Privacy policy
Privacy Policy
Black Country Boxes — operated by JB1 Supplies Limited
Last updated: 3 November 2026
1. Introduction
JB1 Supplies Limited, trading as Black Country Boxes ("we", "us" or "our"), respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store, share and protect personal information when you visit blackcountryboxes.co.uk, purchase products, contact us or otherwise interact with our business.
We process personal information in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Who We Are
Legal company: JB1 Supplies Limited
Trading name: Black Country Boxes
Company registration number: 14623071
Registered in: England and Wales
Registered office:
Staffordshire Knot,
Pinfold Street,
Wednesbury,
England, WS10 8TE.
Trading address:
Unit 2 Ridgacre Enterprise Park,
West Bromwich,
B71 1BW,
United Kingdom.
Email: info@blackcountryboxes.co.uk
Telephone: 0121 517 1500
Website: https://blackcountryboxes.co.uk
JB1 Supplies Limited is the data controller for personal information that it determines the purposes and means of processing in connection with operating Black Country Boxes.
Some third-party providers may act as independent controllers for their own processing activities. Their privacy notices explain those activities.
3. Personal Information We Collect
We collect information necessary to operate our online store, fulfil orders, provide customer support, maintain website security and improve our services.
3.1 Information You Provide
When you purchase products, contact us or create an account, we may collect:
- Your name and contact details.
- Email address and telephone number.
- Billing and delivery addresses.
- Order details and purchase history.
- Product enquiries and customer-service correspondence.
- Information relating to returns, refunds or complaints.
- Account information where customer accounts are available.
- Marketing preferences and communications choices.
3.2 Payment Information
Payments are processed using Shopify and supported third-party payment service providers.
Payment providers may process payment-card information, transaction details, billing information and information required to prevent fraud.
We generally receive transaction confirmations and limited payment-related information rather than full payment-card details.
3.3 Information Collected Automatically
When you visit our website, we may collect:
- IP address and approximate location information.
- Browser type, device type and operating system.
- Pages viewed and products visited.
- Website navigation and interaction information.
- Referral sources and search terms.
- Shopping-cart and checkout activity.
- Cookie identifiers and similar technical information.
- Information used to maintain website security and detect suspicious activity.
Some information is collected through cookies, pixels, analytics technologies and server logs, subject to applicable consent requirements.
4. How We Use Your Information
We use personal information for the following purposes:
- Processing and fulfilling customer orders.
- Arranging delivery and providing tracking information.
- Communicating about orders and enquiries.
- Processing returns, refunds and complaints.
- Providing customer support.
- Maintaining customer accounts where available.
- Preventing fraud and protecting our website.
- Meeting accounting, tax and other legal obligations.
- Understanding website performance and improving our services.
- Sending marketing communications where permitted.
- Measuring advertising performance where legally permitted.
We do not use personal information for purposes incompatible with those described in this policy without an appropriate lawful basis.
5. Lawful Bases for Processing
Under UK GDPR, we must have a lawful basis for processing personal information.
Contractual Necessity
We process information where necessary to enter into or perform a contract with you, including processing orders, arranging delivery and providing customer service relating to purchases.
Legal Obligations
We process information where required to comply with applicable laws, including tax, accounting, consumer protection and other legal requirements.
Legitimate Interests
Where appropriate, we process information for legitimate business interests, including fraud prevention, website security, customer-service improvement and business administration.
We consider your rights and interests before relying on this basis.
Consent
Where required, we obtain consent before using non-essential cookies, certain analytics or advertising technologies, or sending marketing communications.
You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
6. Shopify and Ecommerce Services
Our online store is powered by Shopify.
Shopify provides ecommerce infrastructure, including shopping-cart functionality, checkout, order processing, customer-account features and other store services.
Shopify may process customer information on our behalf and, for certain services, as an independent controller.
Further information is available in Shopify's Privacy Policy.
7. Sharing Personal Information
We may share personal information with trusted service providers where necessary to operate our business.
These may include:
- Shopify and ecommerce technology providers.
- Payment processors and fraud-prevention providers.
- Delivery and courier companies.
- Website hosting and technical service providers.
- Customer-service and communication providers.
- Analytics and advertising providers, where permitted.
- Professional advisers, including accountants and legal advisers.
- Regulators, law enforcement or other authorities where legally required.
We only share information where there is an appropriate lawful basis and where relevant contractual and security protections apply.
We do not sell customer contact lists to third parties.
Where advertising technologies involve disclosures of personal information, those disclosures are described in the relevant sections of this policy and governed by applicable consent requirements.
8. Delivery and Fulfilment
When you place an order, we share relevant delivery information with the courier or delivery provider responsible for transporting your goods.
This may include your name, delivery address, telephone number, email address and order or parcel information.
Delivery providers use this information to fulfil deliveries, provide tracking updates and resolve delivery problems.
9. Marketing Communications
We may send promotional emails about our products, special offers or services where you have consented or where another lawful marketing permission applies.
Where legally permitted, we may contact existing customers about similar products or services, provided the applicable requirements are met.
You can unsubscribe from promotional emails using the unsubscribe link included in marketing messages or by contacting us.
Unsubscribing from marketing does not prevent essential transactional communications concerning orders, deliveries or customer-service enquiries.
10. Analytics and Advertising
We may use analytics and advertising services to understand website usage, assess marketing performance and improve our online store.
Depending on the services enabled, these may include Google Analytics, Google Ads, Microsoft Advertising and other advertising or measurement providers.
These services may use cookies, pixels or similar technologies to collect information about website visits and interactions.
Where UK law requires consent for these technologies, we will seek consent before enabling them.
You can manage relevant cookie preferences through the privacy controls available on our website.
Additional information about Google's privacy practices is available at Google Privacy Policy.
Information about Microsoft's privacy practices is available at Microsoft Privacy Statement.
11. Cookies and Similar Technologies
Cookies are small files stored on your device when you visit a website.
Our website may use the following categories of cookies:
Strictly Necessary Cookies
These support essential website functions, including shopping carts, checkout, security and session management.
They do not generally require consent where they are strictly necessary to provide a service requested by you.
Analytics Cookies
These help us understand website traffic, visitor behaviour and website performance.
Advertising Cookies
These may help measure advertising effectiveness and deliver relevant advertisements where the relevant services are enabled.
Functional Cookies
These may remember preferences or support additional website features.
We obtain consent for non-essential cookies where required by law.
You may also manage cookies through your browser settings. Disabling essential cookies may affect website functionality.
For further information about cookies used by Shopify, visit Shopify's Cookie Policy.
12. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer support, complying with legal obligations and resolving disputes.
Accounting and transaction records may need to be retained for periods required by applicable tax and accounting legislation.
Other information, including marketing preferences, customer-service correspondence and website analytics, is retained according to the purpose of processing, applicable legal requirements and our operational retention practices.
When information is no longer required, we take reasonable steps to delete, anonymise or securely dispose of it.
13. International Data Transfers
Some service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred internationally, we take steps to ensure that appropriate safeguards are in place where required by UK data protection law.
These safeguards may include UK adequacy regulations, appropriate contractual protections or other legally recognised transfer mechanisms.
Further information about Shopify's international data processing is available through its published privacy documentation.
14. Information Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.
These measures may include secure ecommerce infrastructure, access controls, encrypted communications and security procedures appropriate to the information processed.
However, no online transmission or storage system can be guaranteed to be completely secure.
15. Automated Decision-Making and Fraud Prevention
Our ecommerce and payment service providers may use automated systems to identify potentially fraudulent transactions and protect customers and businesses.
These systems may assess transaction details, technical identifiers and other relevant information.
We do not currently intend to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals without complying with applicable legal requirements.
Where you believe an automated decision has significantly affected you, please contact us so that we can investigate the circumstances and explain any applicable rights.
16. Your Data Protection Rights
Subject to applicable UK data protection law, you may have the right to:
- Request access to personal information held about you.
- Request correction of inaccurate information.
- Request erasure of personal information in certain circumstances.
- Request restriction of processing.
- Object to certain processing, including direct marketing.
- Request data portability where applicable.
- Withdraw consent where processing is based on consent.
- Exercise rights relating to certain automated decisions.
These rights are subject to applicable conditions and exceptions.
To exercise your rights, contact info@blackcountryboxes.co.uk.
We may request reasonable information to verify your identity before responding.
We aim to respond within the time limits required by applicable law, normally within one month, subject to permitted extensions.
17. Children's Privacy
Our website primarily provides packaging products and is not specifically directed at children.
We do not knowingly seek to collect children's personal information for independent marketing purposes.
If you believe a child has provided personal information inappropriately, please contact us.
18. Third-Party Websites
Our website may contain links to websites operated by third parties.
We are not responsible for the privacy practices of independently operated third-party websites.
We recommend reviewing their privacy notices before providing personal information.
19. Complaints
If you have concerns about how we handle your personal information, please contact us first so that we can investigate and respond.
You also have the right to complain to the UK Information Commissioner's Office (ICO).
Information Commissioner's Office
Website: https://ico.org.uk
You do not need to contact us before raising a complaint with the ICO.
20. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our business practices, technology, service providers or legal obligations.
Any updated version will be published on this page with a revised update date.
Where required by law, we will provide additional notice or obtain consent for material changes.
21. Contact Us
For privacy enquiries, data protection requests or complaints, please contact:
JB1 Supplies Limited
Trading as Black Country Boxes
Company number: 14623071
Registered office:
Staffordshire Knot,
Pinfold Street,
Wednesbury,
England, WS10 8TE.
Trading address:
Unit 2 Ridgacre Enterprise Park,
West Bromwich,
B71 1BW,
United Kingdom.
Email: info@blackcountryboxes.co.uk
Telephone: 0121 517 1500
Website: https://blackcountryboxes.co.uk
Last updated: 3 November 2026