Coming From A Good Place is responsible for the personal information collected through this website and our gifting enquiries. We are not a limited company. For privacy questions, write to info@comingfromagoodplace.co.uk or Aizlewoods Mill, Nursery Street, Sheffield S3 8GG.
What we collect
We collect the details you provide in contact and enquiry forms, box-builder designs, accounts and orders. This may include your name, email, company, contact details, budget, quantity, preferred delivery date, messages, branding files and delivery addresses. We keep relevant correspondence, consent choices and order records. Technical information, such as connection details and security logs, helps us operate and protect the website. Stripe handles payment-card information directly; we do not store your full card number or security code.
Why we use it
We use enquiry details to answer questions and take steps at your request before a contract. We use order and recipient details to prepare, supply and deliver your gifts, administer payment and resolve issues. These activities rely on taking steps towards, or performing, a contract where that applies. Our legitimate interests include communicating with business contacts, keeping proportionate business records, preventing misuse and running a secure service. Accounting and other legal records are kept to meet legal obligations.
Replies and optional planning emails
When automated sending is enabled, a contact or gifting enquiry may receive an automatic acknowledgement so you know it has arrived. Acknowledgements and essential order updates are service messages. The optional planning-email checkbox is separate: choosing it allows two helpful emails about your gifting enquiry, normally after one day and four days. It is not required to send an enquiry. Reply asking us to stop, or contact us at the address above, to withdraw this choice. We record the choice with your submission. We will not treat a general enquiry as permission for unrelated marketing.
Cookies and analytics
Essential cookies and browser storage support security, accounts, baskets and box-builder progress. Optional Google Analytics is loaded only when you allow analytics through the cookie preferences. You can change that choice using “Cookie settings”. See our cookie policy for details.
Who receives information
We share only the information needed with providers that support hosting, email delivery, payments, production and delivery, and with professional advisers or authorities where necessary. Stripe processes payments. The website’s configured email service is Resend when enabled. Google receives analytics information only where optional analytics is permitted. We do not sell personal information.
Where a provider processes information outside the UK, we must assess the transfer and use an applicable adequacy arrangement or other lawful safeguard. Contact us if you would like information about the arrangements relevant to your data.
Recipient details and sensitive requirements
If you supply other people’s names or addresses, please ensure you are entitled to share them and provide appropriate privacy information. Send only what we need for delivery. Avoid putting medical information or other sensitive details into a general form. If a dietary or ingredient requirement reveals health information, contact us to agree how the necessary information should be handled.
How long we keep it
Order, invoice and accounting records are normally kept for six years after the relevant financial period, or longer where a legal obligation or dispute requires it. Unsuccessful enquiries and unfinished box designs are reviewed after 24 months so unnecessary information can be removed. We keep security records, consent evidence and correspondence for proportionate periods according to their purpose. Retention is reviewed rather than treating every record as necessary forever.
Your choices and rights
Depending on the circumstances, you can ask to access, correct or erase your information, restrict its use, object to processing based on legitimate interests, or receive portable data. You can withdraw consent without affecting lawful use before withdrawal. You can object to direct marketing at any time. These rights are subject to applicable legal conditions; we may need to verify your identity. We normally respond to a rights request within one month and will explain if an extension is permitted and needed.
Contact and complaints
Send requests to info@comingfromagoodplace.co.uk. If we cannot resolve your concern, you can complain to the Information Commissioner’s Office. We will update this notice if the way we handle information changes.