Last updated: 4 October 2026.
Who we are
Luke Parker trading as Boxing Mugs is the data controller for boxingmugs.com. For privacy questions or to exercise your data protection rights, email info@boxingmugs.com.
Information we use
When you order, we collect the information needed to process your purchase: your name, billing and delivery addresses, email address, any telephone number you provide, products and options ordered, payment status and transaction references. If you create an account, we also keep your account details and order history. Please do not send passwords or full payment-card details by email.
When you contact us, we use your message, contact details and any order information or photographs you choose to provide. If you submit a product review, the review and display name may appear publicly. Technical information such as IP address, browser details, pages requested and security events can be processed by the website and its service providers.
Why we use it
- Orders, delivery, accounts and customer support: to take steps at your request before a purchase and perform our contract with you.
- Accounting and legal records: to meet applicable legal obligations.
- Store security, fraud prevention and resolving disputes: our legitimate interests in protecting customers, the website and our business, taking account of your rights.
- Optional analytics: your consent to understand how visitors find and use the shop, including product views, basket activity, checkout and purchases.
We need the required checkout information to take payment and deliver your order. Without it, we may be unable to complete the purchase. Optional analytics consent is not a condition of buying from us.
Payments, hosting and delivery
The store uses WordPress and WooCommerce, hosted by Namecheap EasyWP. Customer email is handled using Namecheap Private Email. These services process information needed to run the store and communicate about orders.
PayPal processes payments. Relevant order, contact and transaction information is exchanged with PayPal to process payments, refunds and fraud checks. We receive payment status and transaction references; we do not receive your PayPal password. PayPal also processes information for its own purposes under its Privacy Statement.
Delivery providers receive the information needed to deliver your parcel. We may also disclose relevant information to professional advisers or public authorities where needed to meet legal obligations or establish, exercise or defend legal claims.
Cookies, analytics and checkout protection
Essential cookies and similar storage support the basket, checkout, account login and your consent choices. Optional analytics is controlled through the cookie settings. You can refuse it and still shop normally, and change your choice later using the cookie controls on the site.
With analytics consent, Google Analytics helps us measure visits and shopping activity, including referral sources, pages and products viewed, basket actions and order totals. Our analytics configuration is intended to avoid sending names, email addresses, postal addresses and payment-card details to Analytics. Google signals, advertising personalisation and user-provided-data collection are switched off. See how Google uses information from sites that use its services.
Guest checkout uses Google reCAPTCHA through the PayPal payment integration to help detect automated abuse. This can process technical and interaction data and may present a challenge or prevent a suspicious checkout attempt. Contact us if a security check prevents a genuine order. Google’s Privacy Policy and Terms of Service apply to its service.
The website also loads its Source Sans Pro typeface from Google Fonts. Your browser connects to Google servers to request the font files, which involves sending technical request information, including your IP address. Google explains its data handling in its Privacy Policy.
Optional Google Customer Reviews
After a paid order, you can choose to open an invitation from Google Customer Reviews. If you click “Open Google review invitation”, your browser loads Google’s service and shares your email address, order number, delivery country and estimated delivery date with Google. Google also receives technical request information, such as your IP address and browser details, and may use cookies or similar technologies. We rely on your consent for this optional sharing.
Google then asks whether you want a survey email after your expected delivery date. Google emails that survey only if you opt in on its invitation. You can choose “No thanks” without affecting your purchase. This choice is separate from analytics consent. Closing the invitation or declining a survey does not undo information already sent when you opened Google’s service.
Google handles the invitation, survey and any review you submit under its Privacy Policy. For help with withdrawing consent or exercising your rights, contact info@boxingmugs.com or use the controls provided by Google. Customer Reviews is separate from Google Analytics; we do not send your email address to Analytics as part of this integration.
International processing
Our service providers may process information outside the United Kingdom. These providers may use infrastructure in the United States and other countries. Namecheap describes its processing and contractual transfer provisions in its Data Processing Addendum. Google describes the frameworks and contractual clauses it uses for analytics transfers in its international data-transfer information. You can contact us for information about the arrangements relevant to your data and copies of applicable safeguards. PayPal explains its international processing in the Privacy Statement linked above.
How long information is kept
Retention depends on why information is needed. Order and transaction records are retained for accounting, tax and legal obligations and to deal with returns or disputes. Account information is kept while the account is in use; you may request deletion, although some order records may still need to be retained. Customer-service messages are kept as needed to resolve the enquiry and related disputes. Google Analytics user-level and event-level data retention is set to two months, with resetting of user retention on new activity switched off. This setting does not limit the retention of standard aggregated reports. Browser-cookie lifetimes are separate and are explained in the cookie information.
Your rights
Depending on the circumstances, you may ask to access, correct or erase your personal information, restrict its use, or receive a portable copy. These rights have legal conditions and exceptions. We may need to check your identity before disclosing or changing information.
You have the right to object to processing based on legitimate interests. You may also withdraw consent to optional analytics at any time using the cookie controls. Withdrawal does not affect processing already carried out lawfully.
Email info@boxingmugs.com with your request. You can also complain to the UK Information Commissioner’s Office through ico.org.uk/make-a-complaint. We would welcome the chance to address your concern directly.
Changes to this policy
We update this page when our services or data practices change. The date above identifies the latest version.