Privacy Policy

BoxSplit – Privacy Policy

Last Updated: 18 August 2026

This Privacy Policy explains how Hymac-Direct Limited, trading as BoxSplit, collects, uses, stores and shares your personal information when you visit boxsplit.co, create an account, purchase products, contact us or otherwise interact with BoxSplit.

We are committed to protecting your privacy and handling your personal information responsibly and in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

BoxSplit is a trading name of Hymac-Direct Limited.

For the purposes of UK data protection law, Hymac-Direct Limited is the data controller for the personal information described in this Privacy Policy.

Registered Company: Hymac-Direct Limited
Company Registration Number: 08456902
Registered in: England and Wales

Registered Office:
2 Brynderwen
Ynysddu
Newport
Gwent
NP11 7JP

Email: info@hymac-direct.com
Telephone: 0330 311 2031
Website: boxsplit.co

2. Personal Information We Collect

Depending on how you use BoxSplit, we may collect and process the following personal information.

Identity Information

This may include:

  • Your name.

  • Username or account name.

  • Title, where provided.

Contact Information

This may include:

  • Email address.

  • Telephone number.

  • Billing address.

  • Delivery address.

Order Information

This may include:

  • Products ordered.

  • Order numbers.

  • Order dates.

  • Delivery information.

  • Returns.

  • Refunds.

  • Complaints.

  • Customer service communications.

Payment and Transaction Information

This may include:

  • Payment method.

  • Transaction status.

  • Payment reference.

  • Purchase history.

  • Refund information.

Payments may be processed by third-party payment providers.

We do not normally receive or store your complete payment card details where payment information is securely processed by a third-party payment provider.

Account Information

If you create a BoxSplit account, we may process:

  • Your name.

  • Email address.

  • Account details.

  • Saved delivery or billing information.

  • Order history.

  • Account preferences.

Passwords should be stored using appropriate security measures and should not be available to us in plain text.

Technical Information

When you use our website, certain technical information may be collected automatically, including:

  • IP address.

  • Browser type.

  • Device type.

  • Operating system.

  • Website activity.

  • Pages visited.

  • Date and time of visits.

  • Referring website.

  • Cookie identifiers.

  • Similar technical information.

Communications

We may retain information you provide when you:

  • Contact customer service.

  • Email us.

  • Submit an enquiry.

  • Request a return or refund.

  • Make a complaint.

  • Contact us through social media.

  • Communicate with us about an order.

Reviews and User-Generated Content

If you submit content to BoxSplit, we may process:

  • Product reviews.

  • Comments.

  • Photographs.

  • Videos.

  • Testimonials.

  • Social media content.

  • Other content you voluntarily provide.

3. How We Collect Your Information

We may collect personal information:

Directly From You

For example, when you:

  • Place an order.

  • Create an account.

  • Contact us.

  • Subscribe to marketing.

  • Submit a review.

  • Request a refund or return.

  • Participate in a promotion.

  • Submit photographs or other content.

Automatically

Certain information may be collected automatically when you visit our website through:

  • Cookies.

  • Similar technologies.

  • Server logs.

  • Analytics systems.

  • Website security systems.

From Third Parties

We may receive information from third parties involved in providing our services, including:

  • Payment providers.

  • Delivery companies.

  • Suppliers.

  • Manufacturers.

  • Distributors.

  • Fulfilment partners.

  • Website and e-commerce providers.

  • Fraud-prevention providers.

  • Marketing or analytics providers.

  • Social media platforms where you interact with us.

4. Why We Use Your Personal Information

We use personal information where we have a lawful reason to do so.

The main purposes for which we process your information are described below.

Processing and Fulfilling Orders

We use your information to:

  • Process orders.

  • Take and confirm payment.

  • Arrange fulfilment.

  • Arrange delivery.

  • Provide order updates.

  • Process returns.

  • Issue refunds.

  • Deal with problems relating to your order.

Our lawful basis for this processing will normally be that it is necessary to perform our contract with you or to take steps at your request before entering into a contract.

5. Third-Party Supplier Fulfilment

Some products purchased through BoxSplit are stocked, fulfilled and/or dispatched directly by third-party suppliers, manufacturers, distributors or fulfilment partners.

To fulfil your order, we may provide the relevant supplier with information such as:

  • Your name.

  • Delivery address.

  • Telephone number where required for delivery.

  • Email address where required for fulfilment or delivery.

  • Products ordered.

  • Order reference.

  • Other information reasonably necessary to fulfil your order.

The supplier should only receive information reasonably necessary to process and deliver the relevant order or deal with associated fulfilment issues.

Your information may also be provided to delivery companies used by the supplier.

Our lawful basis for sharing this information is normally that it is necessary to perform our contract with you.

You may receive goods in packaging bearing the supplier's, manufacturer's, distributor's or fulfilment company's details because goods may be dispatched directly from their premises.

6. Payments

Payments may be processed through third-party payment service providers.

These providers may collect and process information necessary to:

  • Authorise payments.

  • Prevent fraud.

  • Process refunds.

  • Comply with financial and regulatory obligations.

Payment providers may act as independent data controllers for some of the information they process.

Their handling of your personal information may also be governed by their own privacy policies.

BoxSplit does not normally store complete payment card numbers, security codes or similar sensitive card information where these are handled directly by the payment provider.

7. Deliveries

We may share information with:

  • Couriers.

  • Postal services.

  • Delivery companies.

  • Suppliers.

  • Manufacturers.

  • Distributors.

  • Fulfilment partners.

Information shared may include your:

  • Name.

  • Delivery address.

  • Telephone number.

  • Email address.

  • Delivery instructions.

  • Order reference.

This information is shared where reasonably necessary to deliver your order.

8. Customer Accounts

If you create an account with BoxSplit, we use your information to:

  • Create and administer your account.

  • Allow you to log in.

  • Display your order history.

  • Save information you choose to store.

  • Provide customer support.

  • Protect your account from unauthorised access.

  • Investigate suspicious activity.

We may temporarily restrict an account where reasonably necessary for security or fraud-prevention purposes.

9. Customer Service

We process personal information when responding to:

  • Questions.

  • Complaints.

  • Returns.

  • Refund requests.

  • Delivery problems.

  • Product enquiries.

  • Account enquiries.

Our lawful basis may be performance of our contract with you, compliance with a legal obligation, or our legitimate interest in providing customer service and managing our business.

10. Fraud Prevention and Website Security

We may use personal and technical information to:

  • Detect fraudulent transactions.

  • Protect customer accounts.

  • Prevent misuse of our website.

  • Investigate suspicious activity.

  • Protect BoxSplit and our customers.

  • Maintain website security.

Our lawful basis is generally our legitimate interests in protecting our customers, website and business from fraud, abuse and security threats.

Where necessary, information may be shared with payment providers, fraud-prevention providers, professional advisers, law-enforcement authorities or other appropriate organisations.

11. Marketing

Where permitted by law, we may use your contact information to send you information about:

  • Products.

  • Offers.

  • Promotions.

  • Discounts.

  • New products.

  • BoxSplit news.

Where consent is required, we will ask for your consent before sending electronic direct marketing.

You can withdraw your marketing consent or unsubscribe at any time.

You may:

Stopping marketing communications will not prevent us from sending necessary service communications relating to your orders, account, returns or other transactions with us.

12. Reviews

If you submit a product review, we may publish information you provide as part of that review.

We recommend that you do not include sensitive or unnecessary personal information in a public review.

We may moderate reviews to remove personal information, unlawful material, spam or content that breaches our Terms and Conditions.

We will not remove a genuine review merely because it expresses a negative opinion.

13. User-Generated Content and Social Media

If you voluntarily provide photographs, videos, testimonials or other content for us to use, we may process and publish that information in accordance with the permission you have provided and our Terms and Conditions.

If you tag BoxSplit or mention us on social media, we will not treat the tag alone as automatic permission to use your content in advertising.

We may contact you to request permission.

If you give permission, your content may be used on:

  • Our website.

  • Social media.

  • Email marketing.

  • Advertising.

  • Promotional materials.

You may contact us if you have questions regarding our continued use of your content.

14. Cookies

Our website may use cookies and similar technologies.

Cookies are small pieces of information stored on your device when you visit a website.

Cookies may be used for purposes including:

  • Keeping the website functioning.

  • Remembering your preferences.

  • Maintaining your shopping basket.

  • Keeping you logged into your account.

  • Website security.

  • Measuring website usage.

  • Analytics.

  • Advertising and marketing, where applicable.

Strictly Necessary Cookies

Some cookies are necessary for the website to operate correctly.

These may be used without consent where permitted by law.

Optional Cookies

Where consent is legally required, optional cookies such as certain analytics, advertising or marketing cookies will not be placed until you have given the appropriate consent.

You can manage your cookie preferences through our cookie consent system where available.

You can also control cookies through your browser settings.

Disabling certain cookies may affect some website features.

Further information should be provided in our Cookie Policy or cookie settings.

15. Who We Share Personal Information With

Where necessary, we may share personal information with organisations including:

  • Suppliers.

  • Manufacturers.

  • Distributors.

  • Fulfilment partners.

  • Couriers and delivery companies.

  • Payment providers.

  • E-commerce and website providers.

  • Website hosting providers.

  • IT and technical support providers.

  • Email service providers.

  • Customer service systems.

  • Analytics providers.

  • Marketing providers where permitted.

  • Fraud-prevention and security providers.

  • Accountants.

  • Legal advisers.

  • Insurers.

  • Government bodies.

  • Regulators.

  • Courts.

  • Law-enforcement authorities where legally required.

We do not sell your personal information to third parties.

Where third parties process information on our behalf, we take reasonable steps to ensure appropriate data-protection arrangements are in place.

16. Legal Requirements

We may disclose personal information where reasonably necessary to:

  • Comply with the law.

  • Comply with a court order.

  • Respond to a lawful request from an authority.

  • Protect our legal rights.

  • Prevent or investigate fraud.

  • Protect customers or other individuals.

  • Establish, exercise or defend legal claims.

Our lawful basis may be compliance with a legal obligation or our legitimate interests, depending on the circumstances.

17. Lawful Bases for Processing

Depending on the circumstances, we rely on one or more of the following lawful bases under UK data protection law:

Contract

Where processing is necessary to enter into or perform a contract with you, including processing and delivering your order.

Legal Obligation

Where we need to process information to comply with a legal obligation.

Legitimate Interests

Where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

This may include:

  • Preventing fraud.

  • Protecting our website.

  • Providing customer service.

  • Improving our business.

  • Maintaining business records.

  • Defending legal claims.

Consent

Where we have specifically asked for your consent, such as for certain marketing communications, cookies or other activities.

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not make processing carried out before withdrawal unlawful.

18. How Long We Keep Your Information

We do not keep personal information for longer than reasonably necessary.

The period for which information is retained depends on:

  • Why we collected it.

  • Whether we still need it.

  • Legal and regulatory requirements.

  • Tax and accounting requirements.

  • Fraud-prevention requirements.

  • Whether information may be required to establish or defend legal claims.

Order, transaction and financial records may be retained for the period required to meet applicable legal, accounting and tax obligations.

Customer service correspondence may be retained for a reasonable period to deal with complaints, disputes and future enquiries.

Account information may be retained while your account remains active and for an appropriate period afterwards where reasonably necessary.

When information is no longer required, we will delete, anonymise or securely dispose of it where reasonably practicable.

19. International Data Transfers

Some service providers used to operate our website, process payments, provide analytics, send communications or provide other services may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps where required by law to ensure that the information receives an appropriate level of protection.

Depending on the destination and provider, this may include:

  • UK adequacy regulations.

  • Appropriate contractual safeguards.

  • Other legally permitted transfer mechanisms.

You may contact us if you would like further information about safeguards relevant to your personal information.

20. Keeping Your Information Secure

We take reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access.

  • Unlawful use.

  • Accidental loss.

  • Destruction.

  • Alteration.

  • Unauthorised disclosure.

Measures may include appropriate:

  • Access controls.

  • Password protection.

  • Secure systems.

  • Restricted access to customer information.

  • Security monitoring.

  • Secure payment processing.

However, no internet-based system can be guaranteed to be completely secure.

You are also responsible for keeping your account password and login credentials confidential.

21. Your Data Protection Rights

Depending on the circumstances and the lawful basis being relied upon, UK data protection law may give you rights including:

Right of Access

You may request a copy of personal information we hold about you.

Right to Rectification

You may ask us to correct inaccurate or incomplete personal information.

Right to Erasure

In certain circumstances, you may ask us to delete your personal information.

Right to Restrict Processing

In certain circumstances, you may ask us to restrict how we process your information.

Right to Object

You may have the right to object to certain processing based on legitimate interests.

You have the right to object at any time to the use of your personal information for direct marketing purposes.

Right to Data Portability

In certain circumstances, you may have the right to receive information you provided to us in a structured, commonly used and machine-readable format or have it transferred to another organisation.

Right to Withdraw Consent

Where we rely on consent, you can withdraw your consent at any time.

These rights are subject to certain legal conditions and exemptions.

22. Exercising Your Rights

To exercise your data protection rights, contact:

Email: info@hymac-direct.com

or write to:

Hymac-Direct Limited
2 Brynderwen
Ynysddu
Newport
Gwent
NP11 7JP

We may need to request information to verify your identity before responding to a request.

We will respond within the period required by applicable data protection law.

There is normally no charge for exercising your data protection rights, although the law allows fees or refusal in certain limited circumstances.

23. Automated Decision-Making

We do not currently intend to make decisions about customers based solely on automated processing that produce legal or similarly significant effects.

Automated systems may nevertheless be used for purposes such as fraud detection, website security and payment processing.

Where legally significant automated decision-making is introduced, we will provide the information and safeguards required by applicable law.

24. Children's Privacy

BoxSplit is intended for customers aged 18 and over.

We do not knowingly intend to collect personal information directly from children for the purpose of creating customer accounts or placing orders.

If we become aware that personal information has been provided by a child in circumstances where it should not have been collected, we will take appropriate steps in accordance with applicable law.

25. Links to Other Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of third-party websites that we do not control.

We recommend reviewing the privacy policy of any third-party website you visit.

26. Business Transfers

If Hymac-Direct Limited or part of its business or assets is sold, transferred, reorganised or merged, customer information may be transferred as part of that transaction where permitted by law.

Any recipient will be required to handle personal information in accordance with applicable data protection requirements.

27. Complaints

If you have concerns about how we handle your personal information, please contact us first so that we have an opportunity to investigate.

Email: info@hymac-direct.com
Telephone: 0330 311 2031

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Information about making a complaint and the ICO's current contact details are available from the Information Commissioner's Office.

28. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business.

  • Changes to our website.

  • New suppliers or service providers.

  • Changes to how we process personal information.

  • Changes to applicable law or regulatory guidance.

The latest version will be published on boxsplit.co.

Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to the attention of affected individuals where required.

29. Contact Us

For questions about this Privacy Policy or how we process your personal information, contact:

BoxSplit
A trading name of Hymac-Direct Limited

Hymac-Direct Limited
Company Registration Number: 08456902

Registered Office:
2 Brynderwen
Ynysddu
Newport
Gwent
NP11 7JP

Email: info@hymac-direct.com
Telephone: 0330 311 2031
Website: boxsplit.co

Winners

  • 00/Test/2026

    John Do

  • 00/test/2026

    Jane Do

  • 00/test/2026

    test