Privacy Policy

1. What Information We Collect

We collect information in the following ways:

• Contact Information: Name, email address, phone number, and postal address when you submit contact forms or franchise enquiries.
• Usage Data: Information about how you interact with our website, including pages visited, time spent, and clicks. This is collected via Google Analytics.
• Device Information: Browser type, operating system, IP address, and device identifiers for analytics and security purposes.
• Location Data: Approximate location inferred from IP address and timezone for regional compliance purposes.
• Cookies and Tracking: We use cookies to store your consent preferences and enhance your browsing experience.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Contact Information: To respond to your enquiries, process franchise applications, and provide customer support.
• Usage Data: To understand user behaviour, improve our website, and optimise marketing efforts.
• Device Information: To ensure website security, prevent fraud, and maintain service quality.
• Location Data: To determine your region for compliance with applicable privacy laws.
• Cookies: To remember your consent preferences and provide a personalised experience.

3. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience. For a detailed list of cookies we use, please visit our Cookie Policy.

Cookie categories include:

• Necessary: Essential for site functionality and security.
• Analytics: Help us understand how you use our site.
• Marketing: Enable personalised advertising and retargeting.
• Preferences: Remember your settings and preferences.

4. Your Rights Under UK GDPR

As a UK-based business operating under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are committed to upholding your data protection rights. You have the following rights regarding your personal data:

• Right of Access: You have the right to request a copy of the personal data we hold about you (Subject Access Request).
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: You have the right to request deletion of your personal data where there is no compelling reason for its continued processing ("right to be forgotten").
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Right to Object: You have the right to object to processing of your personal data where we rely on legitimate interests or for direct marketing purposes.
• Rights Related to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects.
• Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@dumbox.co.uk. We will respond to your request within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been infringed.

5. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. We rely on the following bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., analytics and marketing cookies).
• Contract: Where processing is necessary to fulfil a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., website security, fraud prevention) and these are not overridden by your rights.
• Legal Obligation: Where processing is necessary to comply with a legal obligation.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, or as required by law.

• Contact Information: Retained for 3 years after last contact, or as required for legal compliance.
• Usage Data: Retained for up to 2 years for analytics purposes.
• Consent Records: Stored in your browser's localStorage until you clear your cookies or withdraw consent.
• Device Information: Retained for security and fraud prevention purposes.

7. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

8. Last Updated

This Privacy Policy was last updated on 11 June 2026. We may update this policy from time to time to reflect changes in our practices or applicable laws. We encourage you to review this policy periodically.