Data Protection and Privacy Policy

eCraftBox LTD, operating as LuxifyHQ, is fully committed to protecting your personal data and privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Controller Information

• Company Name: eCraftBox LTD
• Registered Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
• Email: [email protected]

2. Purpose of Data Collection

We collect personal information to fulfill orders, provide customer support, process payments, analyze website performance, and—only with your explicit consent—send marketing communications such as discount codes and new product alerts.

3. Types of Data We Collect

• Full name
• Email address
• Shipping and billing addresses
• Phone number
• Order and payment details (processed securely via third parties)
• Custom sizing or product-related instructions

4. Legal Basis for Processing

We only process your data when one of the following conditions is met:

• To fulfill a contract (e.g., delivering your order)
• To comply with legal obligations
• With your explicit consent (e.g., for marketing emails)
• For legitimate business interests (e.g., improving service quality)

5. Data Sharing and Third Parties

We do not sell or rent your personal data. Your data may be shared only with:

• Trusted payment providers (e.g., Stripe, Iyzico)
• Shipping and logistics partners (e.g., international courier services)
• Platform service providers (e.g., Ticimax infrastructure)

All partners are bound by strict confidentiality and data protection agreements.

6. Data Storage and Retention

Your personal data is stored securely in encrypted environments. We retain your information only for as long as necessary to fulfill orders, comply with legal requirements, or maintain customer service records.

7. Your Rights

Under the UK GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request deletion of your data (“right to be forgotten”)
• Object to certain processing activities
• Withdraw consent at any time (for marketing)

You can exercise these rights by contacting us at [email protected].

8. Updates to This Policy

We reserve the right to update this policy to reflect changes in our services or legal obligations. The most current version will always be available on our website.

By using our website, creating an account, or placing an order, you acknowledge that you have read and accepted the terms of this Data Protection and Privacy Policy.