Last updated 7 October 2026.
SLP Midlands Limited trading as Sandbox Computers, registered in England and Wales, company number 06278810. Shop and contact address: 53 Tunnel Hill, Worcester WR4 9SD. Telephone 01905 673738. Email [email protected]. Registered office: 53 Tunnel Hill, Worcester, Worcestershire, WR4 9SD.We are the “controller” of the personal information in this policy: we decide why and how it is used. This policy explains what we collect, why, who we share it with, and your rights under UK data protection law (the UK GDPR and the Data Protection Act 2018).
What we collect
- When you order: your name, address, email, telephone number, what you bought, and how you chose to receive it (delivery, or collection with the day and time you picked). Card details are entered with our payment provider, not with us: we never see or store your full card number.
- When you collect an order: we check your collection code and look at your photo ID. We do not copy or keep your ID. We keep your name, the serial numbers of what we handed over, and the signature you give on the collection receipt.
- When you ask for a repair, upgrade or data service: your contact details, a description of the device and its fault, and any passwords or codes you tell us so we can test it. We only open your personal files where the repair or a data transfer needs it, and with your permission.
- When you save a custom PC build: the parts you chose and a reference number. If you give an email address we use it only to send you the link, and if you are logged in the build is also shown in your account. We use saved builds to help you when you ring us, and, without your name, to see which parts are popular.
- When you contact us: what you write on our forms, in emails and on the phone, and any photographs you attach.
- When you use the website: basic technical records (your IP address, browser and the pages requested) kept by our hosting for security and to keep the site working. We do not use advertising or analytics cookies (see our Cookie policy).
Why we use it, and our legal reason
- To take your order, supply goods and services, deliver, repair and give warranty support: to carry out our contract with you.
- To keep invoices, accounts and tax records: a legal obligation.
- To prevent fraud and make sure goods are handed to the right person (collection codes, ID checks, signed receipts), to keep the website secure, and to deal with complaints: our legitimate interests, which we balance against your rights.
- If we ever send marketing emails we will ask you first: your consent, which you can withdraw at any time.
Who we share it with
Only the people who need it to do the job. We never sell your information.
- Suppliers and couriers. Many items are sent to you directly from our suppliers’ warehouses (for example VIP, Target and West Coast) and by couriers. We give them your name, delivery address and telephone number so they can deliver.
- Payment providers who take your payment and tell us it has been paid.
- Service providers who help us run the business: website hosting, email, our accountants, and finance partners if you choose a payment plan.
- Google Maps, only if you press “Show the map”. Google then sees that you visited, under its own privacy policy.
- The authorities where the law requires it.
Some of these providers may process information outside the UK. Where they do, we expect them to protect it to UK standards (for example under the UK’s approved transfer arrangements).
How long we keep it
- Orders, invoices and payment records: 6 years (tax and accounting law).
- Repair records, collection receipts and warranty details: up to 6 years, in case of a warranty or contract claim.
- Enquiries that did not become an order: up to 12 months.
- Saved custom PC builds: 12 months (a build that became an order is kept with that order record).
- Data on a device you leave with us is not kept: it stays on your device, and we only ever copy your files if you ask for a data transfer, after which our copy is deleted.
Your rights
You can ask to see what we hold about you, to correct it, to have it deleted (unless we must keep it by law), to restrict or object to how we use it, and to take a copy to another provider. Ask us at [email protected] or on 01905 673738. We will reply within one month.
If you are unhappy with how we have used your information, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Changes
If we change how we use your information we will update this page and the date above.