Privacy Policy
Last updated: 16 May 2026
In plain English: we only collect the details you give us so we can talk to you about cardboard collection and our service. We never sell your data, and we never share it for marketing. We keep it secure and only as long as we need it.
Who we are
BoxBack ("we", "us", "our") is a London-based cardboard collection and circular packaging business, and an Under One Tree company. We are the data controller for the information described in this policy. If you have any questions, contact us at hello@boxback.co.
What we collect
We only collect information you choose to give us — typically when you register your interest through our sign-up form. This may include:
- Your business name and contact name
- Email address and phone number
- Business type, postcode, and details about your cardboard waste
- Anything else you choose to tell us in a message or enquiry
We do not collect payment card details, and we do not knowingly collect information from anyone under 18.
How we use it
We use your information only to:
- Contact you about registering for BoxBack and our launch
- Plan and arrange cardboard collection or our services for your business
- Respond to your questions and keep you updated about your enquiry
- Improve and operate our service
Our lawful basis for this is your consent (when you sign up) and our legitimate interest in responding to and serving businesses that contact us.
We never sell your data
We will never sell, rent, or trade your personal information to anyone. We do not share it for third-party advertising or marketing.
Who we share it with
We only share information with trusted service providers who help us operate — for example, the form and email tools we use to receive and manage your enquiry (such as Google, which hosts our sign-up form). These providers act on our instructions and are not permitted to use your information for their own purposes. We may also disclose information if required by law.
How we keep it secure
We take reasonable technical and organisational measures to protect your information against loss, misuse, and unauthorised access. Access is limited to people who need it to do their job.
How long we keep it
We keep your information only for as long as we need it for the purposes above — typically while you are an active or prospective partner — and then delete or anonymise it. You can ask us to delete your details at any time.
Your rights
Under UK data protection law you have the right to access the personal information we hold about you, to ask us to correct or delete it, to object to or restrict how we use it, and to withdraw consent at any time. To exercise any of these, email hello@boxback.co. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Cookies
Our site uses minimal cookies needed to function. Embedded tools, such as our Google sign-up form, may set their own cookies governed by their own privacy policies.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page with a revised "last updated" date.
Contact
Questions about this policy or your information? Email hello@boxback.co and we'll be glad to help.