Privacy policy

We hold three kinds of information, and only for as long as we need it.

• Order details — the name, delivery address, email address and phone number you give at checkout, plus what you ordered and any personalisation text or artwork you submitted.
• Account details — if you create an account, your email address and a hashed password. We never store your password in a form we can read.
• Usage data — anonymous, aggregated statistics about how pages are used, described under analytics below.

We never see or store your card number. Card details are entered with our payment processors and never reach Hozzbox systems.

• To make, pack and deliver what you ordered, and to contact you about that order.
• To handle returns and refunds under our returns policy.
• To keep the records a business is required to keep about its sales.
• To understand which pages people find useful, in aggregate.

We do not sell your information, and we do not share it with anyone except the processors listed below, who need it to do the job we hired them for.

• PayPal and Stripe — payment processing. They receive your payment details directly and handle them under their own privacy policies.
• Google Analytics — aggregate site statistics, running as measurement property G-6TB4XLR99V.
• Delivery carriers — receive the name and address needed to deliver your parcel, and nothing else.

These are the actual cookies Hozzbox writes, and what each one is for.

• @timepay/access_token — keeps you signed in. Set only after you sign in.
• @timepay/user_info — remembers your display name so the site can greet you without another request.
• @timepay/guest_token — holds your basket together when you are shopping without an account. Without it, a basket would empty on every page.
• @timepay/timepa_lang — remembers your language choice.

Google Analytics sets its own cookies for aggregate measurement. You can clear all of these from your browser at any time; clearing the first three signs you out and empties your basket.

Order records are kept for as long as the law requires a business to retain sales records. Account details are kept until you ask us to close the account. Personalisation artwork is kept while an order could still be reprinted or returned, and is not reused for anything else.

You can ask us to:

• send you a copy of what we hold about you;
• correct anything that is wrong;
• delete your account and the personal details attached to it;
• stop emailing you — every marketing email also has an unsubscribe link.

Email support@hozzbox.com and we will action it. Some order records have to be retained for accounting purposes even after an account is closed; we will tell you if that applies.

Every page on this site is served over HTTPS, so the connection between your browser and Hozzbox is encrypted. Passwords are stored hashed. Payment details are handled entirely by our payment processors.