We collect as little as possible — just enough to make and deliver your certificate. Open A Box is the data controller for the information described here. Our full business details are in our Terms.
What we collect
- The name on the certificate — which may be yours or the person you're gifting it to.
- Your email address — to send your certificate and receipt.
- Order details — date, amount, certificate number and payment status.
Card details are entered directly with Stripe, our payment provider. We never see or store them.
Why we use it
To perform our contract with you (creating, delivering and supporting your order) and to meet legal obligations such as keeping financial records. We do not use your data for marketing, we don't sell it, and we don't send newsletters.
Who we share it with
- Stripe — to process your payment.
- Our email delivery provider — to send your certificate.
- Our hosting provider — to run this website and store order records securely.
These providers act on our instructions. Some may process data outside the UK under appropriate safeguards.
How long we keep it
Your certificate download link expires after a limited period. We keep order records for up to 6 years for accounting and tax purposes, then delete them.
Cookies
This site doesn't use advertising or analytics cookies. Stripe may set strictly necessary cookies during checkout to prevent fraud.
Your rights
Under UK data protection law you can ask to access, correct or delete your data, or object to how we use it. Email info@openabox.biz. If you're unhappy with our response, you can complain to the Information Commissioner's Office (ico.org.uk).