Privacy Policy

Drive-Box is a trading name of COLLINGHAMCO LTD, a company registered in England and Wales (Company No. 15540675), with a registered address at 21 Fulmar Way, Worksop, Nottinghamshire, S81 8UF.

We operate the website drive-box.shop and process personal data as a data controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact us about data protection matters: hello@drive-box.shop | +44 7398 170737

We collect the following personal data when you subscribe to Drive-Box:

• Full name and delivery address
• Email address and phone number (optional)
• Payment information (processed securely by Stripe — we do not store card details)
• Referral codes and social media handles (if provided voluntarily)
• Unboxing post confirmation (if you participate in our UGC referral programme)

We may also collect technical data automatically, including IP addresses, browser type and pages visited, to improve our website.

We use your personal data for the following purposes:

• Fulfilment: To pack and dispatch your monthly Drive-Box to the correct address
• Subscription management: To manage your billing via Stripe and track your subscription status
• Customer service: To respond to your enquiries and resolve issues
• Referral programme: To send your bonus Nano Box if you participate in our UGC challenge
• Marketing: To send you updates about Drive-Box (only with your consent — you can opt out at any time)
• Legal compliance: To meet our obligations under UK law

• Contract performance: Processing your order and delivering your box
• Legitimate interests: Fraud prevention, website analytics, improving our service
• Consent: Marketing communications
• Legal obligation: Accounting, tax, and compliance requirements

We do not sell your personal data. We share it only where necessary:

• Stripe Inc: Payment processing (governed by Stripe's own privacy policy)
• Royal Mail / courier services: To deliver your box
• Base44 platform: Our website and data storage provider
• Legal authorities: Where required by law

We retain your personal data for as long as your subscription is active and for 7 years thereafter to meet HMRC accounting requirements. You may request deletion of marketing data at any time.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing for marketing purposes
• Data portability
• Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, contact us at hello@drive-box.shop. We will respond within 30 days.

Our website uses essential cookies to operate checkout and session functionality, plus measurement and analytics cookies (such as Google Analytics and Google Ads conversion tracking) to understand how visitors use the site and improve our marketing. These tools may set cookies on your device; you can manage or disable cookies via your browser settings. We do not sell data derived from these cookies.

We may update this Privacy Policy from time to time. The latest version will always be available at drive-box.shop/Privacy. Continued use of our service after changes constitutes acceptance of the updated policy.