Privacy Policy

The short version

• We collect only what you type into a quote form, plus any file you choose to attach.
• We use it to reply to your enquiry and prepare a quote. Nothing else.
• We do not sell or rent your information, and we do not run advertising or analytics trackers on this site.
• Form submissions are delivered to us by email over an encrypted connection.
• You can ask us what we hold, ask for a correction, or ask us to delete it.

Who is responsible for your information

Lip Boxes operates the website at lipboxes.com and is responsible for the information submitted through it.

Enquiries about this policy go to[email protected]. Registered company details and a postal address will be added here once they are confirmed for publication; until then, email is the route that reaches us.

What we collect

Two categories, and nothing beyond them.

Information you give us

• Short product form: your name, email address, phone number and message, plus the product name and the page URL you submitted from.
• Full quote form: the above, plus business name, quantity, dimensions and unit, material, printing and finishing preferences, artwork status, required delivery date and shipping destination.
• An optional file you attach — artwork, a reference image or a specification document.
• A consent record, since both forms require you to tick a consent box before submitting.
• A timestamp for when the submission was received.

Information collected automatically

• Standard server request data handled by our hosting provider, including the IP address that made the request. This is used for delivering the site and for abuse prevention.
• A short-lived, in-memory count of recent form submissions per IP address, used only to rate-limit the form. It is not stored persistently and is not linked to your enquiry.

What we do not do: no advertising pixels, no analytics scripts, no cookies set by this site for tracking, no social media embeds, and no third-party fonts loaded from an external host. Fonts are served from our own domain.

Why we use it

Each purpose is tied to something you asked us to do or to keeping the site working.

• To reply to your enquiry and prepare a written quote.
• To ask follow-up questions where a specification is incomplete.
• To produce your order if you go ahead, including using your artwork for that purpose.
• To keep records of what was agreed, including approved die lines and proofs.
• To prevent abuse of the form through rate limiting and spam checks.

We do not use your details for marketing you did not ask for, and we do not add enquiry contacts to a mailing list.

How the forms handle your data technically

Being specific here is more useful than a general assurance.

• Submissions are sent over HTTPS to a server-side endpoint on our own domain. Nothing is posted to a third-party form service.
• Every field is validated and sanitised on the server before use, including stripping control characters so nothing can be injected into email headers.
• Uploaded files are checked server-side for extension, declared type and size before being attached. Files are never written to a publicly accessible location and are never executed.
• The email is delivered by SMTP over an encrypted connection. Your email address is placed in the Reply-To header so we can answer you directly.
• Mail credentials are held in server environment variables and never appear in any code sent to your browser.

Who else sees it

A short list, and only where a service is genuinely involved in delivering your enquiry.

• Our hosting provider, which serves the site and runs the form endpoint.
• Our email provider, which transmits and stores the enquiry email.
• Manufacturing and freight partners, where progressing your specific order requires it — for example sending a delivery address to a carrier. Only what is needed is shared.
• Where the law requires it, in response to a valid legal request.

We do not sell, rent or trade your information, and we do not share it with advertising networks or data brokers.

How long we keep it

Long enough to do the work and meet our record-keeping obligations, and no longer than we can justify.

• Enquiries that do not become orders are kept while the conversation is live and for a reasonable follow-up period afterwards, then deleted.
• Order records, approved die lines and proofs are kept for as long as we may need them to service a reorder or resolve a dispute, and to satisfy accounting and tax record-keeping requirements.
• Artwork files are kept while a project is active and for the reorder period. Ask us to delete them sooner and we will.
• Rate-limiting counts exist in memory only and expire within minutes.

Your choices and rights

These apply regardless of where you are, and some jurisdictions give you additional statutory rights.

• Ask what we hold about you and receive a copy.
• Ask us to correct anything that is wrong.
• Ask us to delete your enquiry and any attached files, subject to records we are required to keep.
• Withdraw consent for future contact at any time.
• Object to a particular use and have us explain the basis for it.

Email [email protected] with what you would like done. We may ask a question to confirm you are the person the information relates to, so we do not disclose it to someone else.

Security

What we do, stated without overclaiming.

The site is served over HTTPS with strict transport security, a content security policy, and headers that prevent framing and content-type sniffing. Form input is validated and sanitised server-side, uploads are restricted by type and size, and credentials are held only in server environment variables.

No system is completely secure, and we will not claim otherwise. If you have something genuinely confidential, tell us before sending it and we will agree a suitable route.

Children

This is a business-to-business website and is not directed at children. We do not knowingly collect information from anyone under 16. If you believe a child has submitted information through this site, contact us and we will delete it.

Changes to this policy

If we change how the site handles information, this page is updated and the effective date changes with it. The effective date of this version is July 30, 2026. Material changes to how we use information you have already submitted will be raised with you directly rather than only posted here.