How do you use my data?

 

When you purchase products from our website

When you purchase goods from our website, we will use your personal information to complete your purchase. The details we collect from you will include your name, address, email address, phone number and payment information.

To complete your purchase, we share your personal information with our subcontractors who are involved in the purchase process, such as payment providers, as well as credit reference agencies who we use to assess fraud, credit and/or security risks.

We need to process your personal information in this way to enter into and perform the contract for the item you have purchased from us.

When you phone us, email us or use our website chat service

When you phone us or message us using our website chat service, we may also handle your personal information (your name, contact details and the other details you provide to us) in order to provide the customer services you have asked us to. We will need your personal information to process an order by telephone. It may also be required if you ask us to confirm whether a particular product is available or explain how our delivery or returns process works.

We rely on your consent to handle your personal information in this way, which you can withdraw at any time. If you do not provide us with the personal information we request from you for customer services purposes, we may not be able to fully answer your queries.

When you have expressed an interest in our products:

If you have opted in via our website or over the telephone to receive marketing communications from us, we will handle your personal information (such as your name, email address and postal address and telephone number) to provide you with marketing communications in line with any preferences you have told us about.

When we send you marketing emails, we rely on your consent to contact you for marketing purposes. Every email we send to you for marketing purposes will also contain instructions on how to unsubscribe from receiving them.

We may also use your email address for marketing via social media. We rely on our legitimate interest to promote the success of our business to do this. When we use your email address in this way, we do not add your email address to any third party platforms in a personally identifiable form.

You are not under any obligation to provide us with your personal data for marketing purposes.

You can tell us that you do not want your personal information to be processed in this way at any time by contacting us at [email protected]m or, where relevant, by following the unsubscribe link shown in every marketing communication you receive from us.

To make our site better:

We will also use your personal information to provide you with a more effective user experience (such as by displaying products we think you will be interested in, based on your purchase history and browsing habits).

Our use of your information in this way means that your experience of our site will be more tailored to you, and that the products you see on our site may differ from someone accessing the same site with a different purchase history or browsing habits.

We also share your aggregated, anonymous data with third party analytics and search engine providers that assist us in the improvement and optimisation of our site.

We will also use your personal information for the purposes of making our site more secure, and to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes.

We process your data for this reason because we have a legitimate interest to provide you with the best experience we can, and to ensure that our site is kept secure.

You can prevent us from using your personal information in this way by using the 'do not track' functionality in your internet browser. If you enable do not track functionality, our site may be less tailored to your needs and preferences.

If our business is sold:

We will transfer your personal information to a third party:

• if we sell or buy any business or assets, we will provide your personal information to the seller or buyer (but only to the extent we need to, and always in accordance with data protection legislation); or
• if Tiny Box Company Limited or the majority of its assets are acquired by somebody else, in which case the personal information held by Tiny Box Company Limited will be transferred to the buyer.

We process your personal information for this purpose because we have a legitimate interest to ensure our business can be continued by the buyer. If you object to our use of your personal information in this way, the relevant seller or buyer of our business may not be able to provide services to you.

In some circumstances we may also need to share your personal information if we are under a duty to disclose or share it to comply with a legal obligation.

What about technical information and analytics?

Information we collect about you: When you visit our site we will automatically collect the following information:

• technical information, including the Internet protocol (IP) address used to connect your computer to the internet, your login information, browser type, language and version, time zone setting, browser plug-in types and versions, screen resolution, operating system and platform; and
• information about your visit, including the full Uniform Resource Locators, clickstream to, through and from our site (including date and time), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs) and methods used to browse away from the page.

Information we receive from other sources: We are also working closely with third party advertising networks, analytics providers, hosting providers and search information providers from whom we may also receive general aggregated anonymous information about you.

We will combine the information you provide to us with information we collect about you.

Cookies

Our site uses cookies to distinguish you from other users of our site. This helps us to provide you with a good experience when you browse our site and also allows us to improve our site. By continuing to browse the site, you are agreeing to our use of cookies.

 

Category: Necessary (1)

Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

COOKIE NAME	PROVIDER	TYPE	EXPIRY
frontend	tinyboxcompany.co.uk	HTTP	Session
Cookie purpose description: Stores a random ID which ensures that a user can be uniquely identified as a guest or logged-in user. Functions such as "Items last viewed" or retention of the logged-in state are connected with this cookie.

 

Category: Statistics (5)

Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.

COOKIE NAME	PROVIDER	TYPE	EXPIRY
_ga	tinyboxcompany.co.uk	HTTP	2 years
Cookie purpose description: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
_gat	tinyboxcompany.co.uk	HTTP	Session
Cookie purpose description: Used by Google Analytics to throttle request rate
_gid	tinyboxcompany.co.uk	HTTP	Session
Cookie purpose description: Registers a unique ID that is used to generate statistical data on how the visitor uses the website.
collect	google-analytics.com	Pixel	Session
Cookie purpose description: Used to send data to Google Analytics about the visitor's device and behaviour. Tracks the visitor across devices and marketing channels.
p.gif	typekit.net	Pixel	Session
Cookie purpose description: Unclassified

 

Category: Functionality (8)

Cookies for functionality enable simpler and faster use of the website or a better experience.

COOKIE NAME	PROVIDER		TYPE		EXPIRY
jv_enter_ts_xa2mru3V0K	tinyboxcompany.co.uk		HTTP		Session
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the user’s first visit to the website.
jv_history_xa2mru3V0K	tinyboxcompany.co.uk		HTML		Persistent
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. The cookies help to determine when to trigger a chat prompt to the user, and what message should be communicated on certain pages.
jv_refer_xa2mru3V0K	tinyboxcompany.co.uk		HTTP		Session
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the source of entry to the website.
jv_store_available_host	tinyboxcompany.co.uk		HTML		Persistent
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. The cookies help to determine when to trigger a chat prompt to the user, and what message should be communicated on certain pages.
jv_store_xa2mru3V0K_app	tinyboxcompany.co.uk		HTML		Persistent
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. The cookies help to determine when to trigger a chat prompt to the user, and what message should be communicated on certain pages.
jv_utm_xa2mru3V0K	tinyboxcompany.co.uk		HTTP		Session
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the ID of the marketing campaign of the visit.
jv_visits_count_xa2mru3V0K	tinyboxcompany.co.uk		HTTP		1 year
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the number of visits a user makes to the website.
jv_ pages_count		tinyboxcompany.co.uk
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the number of pages a user views.
jv_ invitation_time		tinyboxcompany.co.uk
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the time of appearance of proactive invitation.
jv_ country		tinyboxcompany.co.uk
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the country of the visitor.
jv_ city		tinyboxcompany.co.uk
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the city of the visitor.
jv_ close_time		tinyboxcompany.co.uk
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the time the widget was closed.
jv_ cw_timer		tinyboxcompany.co.uk
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the time the callback request was initiated.
jv_ callback_ping_response		tinyboxcompany.co.uk
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the cash of callback backend script response.
jv_ use_lp		tinyboxcompany.co.uk
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the flag that enables long pooling.
jv_ mframe_protected		tinyboxcompany.co.uk
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the indication if iframe is forbidden.
jv_ ab_test_group		tinyboxcompany.co.uk
Cookie purpose description: These cookies are used to collect information about how visitors use our site for our 3rd party chat application, JivoChat. This cookie records the a/b testing group flag.
Cookie Name		Cookie Provider		Cookie Description	Cookie Type
recently_viewed_product		Magento		Stores product IDs of recently viewed products for easy navigation	1st Party
recently_viewed_product_previous		Magento		Stores product IDs of recently previously viewed products for easy navigation	1st Party
recently_compared_product		Magento		Stores product IDs of recently compared products	1st Party
recently_compared_product_previous		Magento		Stores product IDs of previosuly compared products for easy navigation	1st Party
COOKIE		DURATION		DESCRIPTION	COOKIE TYPE
PHPSESSID		4 days 4 hours		This cookie is native to PHP applications. The cookie stores and identifies a user's unique session ID to manage user sessions on the website. The cookie is a session cookie and will be deleted when all the browser windows are closed.	Necessary
wp_ga4_customerGroup		1 year		No description	Other
__cf_bm		1 Hour		This cookie, set by Cloudflare, is used to support Cloudflare Bot Management.	Necessary
_gcl_au		3 months		Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services.	Analytics
_ga_*		1 year 1 month 4 days		Google Analytics sets this cookie to store and count page views.	Analytics
_gid		1 Day		Google Analytics sets this cookie to store information on how visitors use a website while also creating an analytics report of the website's performance. Some of the collected data includes the number of visitors, their source, and the pages they visit anonymously.	Analytics
_dc_gtm_UA-*		1 Minute		Google Analytics sets this cookie to load the Google Analytics script tag.	Functional
_uetsid		1 Day		Bing Ads sets this cookie to engage with a user that has previously visited the website.	Performance
_uetvid		1 Year 24 Days		Bing Ads sets this cookie to engage with a user that has previously visited the website.	Performance
MUID		1 Year 24 Days		Bing sets this cookie to recognise unique web browsers visiting Microsoft sites. This cookie is used for advertising, site analytics, and other operations.	Advertisement
__cfruid		Session		Cloudflare sets this cookie to identify trusted web traffic.	Necessary
_fbp		3 months		Facebook sets this cookie to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising after visiting the website.	Analytics
cf_clearance		1 Year		.r1.dotdigital-pages.com	Other
form_key		1 Day		Magento sets this cookie as a security measure that appends a random string to all form submissions to protect the data from Cross-Site Request Forgery (CSRF).	Functional
mage-cache-storage		4 Days 4 Hours		Magento sets this cookie for local storage of visitor-specific content that enables e-commerce functions.	Functional
mage-cache-storage-section-invalidation		4 Days 4 Hours		Magento sets this cookie for local storage of specific content sections that should be invalidated.	Functional
mage-cache-sessid		4 Days 4 Hours		Magento sets this cookie as a value, and this cookie triggers the cleanup of local cache storage. When the cookie is removed by the backend application, the administrator cleans up local storage and sets the cookie value to true.	Functional
mage-messages		4 Days 4 Hours		Magneto sets this cookie to manage the web messages for the user.	Necessary
form_key		4 Days 4 Hours		Magento sets this cookie as a security measure that appends a random string to all form submissions to protect the data from Cross-Site Request Forgery (CSRF).	Functional
amcookie_policy_restriction		10 Days		Amasty GDPR sets this cookie to check whether the user has accepted the cookie consent box or not.	Necessary
product_data_storage		4 Days 4 Hours		Magneto sets this cookie to store the product information.	Necessary
wp_ga4_user_id		Past		tinyboxcompany.co.uk	Other
mage-cache-storage		Never		Magento sets this cookie for local storage of visitor-specific content that enables e-commerce functions.	Functional
mage-cache-storage-section-invalidation		Never		Magento sets this cookie for local storage of specific content sections that should be invalidated.	Functional
recently_compared_product_previous		Never		Magneto sets this cookie to store the data on recently compared products.	Necessary
recently_compared_product		Never		Magento 2 set this cookie to store information on recently compared products.	Necessary
product_data_storage		Never		Magneto sets this cookie to store the product information.	Necessary
recently_viewed_product		Never		Magento 2 set this cookie to store product IDs of recently viewed products for easy navigation.	Necessary
recently_viewed_product_previous		Never		Magento 2 set this cookie to stores product IDs of recently viewed products for easy navigation.	Necessary
LP-7768D66EF909B12B7JXA503258B5C0762F79		1 Month		r1.dotdigital-pages.com	Other
responder-7JXA-66O		Session		r1.dotdigital-pages.com	Other
Survey-Started-541a0bdff0111f5b7jbcfd58abee42187f40		1 Hour		r1.dotdigital-pages.com	Other
Disqus				Disqus uses 'authentication' cookies, e.g., sessionid, disqusauth, and disqusauths, to keep you logged in from your web browser and personalize your Disqus experience. Disqus uses 'unique' cookies, e.g., disqus_unique and _jid, to associate web-based activities with a page load and with a web browser, including activities that violate our Terms of Service, and understand your interests and product usage. When Disqus loads ads, we use ad serving technologies from Google that may set cookies for the purposes of personalized marketing, associating ads with later activities, and limiting how often you are shown specific ads.	Session
Amazon S3
Cloudflare				Cloudflare is a content delivery network (CDN) and cloud security platform that provides website optimization, security, and performance services. It acts as a mediator between a website’s server and its visitors, improving the speed and reliability of the website while also protecting it from online threats.
Font Awesome
Direct Registration
Google Analytics 4				Analytics cookies or performance cookies are used to track website visitors and their user behaviour. This data is then used to improve the way the website works and in turn, used to improve user experience. Google Analytics (GA) cookies are one of the most common analytics cookies set by websites.
Google Fonts				Google Fonts makes it easy to bring personality and performance to your websites and products. Our robust catalog of open-source fonts and icons makes it easy to integrate expressive type and icons seamlessly — no matter where you are in the world.
Google Tag Manager				Google Tag Manager sets the cookie to experiment advertisement efficiency of websites using their services.
hCaptcha				hCaptcha helps your favorite online services keep out bots, spam, and abuse by asking simple questions that are easy for humans and difficult for machines. A service you use has chosen to improve your experience on their site by installing hCaptcha to reduce malicious traffic.
Meta ads conversion tracking Meta Events Manager
Micorsoft Advertising
One signal				OneSignal is a service that enables push notifications, abstracting details such as the platform the device is running on.
Paypal				Paypal use performance cookies to understand how you interact with our site. For example, performance cookies help us learn which parts of PayPal are the most popular and which parts we could improve for you. We use functional cookies to customize your experience.
Pingdom				Pingdom is a global performance and availability monitoring solution for your websites, applications and servers. With our comprehensive monitoring platform, we help you deliver the best possible web experience to your customers.
Stripe
Zendesk Widget

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer. We only use (and store) non-essential cookies on your computer's browser or hard drive if you provide your consent.

Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, which we do not have any control over. These cookies are likely to be analytical/performance cookies or targeting cookies.

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.

We also link to third party social media sites, you can find thier Cookie policies here:
Meta: Facebook/Instagram

X / Twitter

Google

Microsoft

Linkedin

Pinterest

Where is my data stored?

All information you provide to us is stored on our secure servers or those of our third parties, in the UK

Where we have given you (or where you have chosen) a password which enables you to access certain parts of our site, you are responsible for keeping this password confidential. You must not share your password with anyone.

How long do we retain your data for?

Where you have purchased goods from us, we will retain your data for a period of 7 years for legal purposes, to ensure that we are able to assist you should you have any questions, feedback or issues in connection with a product you have purchased from us or if any legal issues arise – For example a VAT issue.

If you tell us that you no longer wish to receive marketing communications from us, we promise to stop sending them to you.

Where we have processed your data for any other reason (such as where you have contacted us with a question in connection with potentially purchasing a product) we will retain your data for 3 years.

Your right to object under data protection laws

You have the right to object to us handling your personal information when:

• we are handling your personal information based on our legitimate interests (as described in the “How do you use my data” section above). If you ask us to stop handling your personal information in this way, we will stop unless we can show you that we have compelling grounds as to why our use of your personal information should continue; or
• for marketing purposes. If you ask us to stop handling your personal information on this basis, we will stop.

What are my rights under data protection laws?

You have various rights under the data protection laws, which you can exercise by contacting us. The easiest way to do this is by email at [email protected] .

Right of access

You are entitled to receive confirmation as to whether your personal information is being processed by us, as well as various other information relating to our use of your personal information.

You also have the right to access your personal information which we are handling.

Right to rectification

You have the right to require us to rectify any inaccurate personal information we hold about you. You also have the right to have incomplete personal information we hold about you completed, by providing a supplementary statement to us.

Right to restriction

You can restrict our processing of your personal information where:

• you think we hold inaccurate personal information about you;
• our handling of your personal information breaks the law, but you do not want us to delete it;
• we no longer need to process your personal information, but you want us to keep it for legal reasons; or
• where we are handling your personal information because we have a legitimate interest (as described in the “How We Use Your Data” section above), and you are in the process of objecting to this use of your personal information.

Where you exercise your right to restrict us from using your personal information, we will then only process your personal information when you agree, except for storage purposes and to handle legal claims.

Right to data portability

You have the right to receive the personal information we hold about you in a structured, standard machine readable format and to send this to another organisation controlling your personal information.

Right to erasure

You have the right to require us to erase your personal information which we are handling in the following circumstances:

• where we no longer need to use your personal information for the reasons we told you we collected it for;
• where we needed your consent to use your personal information and you have withdrawn your consent;
• when you object to our use of your personal information and we have no compelling reason to carry on handling your personal information;
• if our handling of your personal information has broken the law;
• when we must erase your personal information to comply with a law we are subject to.

When you purchase products from Tiny Marketplace Ltd (TML)

When you place an order, we share your information with the relevant seller on TML (“Partner”) so that they can process and arrange delivery of your order. As part of the buying and selling process, TML will share information between the two members involved in the transaction. Such partners will process your personal information in accordance with their own privacy policies. In some instances, while they are subject to TML’s privacy and security requirements, these partners, not TML, are responsible for the protection of personal information under their control.

Both Tiny Box Company and our Partners are independent controllers of buyer information and make separate independent decisions about use of personal data.

 

Right to complain

You have the right to lodge a complaint with the Information Commissioner's Office, the supervisory authority for data protection issues in England and Wales.

What about websites we link to?

Our site may, from time to time, contain links to and from the websites of our partner networks and affiliates. 

Our site connects you to different websites.  If you follow a link to any of these websites or use our services, please note that you have left our site and these websites have their own privacy policies. 

We do not accept any responsibility or liability for these policies or websites.  Please check their policies before you submit any personal information to these websites.

When will you change your privacy policy?

Any changes we make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail or post.

Please check back frequently to see any updates or changes to our privacy policy.

How do I contact you with feedback?

Questions, comments and requests regarding this privacy policy are welcomed and should be addressed to [email protected] .