Privacy
Policy

MyPacking is a packaging solutions provider based in Exeter, United Kingdom. We are committed to protecting your privacy and complying with UK GDPR and the Data Protection Act 2018.

We collect information that you provide directly to us and information that is collected automatically when you use our website.

Information you provide:

• Account Information: Name, email address, phone number, billing/shipping address
• Order Information: Products purchased, order history, delivery preferences
• Design Files: Any artwork, logos, or designs you upload for custom orders
• Payment Information: Processed securely by our payment providers (we do not store your card details)
• Communications: Messages you send us via email, WhatsApp, or contact forms

Information collected automatically:

• Usage Data: Pages visited, products viewed, time spent on site
• Device Information: Browser type, IP address, device type, operating system
• Cookies: See our Cookie Policy section below

We use your information to provide and improve our services:

• Order Fulfillment: Processing and delivering your orders
• Customer Service: Responding to your inquiries and providing support
• Design Services: Creating custom designs based on your specifications
• Account Management: Maintaining your account and order history
• Payment Processing: Processing transactions securely
• Communication: Sending order updates, shipping notifications, and important service messages
• Marketing: Sending promotional emails (only with your consent—you can opt out anytime)
• Website Improvement: Analyzing usage to improve our website and services
• Legal Compliance: Meeting legal obligations and protecting our rights

We never sell your personal data. We only share your information with trusted partners who help us operate our business:

• Payment Processors: Secure payment gateways (Stripe, PayPal, etc.) to process transactions
• Shipping Carriers: Courier services to deliver your orders
• Email Services: Email providers to send order confirmations and communications
• Hosting Providers: Services that host our website (Shopify)
• Analytics Tools: Tools that help us understand website usage (anonymized data)

All third-party services are carefully selected and required to protect your data according to GDPR standards.

We use cookies and similar technologies to improve your experience on our website.

Types of cookies we use:

• Essential Cookies: Required for the website to function (shopping cart, login)
• Performance Cookies: Help us understand how visitors use the site
• Functional Cookies: Remember your preferences (language, region)
• Marketing Cookies: Track visits across websites for relevant advertising (only with consent)

We take data security seriously and implement appropriate technical and organizational measures:

• Encryption: All data transmitted is encrypted using SSL/TLS
• Secure Storage: Data is stored on secure servers with restricted access
• Payment Security: We never store your card details—payments are processed by PCI-DSS compliant providers
• Access Controls: Only authorized personnel can access personal data
• Regular Updates: Security measures are regularly reviewed and updated

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain your personal data only as long as necessary:

• Account Data: Retained while your account is active and for a reasonable period after closure for legal/business purposes
• Order Data: Retained for 7 years to comply with UK tax and accounting requirements
• Marketing Data: Retained until you unsubscribe or request deletion
• Website Analytics: Aggregated and anonymized data may be retained indefinitely

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal requirements)
• Right to Restriction: Limit how we use your data
• Right to Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing for direct marketing or legitimate interests
• Right to Withdraw Consent: Withdraw consent for marketing at any time

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately.

Your data is primarily stored and processed within the UK and EU. However, some of our service providers may be located outside the UK/EU.

When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by the UK government
• Service providers certified under appropriate frameworks

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect personal information from children under 18.

If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

When we make significant changes:

• We'll update the "Last updated" date at the top
• We may notify you via email or website notice
• Continued use of our services after changes constitutes acceptance

If you have any questions about this Privacy Policy, how we handle your data, or wish to exercise your rights, please contact us:

We aim to respond to all privacy inquiries within 30 days as required by UK GDPR.