Privacy and Personal Data Protection

Kitbox is a socially committed company dedicated to helping young people gain the skills, experiences and entrepreneurial attitude they need to get ahead and thrive. Our business relies on word of mouth, and we want to be known for the quality of our service and the impact we have on young people’s lives – not for unwanted emails or marketing.

Individuals are legally required to be informed about the collection and use of their personal data and that’s what this Privacy Notice sets out to do. We want you to be in control of all your data, and we never sell your data to other companies or businesses. We also promise to not overload you with information, to be fully transparent about how we use your data, and to let you opt out at any time.

This Privacy Notice explains the different ways in which we might use your information. If you ever have any questions, or don’t understand something, you can get in touch with us directly at and we will respond to you in a reasonable timeframe.

Types of data we collect and how it is shared

Customer Data

We use a variety of well known cloud-based service providers to process online and point-of sale orders, handle payments as well as customer support queries. These companies may have access to some of our stored data but will not be able to use it for any purposes outside of providing us with operational support. You can view their respective privacy policy notices here (Magento, Xero, Zendesk). We use this information for the purpose of servicing customers and keeping appropriate financial records to assist in our accounting and business planning. We may add your contact details to our own mailing list, but we won’t do so without your consent, and we won’t ever sell on that information. If you give us your name and contact details over the phone, we won’t store this information for marketing purposes.

Mailing list

We use industry-standard email marketing tools such as MailChimp to create and send our newsletters, and this is also used to maintain the mailing list database. The system gathers statistics about the number of people who open, click into, and unsubscribe from our newsletter, as this helps us improve our marketing. You can unsubscribe from our mailing list at any time by clicking the unsubscribe link at the bottom of the email, or by contacting us at We may occasionally use our database information to deliver our marketing campaigns on 3rd party sites such as Facebook, but we won’t sell your data to any other businesses.

Student data

In delivering our business education programme to students we keep contact information about each student on the programme. This includes their email address and mobile phone number so that we can contact them and share necessary information about their involvement in Kitbox. We only use student’s school email address also include a designated school staff member on any email correspondence. This information is stored using an industry-standard staff scheduling system called Deputy that allows us to manage group communication on a school-by school basis. Student information is deleted from Deputy when the student leaves the Kitbox programme. Deputy ensures information is stored safely and you can read their privacy policy here.

Employee data

In order to process staff payroll (including student staff) we collect necessary information including date of birth, bank details, NI numbers. This information is process and stored using an industry-standard payroll system in Xero. Employee information is used solely for the purpose of managing payroll and compliance with relevant tax regulations. You can view the Xero policy on data protection here.

Website cookies

Cookies are small data files that store information on your devices as you browse the web. Most modern-day websites need them to run smoothly and ours is no different. We may use cookies to monitor general user behaviour on our websites as well as the success of some campaigns, including Facebook marketing and Google Ads. You are not required to allow the use of cookies – to prevent them being used, you should disable their use following in the security settings provided by your preferred web browser.

Social media data

We have official profiles on social media platforms including but not limited to Facebook and Twitter. We encourage our customers to like and follow these profiles. Please be sure to check you are following our official profiles as we can’t be responsible for accounts that look like ours but are not maintained by us. We will never ask you for personal details like your password online. Our emails may contain clickable links or buttons that allow you to share content on social media and may track your activity. When you click on a social media button to share content related to Kitbox, your information may be stored.

Access to your personal information

We’re really keen to ensure you are confident that we are handling your data in a responsible way. You can request access to all of the information on you that we hold at any time. Just email us at and our designated data protection officer will be in touch.

Our registered company details:

Kitbox (UK) Limited

41 Mitchell Street

London EC1V 3QD

Co. number 08633222

Changes to this privacy notice

This policy was drafted in April 2018 to be in line with the changes in legislation coming into effect in May 2018. We want to ensure we’re compliant with the GDPR (General Data Protection Regulation), the DPA (Data Protection Act) [pre GDPR enforcement] and the PECR (Privacy and Electronic Communications Regulations). We will review this policy when any changes are made to how we process and store data,