Website and app privacy update: 11 October 2026.
Customer accounts, orders and app connections
When you create or connect an account, place an order or contact us, we process information such as your name, email address, telephone number, billing and delivery addresses, account identifier, order details, payment references and correspondence. Account and purchase records are linked to your customer identity. We use them to authenticate you, provide account features, calculate delivery, fulfil orders, handle refunds and provide customer support.
Connecting the app to your existing website account allows it to access the account features you authorise, including your points balance and checkout. The app keeps connection credentials and payment-recovery references in secure device storage. Your website login takes place through our website’s account sign-in flow. Disconnecting an app connection does not itself delete your website account, order history or reward records.
Card payments, Apple Pay and Stripe
Card and Apple Pay payments are processed through Stripe. Payment details entered in Stripe’s payment screen are transmitted to Stripe for processing; our app checkout does not store your full card number or card security code. We retain order and payment references and payment status so we can confirm orders, investigate failed payments and handle refunds.
Stripe’s mobile software collects payment-screen interaction and technical information for analytics, service improvement and fraud prevention. This can include device model and operating-system information. During card authentication, device identifiers and other authentication information can also be supplied to card networks and issuing banks. Stripe states that its mobile SDK data is not used for advertising tracking. See Stripe’s privacy policy and Stripe’s mobile SDK privacy details. Apple Pay is also subject to Apple’s privacy information.
Points and weekly Rip Rewards
Points balances, purchases made with points, points refunds, reward claims, claim times, prizes, coupon codes and coupon use are recorded against your website account. We use these records to award and redeem rewards, enforce the seven-day claim interval, expiry and single-use restrictions, and prevent duplicate claims or misuse. Points prizes are permanent; discount codes expire under the terms shown with the reward. Those expiry rules do not mean that the associated transaction or claim records are immediately deleted.
Information stored on your device
The app stores information locally to remember your basket, saved comics, want list and stock-alert preferences, together with information needed to recover an unfinished checkout. Stock matching requests use your selected interests to retrieve relevant listings. Device-only preferences do not need to be published to other customers. Removing the app or its local data does not erase orders, points or rewards held in your website account.
Security, cookies and linked services
Our website, account sign-in pages and app requests use technical information such as IP addresses, browser or device details, session information and security logs to operate the service, investigate errors and prevent abuse. Cloudflare verification may be used on website sign-in pages. See Cloudflare’s privacy policy. Website cookies and embedded content are described below. Links to services such as Whatnot open services governed by their own privacy policies.
Why we use personal information
We process information needed to fulfil your orders and provide the account and reward services you request as part of our contract with you. We also process information to meet legal obligations, including accounting and tax requirements. Our legitimate interests include providing customer support, securing our services, preventing fraud and keeping accurate order and reward records. Where consent is required, including for relevant marketing or non-essential cookies, you can withdraw it. Withdrawing consent does not affect processing that was lawful before withdrawal.
Retention and your choices
We retain order, payment and refund records for the periods needed to fulfil orders, meet accounting and legal requirements and resolve disputes. Reward and points records are retained as needed to administer balances, prevent repeated claims and reconcile transactions. Support and security records are retained for the time needed to address enquiries, investigate incidents and protect the service. Where a fixed period is not stated, these purposes determine retention.
You can ask to access or correct your personal information, request deletion or restriction, object to relevant processing, or receive a portable copy where the applicable right allows it. To request account deletion or exercise a right, email support@comic-box.co.uk. We may need to verify your identity. Some records must be retained for legal obligations or legal claims even after an account is closed. You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/.
We may update this policy when our services or data practices change. The update date above identifies the latest website and app revision.
Who we are
Our website address is: https://www.comic-box.co.uk.
Comic Box UK sells physical comics, graded comics, mystery packs and comic supplies through www.comic-box.co.uk and the Comic Box UK mobile app. Comic Box UK is responsible for the personal information used to operate our shop, customer accounts and rewards scheme. This policy covers both the website and the app. For privacy questions or requests, contact support@comic-box.co.uk.
All Graded comics purchased under the payment plans will resolve to these terms:
- A deposit must always be made, said deposit will depend on which plan you opt for.
- Postage for graded comics is £6.95.
- Any plans cancelled or not paid in full within the plan time frame will result in losing the comic and it will be re-listed for sale. You will also lose any Deposit paid and 10% of any other payments to cover admin costs and re-listing.
- All deposits are non-refundable.
- The Comic is not sent until the final payment is made. We do not offer credit nor are we charging interest.
What personal data we collect and why we collect it
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service Privacy Policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.
Contact forms
Any information provided via our contact forms are kept for the purpose of communications only.
Cookies
If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
Embedded content from other websites
Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website.
Analytics
Who we share your data with
We share information needed to provide our services with payment providers such as Stripe, delivery carriers and shipping services, website hosting and technical support providers, security and anti-spam services, and providers used to send order or marketing emails. These providers receive the information needed for their role; some, including payment providers, also process information under their own privacy policies. Marketing emails sent through Mailchimp are covered by Intuit’s privacy statement. Website services supplied by Google are covered by Google’s privacy policy. We may also disclose information where required by law or needed to establish, exercise or defend legal claims.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognise and approve any follow-up comments automatically instead of holding them in a moderation queue.
For registered customers, we store account and profile information for as long as the account is needed to provide our services. You can view and update available profile details through your website account. You can request account closure or deletion by emailing support@comic-box.co.uk. Authorised administrators can access account information to operate the service and provide support.
What rights you have over your data
If you have an account on this site, or have left comments, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Where we send your data
Visitor comments may be checked through an automated spam detection service. Service providers may process information outside the UK, including in the United States. The applicable protections depend on the provider and destination. You can contact support@comic-box.co.uk for information about the providers handling your data and any applicable international-transfer safeguards. Stripe, Apple, Cloudflare and Mailchimp explain their own international processing in their privacy policies.
Your contact information
We use your information to manage accounts, process and deliver orders, handle payments and refunds, operate points and Rip Rewards, respond to enquiries and protect our services against fraud and misuse.
We may send offers and promotions where you have consented or where applicable law allows marketing to existing customers with an opt-out. You can unsubscribe using the link in a marketing email or contact support@comic-box.co.uk. Unsubscribing from marketing does not stop essential order, payment or account messages.