Privacy policy

About this policy

This policy explains what personal information Mega Packaging collects when you visit our website, order from us or get in touch, why we use it, who we share it with, how long we keep it and what your rights are.

We handle personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, for marketing emails and cookies, the Privacy and Electronic Communications Regulations 2003 (PECR), all as amended by the Data (Use and Access) Act 2025.

Many of our customers are businesses. If you order or contact us on behalf of an organisation, this policy covers the personal information we hold about you as that organisation's contact.

Who we are

Mega Packaging Limited is the controller of your personal information. This means we decide how and why it is used. We are a company registered in England and Wales.

Company number: 12201350
Registered office: Ground Floor, 285 Fore Street, London, England, N9 0PD
Trading address: Unit 13, Watermill Business Centre, Enfield, London EN3 7XF
VAT number: GB 334 2506 28
Email: sales@megapackaging.co.uk
Phone: 020 3972 7741

What we collect

Contact and identity details: your name, business or organisation name, email address, phone number, and delivery and billing addresses.
Account details: your sign-in details, saved addresses, order history and your list of usuals. Passwords are stored in scrambled (hashed) form, so no one can read them.
Order details: what you ordered, when, the prices, delivery details, any purchase order (PO) number and any delivery notes you add.
Payment details: whether and how you paid. Card payments are handled by our payment provider, and we never see or store your full card number.
Trade account details: if you apply for a trade account, your organisation's details, the name of the person responsible for the account and invoice contact details.
Artwork and printing details: logos, artwork, text and proof approvals you send us for custom-printed orders.
Messages: what you tell us by email, phone, WhatsApp or text, and our replies.
Marketing preferences: whether you receive our emails and whether you have unsubscribed.
Technical details: your IP address, browser and device type, and the pages you visit. We do not use analytics cookies: see our cookie policy.

Most of this comes from you, or from a colleague who orders for your organisation. We also receive delivery updates from our courier, Evri, and payment confirmations from our payment provider.

We need your name, contact, delivery and payment details to take and deliver an order. If you do not give them to us, we cannot process your order. Everything else is up to you.

How we use it and our lawful bases

We may only use personal information when the law gives us a reason, called a lawful basis. Here is what we use it for and the basis we rely on.

To take, deliver and support your orders, run your account, take payment and handle returns. Basis: contract, because we need it to do what you asked us to do.
To set up and run trade accounts and invoicing, including checking that invoices are paid. Basis: contract.
To print your custom order from the artwork you send and confirm your proof approval. Basis: contract.
To keep accounting, tax and VAT records and respond to lawful requests from authorities. Basis: legal obligation.
To answer your questions and messages. Basis: contract where it relates to an order, otherwise our legitimate interest in helping customers and people who contact us.
To keep our website secure and prevent fraud. Basis: legitimate interests.
To send marketing emails. Basis: legitimate interests for our customers, and consent for anyone else. The next section explains more.
To recover money owed to us and deal with legal claims. Basis: legitimate interests.

Where we rely on legitimate interests, we have weighed our interests against yours and only go ahead where our use is fair and expected. We do not make decisions about you based only on automated processing that have legal or similarly significant effects on you.

Marketing emails

If you buy from us, we may email you about similar products, offers and news from Mega Packaging.
You can say no when you give us your email address, and every marketing email has an unsubscribe link. You can also unsubscribe at any time by emailing sales@megapackaging.co.uk.
If you are not a customer, we only send you marketing emails if you have asked to receive them.
We do not send marketing by text or WhatsApp unless you have asked us to.
Unsubscribing from marketing does not stop the service emails we send about your orders, account and invoices.

We share personal information only where we need to, and only what the other organisation needs. We never sell your personal information.

Our delivery company, Evri, and Sendcloud, the shipping platform we use to book deliveries, so your order reaches you (they get your name, address, phone number and email).
Stripe, our card payment provider (it also handles Apple Pay, Google Pay and saved cards, so we never see or store your full card number), and our bank, to take payments and give refunds.
Vercel, which hosts our website, and Google (Google Cloud and Firebase), which holds our customer and order database and the files you upload with a request. If you choose “Continue with Google” to sign in, Google tells us your name and email address.
Google, on the order confirmation page only: after you order, Google asks whether you would like a short survey about your order (Google Customer Reviews). If you say yes, Google receives your email address, order number and estimated delivery date and emails you the survey; if you say no, Google gets nothing. Google also shows our shop in Google Shopping and search, using our product data, not your personal data.
Anthropic, the company behind the Claude writing assistant, when you send us a product, printing or trade account request: the text of your request is sent to it so our staff can draft a reply, which a person always reads, edits and sends. It is not used to make decisions about you.
Postmark, the email service we use to send order emails, account codes and, if you are a customer who has not opted out, marketing emails.
Our accountants, auditors, legal advisers and insurers.
HMRC, the police, regulators and courts, where the law requires it or to protect our rights.
A buyer of all or part of our business, who would use your information in the same way as described here.

If you contact us on WhatsApp, that service is run by Meta, which handles your messages under its own privacy policy.

Transfers outside the UK

Some of our service providers store or process information outside the UK, for example in the European Economic Area or the United States. When this happens, we make sure your information is protected as UK data protection law requires, for example because the country is covered by UK adequacy regulations, or by using the International Data Transfer Agreement or Addendum approved in the UK.

How long we keep it

Orders, invoices and payment records: 6 years from the end of the financial year they relate to, because tax and VAT law requires it.
Customer accounts: until you ask us to close it. We do not close an account unless you ask, but we may contact you before removing one that has been unused for a long time.
Messages and enquiries that do not lead to an order: 2 years.
Artwork for printed orders: while your account is open, so you can reorder the same design.
Marketing: until you unsubscribe. After that we keep your email address on a do-not-contact list, so we do not email you again by mistake.
Analytics information: we do not currently use analytics cookies. If that changes, we will keep analytics data for no more than 14 months and update this policy.

When we no longer need information, we delete it or make it anonymous.

How we keep it safe

Our website uses an encrypted connection (HTTPS). Passwords are stored in hashed form, card details are handled by our payment provider, and only staff who need access to personal information can see it. If a data breach happens that is likely to put your rights at risk, we will report it to the Information Commissioner's Office, and if the risk to you is high, we will tell you too, as the law requires.

Your rights

You have the right to:

ask for a copy of the personal information we hold about you
ask us to correct information that is wrong or incomplete
ask us to delete your information
ask us to limit how we use your information
object to how we use your information when we rely on legitimate interests, and object to direct marketing at any time
ask us to send information you gave us to you or to another organisation in a common digital format
withdraw your consent at any time, where we rely on consent, for example for marketing emails

Some rights have conditions. For example, we must keep order and invoice records for tax purposes even if you ask us to delete them. To use any of your rights, email sales@megapackaging.co.uk. There is usually no charge. We may ask you to confirm your identity, and we will reply within one month. If your request is complex, we may need up to two more months, and we will tell you if so.

Complaints

If you are unhappy with how we have handled your personal information, please tell us first by emailing sales@megapackaging.co.uk. We will acknowledge your complaint within 30 days, look into it and tell you the outcome without undue delay.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Cookies

We use only the essential cookies that run the basket, sign-in and checkout. Our cookie policy explains the details and how to change your choices.

Children

Our website and products are for businesses and adults. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time, and the date below shows when it last changed. If we make a significant change, we will tell customers by email.

Contact us

For any question about this policy or your personal information, email sales@megapackaging.co.uk, call 020 3972 7741 or write to Mega Packaging, Unit 13, Watermill Business Centre, Enfield, London EN3 7XF.

Last updated: 7 October 2026