Privacy Policy
Last Updated: January 2026
This Privacy Policy explains how Chantell, operated by METAL BOX ENTERTAINMENT LTD, collects, uses, stores, and protects personal information when you visit or make a purchase through our website.
Website: https://chantell.shop/
We are committed to handling your personal information responsibly and in accordance with applicable UK data-protection laws.
1. Who We Are
Trading Name: Chantell
Legal Company Name: METAL BOX ENTERTAINMENT LTD
Company Number: 07967837
Address:
Kemp House
152–160 City Road
London
England
EC1V 2NX
United Kingdom
Email: sales@chantell.shop
Telephone: +44 7855 052937
Website: https://chantell.shop/
For the purposes of applicable data-protection law, METAL BOX ENTERTAINMENT LTD is responsible for the processing of personal information described in this Privacy Policy.
In this policy, “Chantell,” “we,” “us,” and “our” refer to METAL BOX ENTERTAINMENT LTD trading as Chantell.
2. Scope of This Privacy Policy
This Privacy Policy applies to personal information collected when you:
-
Visit our website.
-
Browse our products.
-
Create an account, where available.
-
Place an order.
-
Contact customer support.
-
Subscribe to marketing communications.
-
Submit a review or other content.
-
Interact with our website or online advertisements.
-
Exercise your privacy or consumer rights.
3. Personal Information We May Collect
Depending on how you interact with our website, we may collect the following categories of information.
Identity Information
This may include:
-
Full name.
-
Title, where provided.
-
Account details.
-
Information you provide when contacting us.
Contact Information
This may include:
-
Email address.
-
Telephone number.
-
Billing address.
-
Delivery address.
Order Information
This may include:
-
Products purchased.
-
Order number.
-
Order date.
-
Order value.
-
Delivery information.
-
Return and refund information.
-
Transaction status.
Payment Information
Payments may be processed through third-party payment providers.
We generally do not need to store complete payment-card details ourselves.
Payment providers may collect and process payment information in accordance with their own privacy policies.
Technical Information
When you use our website, we may automatically receive information such as:
-
IP address.
-
Browser type.
-
Operating system.
-
Device type.
-
Device identifiers.
-
Screen information.
-
Approximate location.
-
Website pages visited.
-
Referring website.
-
Date and time of visits.
-
Website interaction information.
Marketing Information
If you choose to receive marketing communications, we may record:
-
Marketing preferences.
-
Subscription status.
-
Email engagement.
-
Promotional interactions.
4. How We Collect Information
We may collect personal information directly from you when you:
-
Place an order.
-
Complete a checkout.
-
Create an account.
-
Contact us.
-
Subscribe to marketing.
-
Complete a form.
-
Submit a review.
-
Communicate with customer service.
We may also automatically collect certain technical information when you browse our website.
Some information may be received from third-party providers involved in providing our ecommerce, payment, delivery, analytics, advertising, and other services.
5. Why We Use Your Personal Information
We may use personal information for the following purposes:
Processing Orders
To:
-
Process purchases.
-
Confirm orders.
-
Arrange delivery.
-
Provide order updates.
-
Process returns and refunds.
-
Provide customer support.
Customer Service
To respond to:
-
Questions.
-
Complaints.
-
Return requests.
-
Refund requests.
-
Cancellation requests.
-
Delivery enquiries.
Website Operation
To:
-
Operate our website.
-
Maintain functionality.
-
Improve performance.
-
Troubleshoot technical problems.
-
Maintain security.
Fraud and Security
We may process information to:
-
Detect suspicious transactions.
-
Prevent fraud.
-
Protect customers.
-
Protect our business.
-
Maintain website security.
Marketing
Where permitted and where required, we may use your information to:
-
Send promotional emails.
-
Provide information about products.
-
Send special offers.
-
Measure marketing effectiveness.
You can unsubscribe from marketing communications at any time.
Analytics and Improvement
We may analyse information to understand:
-
How customers use our website.
-
Which products are popular.
-
Website performance.
-
Customer preferences.
-
General shopping trends.
This helps us improve our website, products, and services.
6. Legal Bases for Processing
Under UK data-protection law, we generally rely on one or more of the following lawful bases.
Contract
We may process information where necessary to:
-
Process your order.
-
Deliver your products.
-
Process payment.
-
Handle returns and refunds.
-
Provide services you have requested.
Legal Obligation
We may process information where necessary to comply with legal obligations, such as:
-
Accounting requirements.
-
Tax requirements.
-
Consumer-protection requirements.
-
Fraud-prevention obligations.
-
Legal requests.
Legitimate Interests
We may process information where it is necessary for our legitimate business interests, provided those interests do not override your rights.
Examples may include:
-
Improving our website.
-
Preventing fraud.
-
Protecting our systems.
-
Managing customer relationships.
-
Understanding website usage.
-
Operating and improving our business.
Consent
Where required, we may rely on your consent.
For example, this may apply to certain:
-
Marketing communications.
-
Non-essential cookies.
-
Advertising technologies.
-
Analytics technologies.
Where processing is based on consent, you may withdraw your consent at any time.
7. Cookies and Similar Technologies
We use cookies and similar technologies on our website.
These technologies may be used for:
-
Essential website functionality.
-
Shopping baskets.
-
Checkout.
-
Security.
-
Preferences.
-
Analytics.
-
Website performance.
-
Advertising and marketing, where applicable.
Please see our Cookie Policy for detailed information about cookies and how to manage them.
8. Shopify
Our online store is powered by Shopify.
Shopify may process information necessary to provide ecommerce services, including:
-
Website functionality.
-
Checkout.
-
Shopping basket functionality.
-
Customer accounts.
-
Security.
-
Fraud prevention.
-
Analytics and related services.
Shopify’s processing of personal information may be subject to its own privacy terms and policies.
9. Payment Providers
Payments may be processed through third-party payment providers.
Depending on the payment method you choose, the relevant provider may process:
-
Payment details.
-
Billing information.
-
Transaction information.
-
Fraud-prevention information.
We do not generally store complete payment-card details on our own systems.
Payment providers may process your information according to their own privacy policies.
10. Delivery Providers
To fulfil your order, we may share necessary information with delivery and logistics providers.
This may include:
-
Name.
-
Delivery address.
-
Telephone number.
-
Email address.
-
Order information.
-
Tracking information.
Information is shared only to the extent reasonably necessary to fulfil the delivery service.
11. Service Providers
We may use trusted third-party service providers to help operate our business.
These may include providers of:
-
Ecommerce services.
-
Payment processing.
-
Delivery and logistics.
-
Website hosting.
-
IT services.
-
Analytics.
-
Marketing.
-
Customer support.
-
Fraud prevention.
-
Security services.
Where appropriate, we require service providers to protect personal information and process it only for authorised purposes.
12. Marketing Communications
We may send marketing communications where permitted by applicable law.
These may include:
-
Product announcements.
-
Special offers.
-
Promotions.
-
New product information.
-
Other marketing communications.
You can unsubscribe at any time by:
-
Using the unsubscribe link in a marketing email; or
-
Contacting us at sales@chantell.shop.
Unsubscribing from marketing communications does not necessarily stop essential service messages such as:
-
Order confirmations.
-
Delivery updates.
-
Refund notifications.
-
Important account communications.
13. Sharing Personal Information
We may share personal information where reasonably necessary with:
-
Shopify and ecommerce service providers.
-
Payment providers.
-
Delivery and logistics providers.
-
IT and hosting providers.
-
Analytics providers.
-
Marketing service providers.
-
Fraud-prevention providers.
-
Customer-support providers.
-
Professional advisers.
-
Regulators and government authorities where legally required.
We do not sell your personal information as a general business practice.
14. Legal and Regulatory Disclosure
We may disclose personal information where reasonably necessary to:
-
Comply with the law.
-
Respond to lawful requests.
-
Enforce our terms.
-
Protect our rights.
-
Protect customers.
-
Prevent fraud.
-
Investigate suspected illegal activity.
-
Protect the security of our website and systems.
15. International Transfers
Some of our service providers may process personal information outside the United Kingdom.
Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is handled in accordance with applicable UK data-protection requirements.
Depending on the circumstances, appropriate safeguards may include:
-
Adequacy regulations.
-
International data-transfer agreements.
-
UK-approved contractual safeguards.
-
Other legally recognised transfer mechanisms.
16. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including:
-
Providing services.
-
Managing orders.
-
Handling returns and refunds.
-
Maintaining business records.
-
Meeting legal obligations.
-
Resolving disputes.
-
Preventing fraud.
-
Enforcing agreements.
Retention periods may vary depending on the type of information and applicable legal requirements.
When information is no longer required, we may securely delete or anonymise it.
17. Data Security
We take reasonable technical and organisational measures to protect personal information against:
-
Unauthorised access.
-
Accidental loss.
-
Unauthorised disclosure.
-
Destruction.
-
Alteration.
-
Misuse.
However, no online system can be guaranteed to be completely secure.
You should also take reasonable precautions when using the internet, including protecting your account credentials.
18. Your UK Data Protection Rights
Depending on the circumstances, you may have rights under UK data-protection law, including the right to:
Access
Request a copy of personal information we hold about you.
Rectification
Ask us to correct inaccurate or incomplete information.
Erasure
Ask us to delete personal information in certain circumstances.
Restriction
Ask us to restrict processing in certain circumstances.
Data Portability
Request certain personal information in a structured, commonly used, machine-readable format where applicable.
Object
Object to certain processing, including direct marketing.
Withdraw Consent
Where processing is based on consent, you may withdraw that consent at any time.
Withdrawing consent does not affect processing carried out before consent was withdrawn.
19. Direct Marketing
You have an absolute right to object to the processing of your personal information for direct marketing purposes.
If you no longer wish to receive marketing communications, you can use the unsubscribe option provided in our marketing emails or contact:
20. How to Exercise Your Rights
To make a privacy request, please contact us:
Email: sales@chantell.shop
Telephone: +44 7855 052937
Please provide enough information for us to identify you and understand your request.
We may need to verify your identity before fulfilling certain requests.
This is a security measure designed to prevent personal information from being disclosed to the wrong person.
21. Complaints
If you have concerns about how we process your personal information, please contact us first so that we have an opportunity to investigate and resolve the issue.
Email: sales@chantell.shop
You also have the right to complain to the UK’s data-protection regulator:
Information Commissioner’s Office (ICO)
You can find information about making a complaint through the ICO’s official website.
Information Commissioner’s Office (ICO)
We encourage customers to contact us first where possible, but this does not affect your right to complain to the ICO.
22. Children’s Privacy
Our website is not intended to knowingly collect personal information from children who are unable to lawfully provide it.
If you believe that a child has provided us with personal information without appropriate permission, please contact us.
We will consider appropriate steps to address the situation.
23. Third-Party Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices, security, or content of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
24. Automated Decision-Making and Profiling
We may use automated systems provided by third-party services for purposes such as:
-
Fraud prevention.
-
Security.
-
Website analytics.
-
Advertising measurement.
-
Personalisation.
Where applicable law provides you with rights concerning solely automated decision-making or profiling, we will respect those rights.
25. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
-
Changes in UK data-protection law.
-
Changes to our business.
-
Changes to our website.
-
Changes to our service providers.
-
Changes to our data-processing practices.
-
New technologies or services.
The latest version will be published on our website.
The Last Updated date at the top of this policy indicates when it was most recently updated.
26. Contact Us
If you have questions about this Privacy Policy or how we process your personal information, please contact us.
Chantell
Trading name of METAL BOX ENTERTAINMENT LTD
Company Number: 07967837
Address:
Kemp House
152–160 City Road
London
England
EC1V 2NX
United Kingdom
Email: sales@chantell.shop
Telephone: +44 7855 052937
Website: https://chantell.shop/
Important Notice
This Privacy Policy is intended for a UK-based ecommerce website and describes our general approach to personal-data processing.
The exact information collected may vary depending on the products, services, payment methods, Shopify features, analytics tools, advertising technologies, and other third-party services active on the website.
Nothing in this Privacy Policy is intended to remove or restrict any rights you have under applicable UK data-protection law.