DropRush247 Privacy Policy

Last updated: 24 August 2026

This Privacy Policy explains how DropRush247.co.uk ("DropRush247", "we", "us" or "our") collects, uses, shares and protects your personal information when you visit our website, create an account, purchase a Mystery Box, interact with a Live Price Drop, contact us or otherwise use our services.

DropRush247 is a UK online retailer selling themed and general Mystery Boxes directly from our own stock. We are not a third-party marketplace.

We are committed to handling your personal information fairly, lawfully and transparently.

1. Who We Are

The organisation responsible for your personal information is:

Trading name: DropRush247

Legal business name: [ADD LEGAL BUSINESS NAME]

Website: DropRush247.co.uk

Business address: [ADD BUSINESS ADDRESS]

Privacy email: [ADD PRIVACY / CUSTOMER SERVICE EMAIL]

Company number: [ADD IF APPLICABLE]

VAT number: [ADD IF APPLICABLE]

For UK data-protection purposes, the legal business operating DropRush247 is the data controller for the personal information described in this policy.

2. Information We Collect

The information we collect depends on how you interact with DropRush247.

Account Information

If you create an account, we may collect:

• Your full name

• Email address

• Telephone number

• Account identifier

• Account preferences

• Account creation date

• Login and account activity

Passwords are handled through our ecommerce and account systems and are not intended to be available to us in readable form.

Order Information

When you purchase a Mystery Box or another product, we may collect:

• Full name

• Email address

• Telephone number

• Billing address

• Delivery address

• Mystery Box or product purchased

• Product category or theme

• Price paid

• Delivery charge

• Order number

• Order date

• Order status

• Dispatch information

• Tracking information

• Return and refund information

Mystery Box Activity

When you browse or purchase Mystery Boxes, we may collect information about:

• Mystery Boxes viewed

• Categories viewed

• Products added to your basket

• Purchases made

• Previous purchases

• Current price at the time of purchase

• Live Price Drops viewed

• Checkout activity

• Website interactions

Payment Information

Payments may be processed through Shopify Payments and/or other payment providers available at checkout.

We may receive limited payment-related information such as:

• Payment status

• Transaction reference

• Payment method type

• Limited card information provided by the payment processor

• Fraud or risk indicators

We do not normally receive or store your full payment-card number, PIN or card security code.

Customer Service Information

If you contact us, we may collect:

• Your name

• Email address

• Telephone number

• Order number

• Copies of correspondence

• Complaint information

• Return information

• Refund information

• Photographs

• Videos

• Documents or other information you send us

Website and Device Information

When you visit DropRush247.co.uk, we and our service providers may collect information such as:

• IP address

• Browser type

• Device type

• Operating system

• Approximate location derived from your IP address

• Pages viewed

• Mystery Boxes viewed

• Referring website

• Date and time of visits

• Website interactions

• Cookie identifiers

• Session information

• Technical logs

Marketing Information

Where applicable, we may record:

• Whether you subscribed to marketing

• Your marketing preferences

• When and how you subscribed

• Email engagement

• Advertising interactions

• When you unsubscribed

3. How We Collect Your Information

We may collect personal information:

Directly From You

For example when you:

• Create an account

• Buy a Mystery Box

• Complete checkout

• Subscribe to marketing

• Contact us

• Request a return

• Request a refund

• Participate in a promotion or competition

Automatically

Information may be collected automatically through:

• Cookies

• Shopify

• Website logs

• Analytics technology

• Security systems

• Live Price Drop software

• Advertising technologies where permitted

From Service Providers

We may receive information from organisations that help operate DropRush247, including:

• Shopify

• Payment processors

• Live Price Drop technology providers

• Delivery companies

• Fraud-prevention providers

• Email providers

• Analytics providers

• Advertising platforms

4. How We Use Your Personal Information

We may use your information for the following purposes.

Operating DropRush247

Including to:

• Run our website

• Manage customer accounts

• Display Mystery Boxes

• Manage inventory

• Operate Live Price Drops

• Maintain shopping baskets and checkout

• Maintain website security

Processing Orders

Including to:

• Accept purchases

• Process payments

• Confirm orders

• Prepare Mystery Boxes

• Arrange delivery

• Send order confirmations

• Provide tracking information

• Handle cancellations

• Process returns

• Issue refunds

Personalising and Managing Mystery Box Purchases

Where relevant, we may use your order information to:

• Identify which type of Mystery Box you purchased

• Prepare the correct Mystery Box category

• Manage stock allocation

• Process repeat orders

• Avoid errors in fulfilment

• Apply any specific product promises stated on the relevant listing

Unless we expressly offer a preference-based Mystery Box, we do not guarantee that previous purchase history will be used to determine future Mystery Box contents.

Customer Service

We may use your information to:

• Answer enquiries

• Resolve complaints

• Investigate delivery problems

• Deal with missing or damaged products

• Process returns

• Issue refunds

• Resolve account or checkout problems

Preventing Fraud and Abuse

We may process information to:

• Detect fraudulent payments

• Prevent account misuse

• Identify suspicious transactions

• Protect our customers

• Protect our website

• Prevent abuse of promotional offers

• Investigate security incidents

Improving DropRush247

We may analyse information to:

• Understand which Mystery Box categories are popular

• Improve our product selection

• Improve website navigation

• Improve site performance

• Diagnose technical issues

• Develop new Mystery Box themes

• Measure marketing effectiveness

Legal and Regulatory Purposes

We may process information where necessary for:

• Tax

• Accounting

• Consumer protection

• Fraud prevention

• Legal claims

• Regulatory compliance

• Responding to lawful requests from authorities

5. Our Lawful Bases

We process personal information only where we have a lawful basis.

Depending on the purpose, we may rely on:

Contract

We may process information where necessary to enter into or perform a contract with you, including:

• Creating and managing your account

• Processing your Mystery Box purchase

• Taking payment

• Delivering your order

• Handling a cancellation, return or refund

Legal Obligation

We may process information where necessary to comply with legal obligations relating to matters such as:

• Tax

• Accounting

• Consumer protection

• Regulatory requirements

Legitimate Interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights.

These may include:

• Preventing fraud

• Protecting our website

• Maintaining service security

• Preventing misuse

• Improving our services

• Understanding business performance

• Establishing or defending legal claims

Consent

Where required, we may rely on your consent for:

• Certain marketing communications

• Non-essential cookies

• Certain analytics technologies

• Certain advertising technologies

Where we rely on consent, you can withdraw it at any time.

6. Mystery Box Contents and Privacy

The contents of a Mystery Box may be selected according to:

• The Mystery Box category

• Available inventory

• Product value criteria

• Product condition

• Promotional requirements

• Random or semi-random selection methods

We do not normally use sensitive personal information to determine Mystery Box contents.

If we later introduce personalised Mystery Boxes based on preferences you provide, we will explain how that information is used before collecting it.

7. Live Price Drops

Some Mystery Boxes may be available through Live Price Drops.

When you interact with a Live Price Drop, we may process information such as:

• Drop viewed

• Current price

• Time of interaction

• Purchase attempt

• Successful purchase

• Device or session information

This information may be used to operate the Live Price Drop, manage inventory and prevent multiple customers purchasing the same limited-stock product.

8. Marketing Communications

Where legally permitted, we may send marketing about:

• New Mystery Boxes

• Mystery Box releases

• Limited-edition boxes

• Live Price Drops

• Seasonal Mystery Boxes

• Promotions

• Competitions

• Upcoming DropRush247 events

• Similar products and services

Where consent is required, we will ask you to opt in.

In some circumstances, UK electronic-marketing rules may allow us to market our own similar products or services to existing customers under the soft opt-in, provided all applicable requirements are satisfied.

You can unsubscribe at any time by:

• Using the unsubscribe link in a marketing email; or

• Contacting us

Unsubscribing from marketing does not stop necessary service communications such as:

• Order confirmations

• Delivery updates

• Payment notifications

• Return information

• Refund information

• Account-security notices

9. Advertising

We may advertise DropRush247 using platforms including:

• Instagram

• Facebook

• TikTok

• Google

• YouTube

• Other advertising services

Subject to your cookie choices and applicable law, advertising technologies may be used to:

• Measure advertising performance

• Understand whether adverts lead to purchases

• Build relevant audiences

• Show advertising to previous website visitors

• Improve advertising campaigns

10. Cookies

DropRush247 uses cookies and similar technologies.

Essential Cookies

These may be necessary for:

• Website security

• Customer accounts

• Shopping baskets

• Checkout

• Payments

• Inventory management

• Live Price Drop functionality

Preference Cookies

These may remember choices and settings.

Analytics Cookies

These may help us understand how customers use DropRush247.

Advertising Cookies

Where used and permitted, these may help measure advertising and provide more relevant marketing.

Where consent is required, non-essential cookies will not be activated until you have made the appropriate choice.

Please see our Cookie Policy for additional information.

11. Who We Share Personal Information With

We may share personal information with trusted organisations where necessary to operate DropRush247.

Shopify

Shopify provides our ecommerce platform and may process information relating to:

• Website use

• Accounts

• Shopping baskets

• Checkout

• Orders

• Payments

Payment Providers

Payment providers may process information required to:

• Authorise payments

• Process transactions

• Prevent fraud

• Issue refunds

Delivery Companies

We may provide delivery companies with information such as:

• Recipient name

• Delivery address

• Email address

• Telephone number

where necessary to deliver your order.

Live Price Drop Providers

Where third-party software operates our Live Price Drops, that provider may process information needed to:

• Operate price reductions

• Manage availability

• Support checkout

• Prevent duplicate purchases

• Provide technical support

Email and Communications Providers

These providers may help us send:

• Order confirmations

• Delivery updates

• Customer-service messages

• Marketing communications where permitted

Analytics Providers

Analytics providers may process website-usage information where permitted.

Advertising Platforms

Where applicable and permitted, information may be shared with advertising platforms for measurement and advertising purposes.

Professional Advisers

Information may be shared where reasonably necessary with:

• Accountants

• Lawyers

• Insurers

• Other professional advisers

Government and Regulatory Authorities

We may disclose information where required by law or valid legal process, including to:

• Courts

• Law-enforcement agencies

• Regulators

• Tax authorities

12. No Third-Party Marketplace Sellers

DropRush247 does not currently allow independent sellers to list their own products or Mystery Boxes.

All products are sold directly by us.

We therefore do not routinely share customer order information with independent marketplace sellers.

13. Fraud Prevention and Security

We and our service providers may analyse information including:

• Account activity

• Payment information

• IP address

• Device information

• Order history

• Delivery information

• Checkout behaviour

• Security indicators

to identify fraud, account misuse or other suspicious activity.

Where automated systems are used in a way that produces legal or similarly significant effects, we will comply with applicable data-protection requirements.

14. How Long We Keep Personal Information

We keep personal information only for as long as reasonably necessary.

Retention periods depend on factors including:

• Whether your account remains active

• Your order history

• Tax and accounting requirements

• Consumer-law requirements

• Fraud-prevention requirements

• Returns or warranty periods

• Legal limitation periods

• Complaints or disputes

Examples include:

Account Information

Usually retained while your account remains active and for an appropriate period afterwards.

Order and Transaction Records

May be retained for the period required for applicable accounting, taxation, contractual and legal purposes.

Customer-Service Information

May be retained for an appropriate period to resolve complaints, disputes and legal claims.

Marketing Records

May be retained while you remain subscribed.

If you unsubscribe, we may retain limited suppression information so that we can respect your request not to receive marketing.

Fraud and Security Information

May be retained where reasonably necessary to protect our customers and business.

When personal information is no longer required, we may delete or anonymise it.

15. International Transfers

Some of our service providers may process personal information outside the United Kingdom.

Where a restricted international transfer takes place, we will use an appropriate lawful mechanism where required.

Depending on the circumstances, this may include:

• UK adequacy regulations

• Approved contractual safeguards

• The UK International Data Transfer Agreement

• An appropriate UK Addendum

• Another legally permitted transfer mechanism

16. Keeping Your Information Secure

We use reasonable technical and organisational measures designed to protect your personal information against:

• Unauthorised access

• Loss

• Misuse

• Alteration

• Disclosure

• Destruction

Measures may include:

• Secure ecommerce systems

• Encryption

• Access controls

• Authentication

• Secure payment providers

• Fraud monitoring

• Security logging

• Restricted administrative access

No internet-based service can guarantee complete security.

17. Your Data Protection Rights

Depending on the circumstances, UK data-protection law may give you rights including:

Right to Be Informed

You have the right to know how your personal information is collected and used.

Right of Access

You may ask for access to personal information we hold about you.

Right to Rectification

You may ask us to correct inaccurate or incomplete information.

Right to Erasure

In certain circumstances, you may ask us to delete your personal information.

This right is not absolute, and we may need to retain information where we have a lawful reason.

Right to Restrict Processing

In certain circumstances, you may ask us to restrict how your information is used.

Right to Data Portability

Where applicable, you may have the right to receive certain information in a structured, commonly used and machine-readable format.

Right to Object

You may object to certain processing based on legitimate interests.

You may object to direct marketing at any time.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights relating to certain decisions made solely through automated processing that have legal or similarly significant effects.

Right to Withdraw Consent

Where we rely on consent, you may withdraw it at any time.

This does not affect processing carried out lawfully before consent was withdrawn.

18. Exercising Your Rights

To exercise a data-protection right, contact:

Privacy email: [ADD PRIVACY EMAIL]

Please provide:

• Your name

• Your DropRush247 account email where applicable

• Details of your request

We may ask for reasonable information to verify your identity.

We will respond within the timeframe required by applicable data-protection law.

19. Complaints

If you have concerns about how we handle your personal information, please contact us.

Email: [ADD PRIVACY EMAIL]

Address: [ADD BUSINESS ADDRESS]

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator.

Contacting us first does not remove your right to make a complaint to the ICO.

20. Children

DropRush247's purchasing services are intended for people legally capable of entering into the relevant purchase contract.

We do not knowingly seek to collect unnecessary personal information from children.

If you believe a child has provided personal information to us inappropriately, please contact us.

21. Social Media and Livestreams

DropRush247 may operate social-media accounts or livestreams through services including:

• YouTube

• TikTok

• Instagram

• Facebook

If you interact with us through one of these services, the relevant platform may independently process your information under its own privacy policy.

Unless specifically stated otherwise, purchases promoted on social media or livestreams should be completed through DropRush247.co.uk.

22. Competitions and Giveaways

From time to time, we may run competitions or giveaways.

Where you enter, we may process information such as:

• Name

• Contact information

• Entry details

• Prize-delivery information

Additional privacy information or competition terms may be provided where appropriate.

We will not automatically add competition entrants to marketing lists unless we have a lawful basis to do so.

23. Third-Party Links

Our website may contain links to third-party websites or services.

Those organisations operate their own privacy practices.

We recommend reviewing their privacy notices before providing personal information.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time because of:

• Changes to DropRush247

• New Mystery Box categories

• Changes to Live Price Drops

• New technology

• Changes to service providers

• Changes in applicable law or regulatory guidance

The latest version will be published on DropRush247.co.uk with the updated date.

Where required, we will notify you of material changes before using your information for a materially new purpose.

25. Contact DropRush247

For privacy enquiries, requests or complaints, contact:

DropRush247.co.uk

Legal business name: [ADD LEGAL BUSINESS NAME]

Privacy email: [ADD PRIVACY / CUSTOMER SERVICE EMAIL]

Business address: [ADD BUSINESS ADDRESS]

Company number: [ADD IF APPLICABLE]

VAT number: [ADD IF APPLICABLE]

---

DropRush247.co.uk

Unbox the surprise. Discover what’s inside.