Privacy Policy

When you use this website (www.letterboxlab.com) you are providing us with personal data, which we collect and process for a variety of purposes. What we definitely don’t do with your data is sell, trade or rent it to other companies for marketing purposes, or any other purpose for that matter. We are not in the business of profiling individuals based on their data and no decisions regarding your data are automated. If you’d like to know what we do do with it, read on.

Who are we?

Letterbox Lab is a trading name of Hatton Science Communication Ltd (‘HSC’), a company registered in England and Wales with company number 10259964. Our office is at Moy Road Industrial Estate, Taff’s Well, Cardiff CF15 7QR. Our data protection officer is Mia Hatton. You can call her on 02921880208 or email her at mia@letterboxlab.com if you would like to discuss any of the details of this privacy policy further. 

What data do we collect?

Information that you provide to us

 

Through this website, you can:

1. Join our mailing list;

   
   If you opt-in to receiving our newsletter via our website, we will collect your email address.
   We will ask you to opt in again to this newsletter if you stop opening our emails for one year. You can unsubscribe from the newsletter at any time from the link provided in each email.
   Our mailing list data is processed using Mailchimp. You can read their privacy policy here.
   Why do we collect this data?
   This data is collected for marketing purposes, but only with your explicit consent.

    

2. Create an account;

   
   If you create an account on our website, we will collect your email address. You can choose to also provide your name, billing address and shipping address.
   Our website account data is processed using Wordpress. You can read their privacy policy here. Data is stored on a secured server owned by Tekeez. You can read their privacy policy here.
   Why do we collect this data?
   Collecting this data and storing it within our website improves the ease of use for you, the User, when you make a purchase from us.

    

3. Make a purchase;

   
   If you make a purchase on our website, we will collect your email address, full name, billing address, and shipping address.
   Our purchase data is processed using WooCommerce, and stored using Google Drive. You can read WooCommerce’s privacy policy here.
   Your payment card details will be collected and processed by Stripe, our payment processor. Whilst we retain limited payment details for our records, we do not store or retain complete payment information. You can read Stripe’s privacy policy here.
   Why do we collect this data?
   After you buy something from us, you would be quite unhappy if we did not post it to you. We collect your shipping address to fulfil our contract to you. Similarly, whilst we would love to be able to send everybody science kits for free, it’s not very viable so we need to collect payment details.
   Because so many of our products work in series, we retain purchase information for three years before aggregating personal information (i.e. changing ‘Joe Blogg’s purchase of Investigate Box 10’ to ‘A sale of Investigate Box 10’). This is for the convenience of our customers, so that they can play through the series easily.

    

4. Make a subscription purchase;

   
   If you purchase a subscription product on our website, you are giving us permission to charge renewal fees after periods as specified within the product description. The same data is collected as above (‘Make a purchase’), but in this instance WooCommerce initiates a new order via Stripe after the period has elapsed. You can cancel this renewal at any time.
   Please note that subscription purchases require an account to be created so that the above processing can take place.

    

5. Send us a message.

   
   If you send a message via email or via our contact form, we will collect any information you provide within that message. 

    

   Our contact form is provided by Typeform. You can read their privacy policy here.

   If you send us a message via our chat box, powered by Pure Chat, we will see your IP address (which does not identify you) and whatever information you send to us as part of the message. Please note that because Pure Chat is based in the US, using this chat box will mean that information you provide will be transferred to the US, where privacy laws are in some areas less stringent. We purge any personal data from the Pure Chat system at the end of every working day.

You have no obligation to provide us with any of the above information (unless you have purchased something and want to receive it). You can retract your personal information at any time. You can unsubscribe from our newsletter from the link provided within the email. You can request that any data stored on our website be deleted by emailing mia@letterboxlab.com.

 

Information that we collect automatically

 

When you use this website, cookies are placed on your device.

What are cookies?

Cookies are small coded text files that are stored on your device via your browser. These communicate with websites to tell them about your browsing history. For example, when you click ‘accept’ on our cookie policy banner, a cookie will be stored telling our website that you have accepted it, and it won’t be shown again.

What cookies do we use?

We use three types of cookie: essential website cookies, statistics cookies and marketing cookies.

Essential website cookies

These cookies make our website work. If you have created an account, cookies tell our website who you are and show you only your data, not Joe Bloggs’ data. If you add something to the basket, a cookie tells our website that you have done this even when you navigate around the website. You can prevent these cookies using your browser settings, but please be aware our website will not function properly if you block these essential cookies.

Statistics cookies

We work hard to maintain a website that works for you. To do this we use Google Analytics and Facebook Pixel to monitor how our users interact with our website. We cannot see individuals’ behaviour on our website, only an aggregate of all of our users. The aggregated information we obtain includes:

• Browser, device and operating system of users
• Referral information (for example, did users click on our website on Facebook or find us on Google?)
• Behaviour (which pages users view on our website and for how long)
• Demographic information (age, gender & interests based on previous browsing data).

None of the collected data can be used to identify you personally. You can prevent these cookies using your browser settings.

You can read Google Analytics’ privacy policy here.

The Pure Chat chatbox places cookies on your device to monitor your behaviour on our website while you are chatting to us. This helps us to assist you in your enquiry. You can read Pure Chat’s Privacy Policy here.

Marketing cookies

We assume that people browsing our website are interested in our products, so we use retargeting advertisements to remind users about our awesome science kits after they have visited the site. These retargeting ads are managed by Google (via Adwords) and Facebook (via the Facebook pixel), which place cookies on your device and show you our adverts when we run advertising campaigns.

You can opt out of Google retargeting ads here: https://adssettings.google.com/.

You can opt out of Facebook retargeting ads (in general or just from us) here: https://www.facebook.com/ads/preferences/

Data security

Data security is of great importance to us, and to protect your data we have put in place suitable physical, electronic and managerial procedures to safeguard and secure data collected via this Website.

If password access is required for certain parts of the Website, you are responsible for keeping this password confidential.

Disclosures of your information

We may need to share your information with third parties beyond those named above, which provide services to us that are necessary for the operation of the business. In particular, your information may be disclosed to third parties who provide the following services:

• Accounting and Bookkeeping
• Digital marketing
• Website development
• Delivery
• Legal services
• Data storage

We do not use third party service providers unless we are confident that they will respect the security of your personal information and abide by UK and EU data protection regulations. We do not permit third parties to use your information for any purposes other than those  we specify, and certainly not for their own purposes.

Your rights

You have the right to request access to the data we hold about you. You have the right to object to our processing of your data and to withdraw consent at any time. You can do any of these by emailing mia@letterboxlab.com. Please allow up to two weeks to receive a response.

If you are unhappy with how we are processing your data and are unsatisfied with our response to the above, you also have the right to lodge a complaint with the ICO.

Scope of this Privacy Policy

This privacy policy applies only to this website (letterboxlab.com, its subdomains and pages), and does not extend to any websites that can be accessed from this website including, but not limited to, any links we may provide to social media websites.

Changes to this Privacy Policy

This privacy policy was last updated on 26th June 2019. It is due for review on 26th November 2019. We notify all website users and newsletter recipients when the privacy policy is updated.