Ablebox Cookies & Privacy

This section explains what ablebox.com stores on your device, what it records about your visit, and the choices you have. It was last updated on 11 September 2026.

Your choice

We only use analytics cookies if you click Accept on our cookie banner. If you click Reject, or make no choice, they stay off. You can change your mind at any time.

Change cookie settings

Always on

These are needed for the site to work, or only remember something you did or asked for:

• Your cookie choice, kept in your browser so we do not ask on every page.
• Signing in to the customer portal or staff areas: a secure login cookie and session details in your browser, only if you sign in. Sign-in uses hCaptcha to check you are not a bot.
• Chat assistant: once you send a message, a random chat ID is kept in your browser so the conversation carries on between pages.
• Chat pop-up: if you close the chat pop-up, we remember that for the rest of the day.
• Blog view counts: we count how many times each blog article is read, and keep a note in your browser until you close it so one visit is not counted twice. This does not identify you. Clicking Reject on the cookie banner stops it.
• Page position: when you open a news or blog article, we note how far down the list you were until you close your browser, so going back returns you to the same place.

Only if you accept: analytics

• Google Analytics 4 (cookies _ga and _ga_JT19VX71KL, kept for up to 2 years): the pages visited, how visitors arrived, device and browser type, and approximate location worked out from the IP address. It is provided by Google, which may process the data outside the UK.
• Our own analytics (cookies ablebox_visitor_id, ablebox_last_visit and ablebox_visit_count, kept for up to 1 year, plus an ID that lasts until you close your browser): the pages you view, the links and buttons you click, how far you scroll, how long you spend on each page, the form fields you start filling in, the website or email link that brought you here, your browser, device type, screen size, language, time zone, connection type and basic device details (processor cores, memory, touch support, plugin count and whether the browser is being automated, which helps us spot bots), how fast pages load, possibly your approximate country or region, and a scrambled (hashed) form of your IP address. If you are signed in to the customer portal, this includes what you look at there and is linked to your account. It is stored with our database provider, Supabase.
• Visit memory: whether you have been here before and have already seen our chat pop-up, so we do not keep showing it.

We use this to understand how the site is used, fix problems, and notice visits that look like business enquiries. Our lawful basis is your consent, which you can withdraw at any time with the button above.

What our web servers record

Like most websites, our servers log each request: the IP address, the browser’s user agent, the page requested, the referring page and the time. We use these logs to keep the site secure, to detect bots and abuse, and to count traffic in total. They do not use cookies. Our lawful basis is our legitimate interest in running a secure website.

When you contact us or use the chat

• Contact form: your name, email address, company, phone number, message, how you heard about us if you tell us, and your IP address, which we use to stop spam and repeated submissions.
• Chat assistant: the messages you type are stored and processed by our AI service providers so the assistant can answer you. If you ask about buying from us or share contact details, we record it as an enquiry so our team can respond. Please do not share sensitive personal information in the chat.

Links in our emails

Links in our newsletters and other emails can include a code that tells us which email a visit came from. The visit is only recorded if you accept analytics cookies. Email privacy@ablebox.com if you would like us to stop.

What we do not do

We do not use advertising or social media tracking cookies, we do not sell your data, and we do not try to work out who you are or who you work for from your IP address or location.

How long we keep it

Google Analytics keeps data for the retention period set in our account, which is never more than 14 months. We keep our own analytics and server logs only for as long as they are useful for understanding and securing the site, and review this at least once a year. We keep enquiries for as long as we need them to deal with your enquiry and any business that follows.

Blocking cookies in your browser

You can also block or delete cookies in your browser settings. The site will still work, although you may need to sign in again. For questions, or to use your data protection rights, email privacy@ablebox.com.

At Ablebox we take your privacy seriously and we are committed to protecting your personal data. We aim to be clear about how we use personal data and this privacy notice will inform you as to how we look after your personal data, what personal data we process and why. It includes the relevant requirements of the General Data Protection Regulation “GDPR”, and applies to both when you visit our website, and when you use our services. The website and our services are not intended for children and we do not knowingly collect data relating to children.

Ablebox is the controller and responsible for your personal data (collectively referred to as “Ablebox”, “we”, “us” or “our” in this privacy notice). When we refer to Ablebox we mean:

Ablebox Ltd
Registered address: 23 Buckland Road, Pen Mill Trading Estate, Yeovil, Somerset, BA21 5HA. Company Number 02547129

If you have any questions or concerns about this notice, including any requests to exercise your legal rights, please email myteam@ablebox.com

Please note that this notice, whilst intended to be as complete and accurate as reasonably possible, is not exhaustive and may be updated from time to time. The most up to date GDPR Privacy Notice will be available on our website.

What type of personal data do we process?

Personal data, or personal information, means any information about an individual from which that person can be identified. We may need to collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity data – your full name and title.
• Contact data – your work contact details, such as Company name, address, telephone numbers and email address.
• Financial data – includes bank account details and credit limits
• Transaction data – includes details about payments to and from you
• Technical data – includes internet protocol (IP) address and other technology on the devices you use to access this website
• Marketing preferences – includes your preferences in receiving marketing from us.

This information will be collected primarily from you as information voluntarily provided to us, however we may also collect it where lawful to do so from (and combine it with information from) public sources, third party service providers, government, tax or law enforcement agencies and other third parties. We may also automatically collect technical data about your browsing actions from our website.

If you fail to provide personal data we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with services or products). In this instance, we may have to cancel a service or product you have with us but we will try to notify you if this is the case at the time.

How is your personal data collected?

We use different methods to collect data from and about you including through:

• Direct interactions – you may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you purchase a product from us, or when you give us some feedback.
• Automated technologies or interactions – as you interact with our website, we may automatically collect Technical Data about your browsing actions. We collect this using cookies and similar technologies, only where you have agreed or where they are strictly necessary (see the cookie section above).
• Other Documents – we may use CCTV and/or telephone recordings for monitoring purposes

Why is the personal data collected?

Ablebox collects and uses personal data only as necessary for the purposes for which it was obtained and when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Orders – to process and deliver your orders and to inform you about the status of your orders.
• Account maintenance – to create and maintain your account with us.
• Customer service – to provide you with customer service, including responses to your enquiries, complaints and general feedback about our products. Customer service may be provided through various forms of communication, including email, letter, telephone and in person.
• Consumer engagement – to get you more actively engaged with our products and services. This may involve the use or publication of consumer generated content.
• Monitoring & Recording – to protect employees and third parties, by establishing facts, compliance with regulatory procedures, prevention or detection of crime.

Disclosure of your personal data

Your personal data will be made available for the purposes detailed above on a need to know basis and only to management, sales / customer service teams, legal, logistics, audit, compliance, information technology and other corporate staff who properly need to know these details for their functions and responsibilities.

Your personal data may also be made available to third parties providing relevant services to us, such as auditors / compliance managers, providers / call centres, IT hosting / IT maintenance providers and recruitment providers. Ablebox have a written contract with all third parties and require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

Your personal data may also be shared for financial purposes. We will supply your personal information to credit reference agencies “CRAs” and they will give us information about you, such as about your financial history. We do this to assess creditworthiness and product suitability, check your identity, manage your account, trace and recover debts and prevent criminal activity. We will also continue to exchange information about you with CRAs on an ongoing basis, including about your settled accounts and any debts not fully repaid on time. CRAs will share your information with other organisations. The identities of the CRAs, and the ways in which they use and share personal information, are explained in more detail at http://www.experian.co.uk/crain/index.html

Storage of personal data

Appropriate security measures are in place to prevent your personal data from being accidently lost, used or accessed in an unauthorised way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

Personal data retention

Your personal data is only retained for as long as necessary to fulfil the purposes we collected it for, including the purposes of satisfying any legal, accounting, or reporting requirements. Once we have determined we no longer need to hold your personal data, we will delete it from our systems.

Your rights and how to exercise them

With reference to your personal data, in certain circumstances you have the following rights:

• the right to be told how we use your information and obtain access to your information
• the rights to have your information rectified, erased or place restrictions on processing your information
• the right to object to the processing of your information, e.g. where the processing is based on a legitimate interest
• the right to data portability, which allows you to obtain and reuse your personal data for your own purposes across different services
• the right to withdraw consent at any time, subject to legal or contractual restrictions
• the right to object to any decisions based on the automated processing of your personal data, and

You can exercise any of these rights by submitting a request to privacy@ablebox.com. We will provide you with any action taken upon your request to any of these rights within one month of receiving your request. This may be extended up to two months if necessary, however we will inform you in this instance. Please note we may have to ask you to verify your identity when you seek to exercise any of your data protection rights.

You also have the right to make a complaint to the Information Commissioner’s office “ICO”, the UK supervisory authority for data protection issues – www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.