligations
We only retain your personal data for the duration necessary to fulfil the specific purposes for which it was originally collected. We are legally required to retain basic order and financial records for a period of seven years for tax and accounting purposes. Marketing data and contact preferences are retained only until you choose to opt out or withdraw your consent. Device and analytics data are retained for a reasonable period necessary to optimise the website. Providing your exact delivery and payment information is a strict contractual obligation when placing an order, and failing to provide this data means we will be unable to process and dispatch your goods. Once the relevant retention period has passed, your personal data will be securely deleted or anonymised.
Individual Rights and Regulatory Complaints
You possess several fundamental rights regarding your personal information under UK data protection laws. You have the right to request access to the exact data we hold about you, as well as the right to have any inaccurate or incomplete information rectified immediately. You can also request the complete erasure of your personal data, restrict its ongoing processing, object to direct marketing, and request data portability to move your information to another service. If you have provided consent for specific processing activities, you retain the right to withdraw this consent at any time without facing any penalty. We will respond to all verified requests within one calendar month. If you believe your data has been mishandled, you have the right to lodge a formal complaint directly with the Information Commissioner’s Office, though we would appreciate the opportunity to address your concerns directly with us first.
Cookies and Tracking Technologies
We may use cookies, web beacons, and similar technologies to store information, provide a faster experience, and analyse site performance. Cookies are small data files placed on your device that allow us to recognise your browser. We may use session cookies that expire when you close your browser and persistent cookies that remember your preferences across multiple visits. Performance cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. All information these performance cookies collect is aggregated and anonymous. You can manage or disable these technologies at any time using our on-site cookie settings or your browser controls, and non-essential cookies will only ever be placed with your explicit consent.