Privacy Policy

Last Updated: 26 June 2026

This Privacy Policy explains how BoxSplit, a trading name of Hymac-Direct Limited, collects, uses, stores and protects your personal information when you visit our website or purchase products from us.

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

---

1. Who We Are

BoxSplit is a trading name of Hymac-Direct Limited.

Data Controller:
Hymac-Direct Limited

Company Registration Number:
08456902 

Registered Office:
2, Brynderwen, Ynysddu, Newport, Gwent NP11 7JP

Email:
info@hymac-direct.com

Website: boxsplit.co

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

---

2. Information We Collect

We may collect the following personal information:

Identity Information

• Name
• Title
• Date of Birth (where required)

Contact Information

• Billing Address
• Delivery Address
• Email Address
• Telephone Number

Account Information

• Username
• Password (encrypted)
• Purchase History
• Wishlist
• Saved Addresses

Payment Information

Payments are processed securely by our payment providers.

We do not store your full debit or credit card details.

Technical Information

• IP Address
• Browser Type
• Device Information
• Operating System
• Time Zone
• Website Usage Data

Marketing Preferences

• Newsletter preferences
• Promotional email preferences
• SMS preferences (if applicable)

---

3. How We Collect Information

We collect information when you:

• Create an account.
• Place an order.
• Contact customer support.
• Subscribe to our newsletter.
• Enter competitions or promotions.
• Leave product reviews.
• Upload user-generated content.
• Browse our website using cookies.

---

4. How We Use Your Information

We use your information to:

• Process orders.
• Deliver products.
• Process refunds.
• Manage your account.
• Respond to enquiries.
• Prevent fraud.
• Improve our website.
• Provide customer support.
• Send service updates.
• Send marketing communications (only where you have consented or where permitted by law).

---

5. Legal Basis for Processing

We process your information under one or more of the following lawful bases:

• Performance of a contract.
• Compliance with legal obligations.
• Legitimate business interests.
• Your consent.
• Protection against fraud.

---

6. Marketing

We may send promotional emails about products, offers and updates.

You can unsubscribe at any time by:

• Clicking the unsubscribe link in our emails.
• Contacting us directly.

We will never sell your personal information to third parties.

---

7. Sharing Your Information

We may share your information with trusted service providers including:

• Payment processors
• Delivery companies
• Website hosting providers
• IT support providers
• Marketing platforms
• Fraud prevention services
• Professional advisers where required

All third parties are required to protect your personal information.

---

8. Cookies

Our website uses cookies to:

• Remember your preferences.
• Keep items in your shopping basket.
• Improve website performance.
• Analyse visitor behaviour.
• Deliver personalised content where applicable.

You can manage cookies through your browser settings.

A separate Cookie Policy is available on our website.

---

9. Keeping Your Information Safe

We use appropriate technical and organisational measures to protect your information, including:

• SSL encryption
• Secure servers
• Password encryption
• Restricted staff access
• Firewall protection
• Fraud monitoring

Although we take security seriously, no online system can be guaranteed to be completely secure.

---

10. How Long We Keep Information

We only retain personal information for as long as necessary.

Typically:

• Customer accounts – until deleted or inactive for an extended period.
• Order records – normally six years for tax and accounting purposes.
• Marketing records – until consent is withdrawn.
• Customer service enquiries – as long as reasonably necessary.

---

11. Your Rights

Under UK GDPR, you have the right to:

• Access your personal information.
• Correct inaccurate information.
• Request deletion of your information where applicable.
• Restrict processing.
• Object to processing.
• Withdraw consent.
• Request data portability.
• Lodge a complaint with the Information Commissioner's Office (ICO).

---

12. Account Information

If you have a BoxSplit account you may:

• Update your details.
• Change your password.
• View previous orders.
• Delete saved addresses.
• Close your account by contacting customer services.

Some information may still need to be retained for legal or accounting purposes.

---

13. Children's Privacy

Our website is not intended for anyone under the age of 18.

We do not knowingly collect personal information from children.

---

14. International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place in accordance with UK data protection law.

---

15. Third-Party Websites

Our website may contain links to external websites.

We are not responsible for the privacy practices of third-party websites.

We recommend reviewing their privacy policies before providing personal information.

---

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Any changes will be published on this page with the updated revision date.

---

17. Contact Us

If you have any questions regarding this Privacy Policy or your personal information, please contact:

BoxSplit

A trading name of Hymac-Direct Limited

Email:
info@hymac-direct.com

Website: boxsplit.co

---

18. Complaints

If you are unhappy with how we handle your personal information, please contact us first so that we can try to resolve the issue.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

Website: https://ico.org.uk

Telephone: 0303 123 1113