Here’s the updated Privacy Policy with your changes applied — Portugal references removed, UK law included, servers stated as EU (Germany if pressed), 876BOX Portugal removed, and additions to help with Revolut merchant account approval:

Privacy Policy for 876BOX

Last updated: July 5, 2025

1. Introduction

876BOX (“we,” “us,” “our”) operates a WebView-based Android and iOS app and corresponding website (the “Service”) to sell and ship non-perishable Jamaican grocery boxes. We are registered in the United Kingdom as 876BOX Limited and serve customers in the UK and Europe. Products are sourced and shipped directly from Jamaica. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights.

2. Data Controller

876BOX Limited (UK) Email: privacy@876box.com

3. Information We Collect

We collect two broad categories of data:

Personal Data You Provide Directly

Account & Order Data: name, email address, shipping/billing address, phone number. Payment Information: when you place an order, your card data is processed by our payment processor (Stripe) and is not stored on our servers. Customer Service: any messages you send via chat/email, including order inquiries and support requests.

Automatically Collected Data

Device & Usage Data: through the Android WebView shell and our servers, we log your device model, OS version, unique device identifiers, IP address, and app/session timestamps. Analytics & Crash Reports: we use analytics services (e.g. Google Analytics for Firebase) and crash-reporting (e.g. Sentry) to understand app performance and diagnose errors. These services collect anonymised usage patterns and crash stacks. Cookies & Web Storage: when you interact with our website in the WebView, we and third-party services may set cookies or localStorage entries to keep you logged in, remember preferences, and track shopping-cart contents.

4. How We Use Your Data

We process your data for the following purposes:

Order Fulfillment: to process your purchase, communicate order status, and ship products. Payments: to verify and complete payment via our third-party processor. App & Service Improvement: to monitor performance, fix bugs, and improve features. Marketing & Promotions: if you opt in, to send promotional emails, newsletters, or SMS about new products and offers. You may unsubscribe at any time. Legal & Compliance: to comply with UK tax, accounting, and regulatory requirements (e.g. invoicing, customs declarations). Fraud Prevention: to detect, investigate, and prevent fraudulent transactions and other illegal activity to protect both our customers and our business.

5. Legal Basis for Processing

We process your personal data under the following legal bases in accordance with the UK GDPR and Data Protection Act 2018:

Contract Performance: processing necessary to fulfil your order and deliver our service. Legitimate Interests: fraud prevention, security, analytics, and service improvement. Legal Obligation: compliance with UK tax, customs, and financial regulations. Consent: marketing communications, which you may withdraw at any time.

6. Data Sharing

We may share your information with:

Service Providers: logistics partners (couriers, Jamaica shipping agents), payment processors, analytics/crash-reporting vendors, email/SMS platforms. Legal Authorities: when required by law or to protect our rights, including UK HMRC, Border Force, and law enforcement. Business Transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction (we will notify you).

We do not sell or rent your personal data to third parties for marketing.

7. International Transfers

Your data is stored on servers located within the European Union. We and our service partners (e.g. Stripe, Firebase) may process data in the EU or the US. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements (IDTAs) or the EU Standard Contractual Clauses as adopted under UK law.

8. Data Retention

Order & Account Data: retained for as long as needed to fulfil orders and comply with legal obligations (up to 7 years for UK tax purposes under HMRC requirements). Analytics & Crash Data: retained for up to 24 months, then aggregated or purged. Marketing Consents: until you withdraw consent.

9. Security

We implement reasonable technical and organisational measures — including encryption in transit via HTTPS/TLS, encrypted backups, and strict access controls — to protect your data. No internet transmission is 100% secure; we recommend using strong, unique passwords and keeping your device software up to date. In the event of a data breach that affects your rights and freedoms, we will notify the UK Information Commissioner’s Office (ICO) within 72 hours and inform affected customers without undue delay.

10. Your Rights

Under the UK GDPR and the Data Protection Act 2018, you have the right to:

Access: request a copy of your personal data. Rectification: correct inaccurate or incomplete data. Erasure (“Right to be forgotten”): delete your personal data where there is no lawful basis for us to retain it. Restriction of Processing: ask us to limit how we use your data. Data Portability: receive your data in a structured, commonly used, machine-readable format. Object to Processing: object to processing based on legitimate interests or for direct marketing. Withdraw Consent: stop marketing communications at any time. Lodge a Complaint: with the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

To exercise any of these rights or for any privacy questions, email us at privacy@876box.com. We will respond within 30 days.

11. Children’s Privacy

Our Service is not directed to children under 13 (or under 16 where required by local law). We do not knowingly collect personal data from minors. If you believe we have inadvertently done so, contact us immediately to request deletion.

12. Third-Party Links

Our website or emails may contain links to other sites (e.g. social media or partner promotions). This Policy does not apply to external sites — please review their own privacy notices.

13. Cookies Policy

We use essential cookies to operate our service and optional cookies for analytics and marketing. You can manage your cookie preferences at any time through our cookie banner or your browser settings. For full details on the cookies we use, please see our Cookie Notice.

14. Changes to This Policy

We may update this Policy when our practices change or to comply with new laws. We will post the revised date at the top and notify you via email or an in-app notice if the changes are material.

Contactez-nous

876BOX Limited (UK) Email: privacy@876box.com

Thank you for trusting 876BOX with your Jamaican grocery needs. We are committed to protecting your privacy and handling your data responsibly.