Privacy Policy

Privacy Policy

Last updated: 3 November 2026

1. Introduction

Welcome to Bax Box.

Bax Box is an independent UK digital software business operated by Alexander Bax, a sole trader trading as Bax Box.

We respect your privacy and are committed to protecting your personal information in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, purchase our products or contact us.

2. Who We Are

Business name: Bax Box
Business owner and data controller: Alexander Bax
Business structure: UK sole trader
Customer service contact: Hayley Young
Email: hayleyestheruk@hotmail.com

For questions about your personal information or this Privacy Policy, please contact us using the email address above.

3. Information We Collect

Depending on how you use our website, we may collect:

• Personal details: Your name, email address, billing address and other information provided during checkout.
• Order information: Products purchased, transaction dates, payment status and order history.
• Account information: Login credentials and account preferences if you create an account.
• Technical information: IP address, browser type, device information and website usage data.
• Communications: Messages you send to us regarding orders, downloads or customer support.

We collect only the information reasonably necessary to operate our business and provide our services.

4. How We Use Your Information

We may use your information to:

• Process and fulfil purchases.
• Provide access to purchased digital products.
• Send order confirmations, receipts and download information.
• Respond to customer enquiries.
• Maintain the security and functionality of our website.
• Manage refunds, complaints and technical support.
• Comply with applicable legal, accounting and tax obligations.
• Send promotional communications where we have an appropriate legal basis to do so.

We do not sell customer personal information to advertisers.

5. Legal Bases for Processing

Under UK GDPR, we rely on the following legal bases where applicable:

Contractual necessity: To process orders, provide purchased products and administer customer accounts.

Legal obligation: To maintain records and meet relevant legal, tax and accounting requirements.

Legitimate interests: To operate, maintain and secure our website, prevent fraud and respond to business enquiries, where those interests are not overridden by individuals’ rights.

Consent: Where required for optional cookies, certain marketing activities or other processing that relies on consent.

Where we rely on consent, you may withdraw it at any time.

6. Payments and Checkout

Bax Box intends to use WooCommerce and Stripe to process online purchases.

When you make a purchase, payment information will be processed by the relevant payment service provider.

Bax Box does not intend to store full payment card numbers or card security codes on its own website servers.

Payment providers may process personal information in accordance with their own privacy notices.

7. Cookies and Analytics

Our website may use cookies and similar technologies to:

• Maintain shopping baskets and checkout sessions.
• Remember account login sessions.
• Support website security.
• Understand website performance and visitor activity, where analytics services are enabled.

Where required by UK law, we will obtain your consent before placing non-essential cookies or using similar tracking technologies.

Further information will be provided in our Cookie Policy.

8. Sharing Your Information

We may share relevant personal information with trusted service providers where necessary to operate Bax Box.

These may include:

• Website hosting providers.
• Payment processors.
• WooCommerce-related service providers.
• Email delivery providers.
• Website security and maintenance providers.
• Professional advisers, including accountants and solicitors.

We may also disclose information where required by law.

Service providers are expected to handle personal information securely and in accordance with applicable data protection requirements.

9. International Data Transfers

Some technology providers may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that appropriate safeguards or another lawful transfer mechanism apply, where required by UK data protection law.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including contractual, legal, tax and accounting requirements.

Order and transaction records may need to be retained for several years to meet applicable record-keeping obligations.

Customer support messages, account information and technical data will be retained according to their purpose and our applicable retention arrangements.

When personal information is no longer required, we will securely delete or anonymise it, unless continued retention is legally necessary.

11. Data Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse or disclosure.

These measures may include secure website connections, restricted administrative access, software updates and appropriate security controls.

No internet-based system can be guaranteed to be completely secure.

12. Your Data Protection Rights

Depending on the circumstances, you may have the right to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Request restriction of certain processing activities.
• Object to certain uses of your information.
• Request portability of eligible personal information.
• Withdraw consent where processing relies on consent.

Some rights are subject to legal exceptions.

To exercise your rights, contact hayleyestheruk@hotmail.com.

We will respond in accordance with applicable UK data protection law.

13. Marketing Communications

We may occasionally send information about new products, offers and updates where permitted by applicable marketing and privacy laws.

Where consent is required, we will request it before sending promotional communications.

You may unsubscribe from marketing emails at any time using the unsubscribe instructions provided or by contacting us.

Transactional communications relating to your purchases may still be sent where necessary.

14. Children’s Privacy

Bax Box does not intentionally collect personal information from children through services directed at them without appropriate safeguards.

Our website’s products may be suitable for different audiences, but purchases and customer accounts must comply with our applicable Terms and Conditions.

15. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices of independent third parties. We encourage visitors to review their privacy notices.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technology or legal obligations.

The latest version will be published on this page with an updated revision date.

17. Contact Us

For privacy questions, requests or complaints, please contact:

Bax Box
Operated by Alexander Bax
Customer service contact: Hayley Young
Email: hayleyestheruk@hotmail.com
Business correspondence address: [INSERT BUSINESS ADDRESS]

If you remain dissatisfied with how your personal information has been handled, you may complain to the UK Information Commissioner’s Office (ICO) Website: https://ico.org.uk