Privacy Policy

This Privacy Policy describes how Cardboard Adventures Ltd (“we,” “our,” or “us”) collects, uses, and shares your personal information when you interact with our website, purchase products, attend workshops or shows, or engage with us on social media and related platforms.

We collect both the information you choose to provide and technical data gathered automatically when you use our Services. This may include your name, email address, postal address, phone number, and payment information, which are collected at checkout or when you contact us. We also collect analytics and usage data such as IP address, browser type, device info, and page interaction metrics to improve our website and services.

By engaging with our Services—whether purchasing, attending, or browsing—you consent to our collection and use of your data for purposes including communication, fulfilment, and account administration. If we request your data for any optional purposes, such as joining a mailing list, we will provide a clear opt-in option. You may withdraw consent at any time by contacting us atinfo@cardboardadventures.co.uk.

We do not sell or rent your personal data. However, we may disclose it in limited circumstances—such as compliance with legal requirements, to enforce our policies, or as part of a business transfer or merger. Additionally, certain trusted service providers (like payment processors or delivery partners) may access your data in order to complete transactions or services on our behalf. These third parties are governed by their own privacy practices, which we encourage you to review.

Our website and online store and online workshops are hosted via WIX, which uses secure servers and encrypted connections to store and protect your data. When using a direct payment method, your data is processed according to PCI-DSS standards. Data is retained only as long as necessary to complete your transaction or meet legal requirements.

Be aware that some service providers or data storage systems may operate from jurisdictions outside the UK. This means your data may be subject to the laws of those regions. For instance, data hosted in the United States may be accessible under American legislation such as the Patriot Act.

We may occasionally link to external websites for reference or partner purposes. Please note that we are not responsible for the privacy or content policies of those third-party sites. Always review their terms before submitting personal information.

We take data security seriously. All transmissions are encrypted via SSL technology and all personal data is stored using AES-256 encryption. While no digital system is immune to risk, we follow industry standards and best practices to protect your information.

Cookies are used on our website to improve functionality and user experience. These small data files help us remember your preferences, manage your shopping cart, and collect anonymous analytics. You may disable cookies through your browser settings if preferred, although doing so may affect how our site functions.

By using our Services, you confirm that you are of legal majority age in your jurisdiction, or are a guardian consenting to a minor’s use of the site under your supervision.

We reserve the right to modify this policy at any time. Changes will take effect as soon as they are published on our website. Significant changes may also be communicated by email, where appropriate. If the company is sold or merged, your data may be transferred as part of that transaction.

Depending on your location and applicable law, you may have the right to access, correct, or delete your personal data; object to or restrict processing; or file a complaint with a data protection authority. We will always respect and comply with your legal rights regarding your data.
 

​