Privacy Policy

Our Contact Details:

Rainbow Tree Box

Email: nicky@rainbowtreebox.com

What type of information we hold and why we need it.

We currently collect and process the following information:

Rainbow Tree Box holds the following information and the reasons why we hold this information are listed below:

Name – requested for posting boxes out and knowing who the customer is

Address – requested for posting boxes
Email address – requested for correspondence when making an order and with permission/consent to send information about Rainbow Tree Box
Phone number – To inform the customer of any problems or issues that may delay them in receiving their box.

Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:

a) Your consent. You can remove your consent at any time. You can do this by emailing nicky@rainbowtreebox.com
b) We have a contractual obligation to those who have subscribed to receive Rainbow Tree Box boxes.

How we get the information

The information is provided by the customer upon enquiry and completion of an order.

Enquiries made by email, telephone, text message or email – information given by the customer and only used upon completion of an order or booking form.

Messages and emails that contain personal information will be deleted.

Order forms, booking forms and enquiries are completed on the Rainbow Tree Box website.

What we do with the information

The above information is electronically stored, and password protected. The file that contains the information is encrypted.
Any information given on paper is electronically stored securely in the above manner and shredded.
Rainbow Tree Box website is linked to Stripe payment system. Please see their Privacy Policy here:

If your personal data is shared by you to Rainbow Tree Box on social media platforms, we will securely store the information and delete messages. Please also see the social media platform’s Privacy Policies.

How we store your information

Your information is processed and stored through our secure website and payment processing provider; it is held no longer than necessary in compliance with GDPR regulations.

Your data protection rights

Under data protection law, you have rights including:

Your right of access – You have a right to ask us for copies of your personal information.

Your right to rectification – You have a right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.

Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.

Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.

Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.

Your right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.

Please contact us at nicky@rainbowtreebox.com if you wish to make a request.

How to complain

You can also complain to the ICO if you are unhappy with how we have used your data.

The ICO’s address:

Information Commissioner’s Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

Helpline number: 0303 123 1113