Privacy policy

Last updated: 28 October 2026

This Privacy Policy explains how Cubect (“Cubect”, “we”, “us”, “our”) collects, uses, shares and protects your personal data when you visit cubect.com (the “Website”), place an order, or contact us. We are committed to protecting your privacy and handling your data lawfully, fairly and transparently.

This policy is written in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR). Where the EU GDPR applies to you, the same standards are followed.

By using the Website, you confirm that you have read this policy. If you do not agree with it, please do not use the Website.

1. Who We Are (Data Controller)

Cubect is the data controller for the personal data described in this policy, meaning we decide how and why your data is used. Our full company details are shown under Company Information at the bottom of this page. For any privacy question or request, contact us at support@cubect.com.

2. Personal Data We Collect

a) Information you give us

• Identity and contact details: name, email address, phone number, delivery address and billing address.
• Order information: the products you buy, order value, order history, delivery preferences, and notes you add to an order.
• Account information: if you create an account, your login details and saved addresses.
• Communications: messages, emails, photos and other information you send us when you contact customer service, report a faulty product or request a return or refund.
• Marketing preferences: whether you have subscribed to or unsubscribed from our emails.

b) Payment information

Payments are processed by secure third-party payment providers. We do not see or store your full card number, expiry date or security code. We receive only limited details, such as the payment status, the payment method type, and the last four digits of the card, which we use for order management, refunds and fraud prevention.

c) Information collected automatically

When you visit the Website, we and our service providers collect technical data through cookies and similar technologies, including:

• IP address, approximate location (country, region or city level), browser type and version, device type, operating system and screen size.
• Pages viewed, products viewed, time spent on pages, links clicked, referring website and search terms used on our Website.
• Items added to your basket and checkout activity.

d) Information from third parties

We may receive data about you from payment providers, delivery carriers, our e-commerce platform, advertising and analytics partners, and fraud prevention services. This may include payment confirmation, delivery status and information about how you reached our Website.

3. How and Why We Use Your Data (Lawful Bases)

Where we rely on legitimate interests, we have balanced them against your rights and freedoms. You can ask us for details of that assessment.

4. Marketing Communications

We will send you marketing emails only if you have opted in, or in the limited circumstances PECR allows for existing customers (a “soft opt-in”) where we market similar products and you were given a chance to opt out. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by emailing support@cubect.com. Unsubscribing does not affect service messages about your orders, which we must send to fulfil your contract.

We never sell your personal data to third parties for their own marketing.

5. Cookies and Similar Technologies

We use cookies, pixels and similar technologies on the Website. These fall into the following categories:

• Strictly necessary cookies: needed for the Website to work, such as keeping items in your basket, secure checkout and fraud prevention. These do not require consent.
• Analytics and performance cookies: help us understand how visitors use the Website so we can improve it. These are used only with your consent.
• Marketing and advertising cookies: used to measure advertising and show you relevant ads on other websites and platforms. These are used only with your consent.

You can accept, reject or manage non-essential cookies through the cookie banner when you first visit the Website, and change your choice at any time through your browser settings. Blocking some cookies may affect how the Website works. For more information, please see our Cookie Policy where one is published on the Website.

6. Who We Share Your Data With

We share your personal data only where necessary and only with organisations that agree to protect it. These include:

• E-commerce platform provider: our online store is hosted on Shopify, which processes order, customer and payment data on our behalf.
• Payment providers: such as Shopify Payments, Shop Pay, Apple Pay, Google Pay, Visa, Mastercard and American Express, to take payments and issue refunds.
• Delivery and logistics partners: couriers and fulfilment partners who need your name, address, phone number and email to deliver your order.
• Order tracking services: our order tracking page is provided through a third-party app so that you can follow your delivery.
• Marketing and advertising providers: email marketing tools and advertising platforms (for example search engines and social media platforms), only where you have given consent.
• Analytics providers: to measure Website traffic and performance.
• Professional advisers, accountants and insurers: where needed for our legitimate business purposes.
• Fraud prevention and security providers: to detect and prevent fraudulent transactions.
• Authorities and legal bodies: such as courts, law enforcement, tax authorities and regulators, where we are legally required to or where it is necessary to protect our rights.
• Business transfers: if we sell or restructure the business, your data may be transferred to the new owner, who must continue to use it as described in this policy.

These providers act as our processors under written agreements, or as independent controllers with their own privacy policies.

7. International Data Transfers

Cubect operates from the Netherlands, and some of our service providers are located in the United Kingdom, the European Economic Area, the United States or other countries. When your personal data is transferred outside the UK or the EEA, we make sure it is protected by an appropriate safeguard, such as:

• an adequacy decision or regulations recognising that the destination country provides adequate protection;
• the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses; or
• another lawful transfer mechanism, such as the UK-US Data Bridge where the provider is certified.

You may ask us for more information about the safeguards we use by emailing support@cubect.com.

8. How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes in this policy, including legal, accounting and reporting requirements.

• Order and transaction records: kept for 7 years to meet tax and accounting obligations.
• Customer account data: kept while your account is active, and deleted or anonymised after a period of inactivity or when you ask us to close it, unless we must keep it by law.
• Customer service communications: kept for up to 3 years after the matter is closed.
• Marketing data: kept until you unsubscribe or withdraw your consent, after which we keep only a record of your opt-out so we do not contact you again.
• Cookie and analytics data: kept in line with the lifespan of each cookie, as described in the cookie banner.

When data is no longer needed, we securely delete or anonymise it.

9. Data Security

We use appropriate technical and organisational measures to protect your personal data from loss, misuse, unauthorised access, disclosure, alteration or destruction. These include encrypted connections (SSL/TLS) on our Website, secure payment processing through certified providers, restricted access to personal data on a need-to-know basis, and written agreements with our service providers.

No online system is completely secure. If a personal data breach occurs that is likely to put your rights at risk, we will notify you and the Information Commissioner’s Office where the law requires us to.

10. Your Data Protection Rights

Under UK data protection law, you have the following rights regarding your personal data:

• Right to be informed: to know how your data is used, as set out in this policy.
• Right of access: to ask for a copy of the personal data we hold about you.
• Right to rectification: to ask us to correct inaccurate or incomplete data.
• Right to erasure: to ask us to delete your data in certain circumstances (the “right to be forgotten”).
• Right to restrict processing: to ask us to pause the use of your data in certain circumstances.
• Right to data portability: to receive your data in a structured, commonly used, machine-readable format, and to ask us to transfer it to another organisation where possible.
• Right to object: to object to processing based on legitimate interests and to any direct marketing at any time.
• Right to withdraw consent: where we rely on your consent, to withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.
• Rights related to automated decision-making: we do not make decisions about you based solely on automated processing that have a legal or similarly significant effect.

To use any of these rights, email support@cubect.com. We may need to verify your identity before acting on a request. We will respond within one month. If your request is complex or you have made several requests, we may extend this by up to two further months and will tell you why. You will not normally pay a fee, unless a request is clearly unfounded or excessive.

11. Right to Complain

If you are unhappy with how we use your data, please contact us first so we can try to put it right. You also have the right to complain to the supervisory authority:

• United Kingdom: the Information Commissioner’s Office (ICO), at ico.org.uk or on 0303 123 1113.
• Netherlands: the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), at autoriteitpersoonsgegevens.nl.

12. Children’s Privacy

Our Website is not directed at children under 16, and we do not knowingly collect personal data from them. Although we sell products for children’s rooms, those products are intended to be purchased by adults. If you believe a child has given us personal data, please contact us at support@cubect.com and we will delete it promptly.

13. Links to Other Websites

The Website may contain links to third-party websites, such as social media pages or carrier tracking pages. We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies before sharing any personal data.

14. Providing Your Data

Some data is required to complete a purchase, such as your name, delivery address, email address and payment details. If you do not provide it, we may not be able to process your order or meet our obligations to you. Giving us other data, for example for marketing, is optional.

15. Changes to This Privacy Policy

We may update this policy from time to time to reflect changes in our practices or in the law. The date at the top shows when it was last updated. If we make material changes, we will take reasonable steps to tell you, for example by posting a notice on the Website. Please review this policy regularly.

16. Contact Us

If you have any questions about this Privacy Policy or want to exercise your rights, please contact us using the details below.

Company Information:

Website Name: Cubect
Company Name: SH-Media

Address: Vergiliuslaan 20, 5926 SM, Venlo, Nederland

Chamber of Commerce (KvK): 52063178
VAT number: NL002199577B28

E-mail: support@cubect.com
Phone: +44 7460677254

Customer Service: Monday – Friday (9:00 Am – 6:00 Pm)
Saturday (10am –2pm) (UK time)

We aim to respond within 1 business day.