What personal data do we process and store, and why?
When you register as a HubBox customer using the HubBox App (accessed via our website, or one of our mobile apps), we process and store your name and your contact information, including your email address and telephone number. We have to process and store this information in order to provide our Service to you.
We also process and store your geographic information, including your postcode and your IP address. If you do searches on our website or in the HubBox App for your nearest Collect Point, we process the time of the search and the type of browser you are using. This information is instantly anonymised before it is stored (i.e. all IP addresses and identifying factors are removed before storage). It is used only for our internal business intelligence and to help us improve our Service (e.g. by setting up more Collect Points in popular areas).
If you have selected HubBox Click & Collect on one of our retailer partner’s websites, the position is the same as the above. We also process and store the following details about your order if such details have been given to us by the retailer in order to assist with the monitoring and fulfilment of your order: (a) what is included in your order (should we need to identify the size or shape of your parcel at the Collect Point); (b) what shipping method you selected (should we need to tell the Collect Point which courier to expect); (c) the timestamp of when the order was placed (so that we can estimate when your parcel is likely to arrive); and (d) the order state (e.g. processing, completed, out for delivery, delivered or cancelled).
We do not process and store your debit and/or credit card details. When you register using the HubBox App, your card details are processed and stored by a PCI compliant third party provider called Braintree, which is a PayPal company.
We process and store your data only to the extent necessary in order to provide the HubBox Service to you either directly (if you have registered using the HubBox App) or on behalf of our retailer partners. Without this personal data, we are unable to provide the Service to you.
Where do we store your personal data?
The servers on which we store the above information are based in England and Ireland (i.e. within the UK and the European Economic Area).
For how long do we store your personal data?
You can contact us at any time (by emailing email@example.com) to ask us to delete your personal data. We will store your personal data securely unless and until we receive such a Data Deletion Request. In your Data Deletion Request please clearly state your name, your HubBox ID and what personal data you would like to be deleted. We may ask you to provide a copy of your personal identification so that we can verify that the request has come from you.
If we receive such a request, we will action the request as soon as possible. We will acknowledge receipt of your email and will then confirm to you by email when we have taken action, providing details of the action we have taken. A Data Deletion Request will result in the closure of your account as we cannot provide the Service to you without your personal data.
Any request to restrict the processing of your personal data should be made by email to firstname.lastname@example.org. We will follow the procedure outlined above for Data Deletion Requests, and the result will be the same (i.e. we will close your account).
How do I amend my personal data?
You can log into your account (via the HubBox Web App) to amend your personal data at any time. Alternatively, you can ask us to amend your personal data for you by contacting us at email@example.com.
Can I have a copy of the personal data you hold for me?
Of course. Please contact us at firstname.lastname@example.org if you would like us to provide you with a copy of your personal data in a portable format.
What do we do with your personal data?
As detailed above, we use your personal data for:
Internal record keeping.
Sending you emails regarding the status of your parcels.
We will only send you marketing emails if you have positively opted to receive such emails. In such circumstances, your name and email address will be stored in third-party software called Campaign Monitor. If you consent to receiving such emails and then change your mind, please email us at email@example.com and we will remove you from our marketing lists in Campaign Monitor.
We do not share your data with any third parties other than your chosen Collect Point to the extent that they need the information in order to process your parcel. In most cases, the information they see is restricted to your name and HubBox ID.
If we are obliged to disclose your personal data to other third parties, we will do so to the minimum extent necessary: (i) to comply with a law, regulation, governmental or securities exchange requirement, court order, judicial proceeding or legal process, such as a subpoena or a search warrant; (ii) to address a violation of the law; (iii) to investigate fraud or criminal activity, and to protect our rights or those of our affiliates, or as part of legal proceedings that affect us or may affect us or our affiliates; and (iv) to allow HubBox to exercise its legal rights or respond to a legal claim.
We take your personal data and the protection of your confidentiality very seriously. We have therefore put safeguarding procedures in place to protect the personal information we collect, including but not limited to using a secure server that encrypts the information you give us.
Changes to this Policy
If you have any queries about privacy, please email us at firstname.lastname@example.org so that we can help you further.
If you want to raise an issue about something you think we have done wrong in relation to your personal data, please email us at email@example.com. We will acknowledge your email, and will tell you what action we are going to take and when, as soon as we are able to.
You have the right to lodge a complaint at the Information Commissioner’s Office if you think we are not complying with our obligations under data protection legislation.