Privacy

What we collect

When you place an order we ask for your name, phone number, delivery address and any note you want to add. An email address is optional. If you contact us, sign up for news, or message us on Facebook Messenger or Instagram, we keep what you send us, the account id that platform gives us, and the order details you type in the conversation.

Why we need it

We use your details to confirm your order, deliver your box, answer your questions and, if you gave an email, send your order updates. If you signed up for news, we use your email to tell you about new collections or when a sold-out box returns.

Replies on Messenger and Instagram

Our assistant reads your message together with our own catalogue to answer questions about boxes, prices, delivery fees and promo codes, and to prepare the order you confirm. It does not send marketing messages. When a conversation needs a person, for a complaint, a refund, a custom or bulk order, or because you asked for one, the assistant stops and our team replies in the same thread. We keep the conversation so we can follow it, and you can ask us to delete it at any time.

Who sees it

Only our team and the delivery person, who needs your name, phone number and address to reach you. We do not sell your details.

If you accept the optional advertising cookie, we also share your email address and phone number with Meta (Facebook and Instagram) in a hashed form: a one-way code that Meta cannot read back. This lets us measure which adverts lead to orders. If you decline, nothing is shared for advertising.

Our service providers process data only on our instructions: Supabase for the database and logins, Vercel for website hosting, Groq for the language model that writes the assistant's replies, and Telegram for internal alerts to our team. Your message text is sent to Groq to generate the reply. Order alerts on Telegram contain the details our team needs to prepare and deliver your order: your name, phone number, address, the boxes you ordered and the total to collect. When you accept advertising measurement, Meta also receives the hashed contact details, order total and technical request data described below.

Where it is kept

Orders and conversation transcripts are stored in our Supabase database, behind a private login that only we can use. You pay cash on delivery, so we never store card numbers.

Cookies and measurement

We use one optional advertising cookie, and only if you accept it. It helps us measure which pages and adverts bring visitors to the store. If you accept, the store also sends a server-side purchase event to Meta with your email address and phone number as a one-way hash, the boxes you ordered, the total, and technical data such as your IP address and browser type. The raw email and phone number are never sent to Meta, and we never receive payment card details because you pay cash on delivery. If you decline, no advertising cookie is set, no purchase event is sent, and the site keeps working exactly the same. The site also uses Vercel Web Analytics and Speed Insights, which are cookieless and record only anonymous page views and performance timings, so they run whether or not you accept the advertising cookie. Your cart is always kept on your own device so it is still there when you come back.

Your choices

You can ask us at any time to show you what we hold about you, correct it or delete it, including a Messenger or Instagram conversation. Write to ravenboxoff@gmail.com or use the Contact page. You can change your cookie choice from the link in the footer; switching to essential only stops any further advertising measurement. You can also leave the news list through the email address we write from.