Privacy policy
Privacy Policy — Mystery Manga Box
Last updated: 27/09/2026
This policy explains what personal data Mystery Manga Box collects when you use mysterymanga.com why we collect it, and what rights you have over it. We're a UK-based business, and we handle your data in line with UK GDPR and the Data Protection Act 2018.
What we collect
- Contact and account details: name, email address, delivery address, phone number (if provided)
- Order and payment information: what you've ordered, your subscription tier and billing history. Payment card details are handled entirely by our payment processor (Shopify Payments) — we never see or store your full card number.
- Quiz answers: your genre preferences, reading experience level, who the box is for (yourself or a gift), and any content you've asked us to avoid. We use this specifically to hand-pick what goes in your box.
- Order history with us: so we can avoid sending you a book you've already received.
Why we collect it
- To fulfil your order — picking, packing, and shipping your box
- To manage your subscription — billing, and (where applicable) letting you skip, pause, or cancel
- To avoid sending you duplicate books
- To respect content preferences you've told us about
- To respond if you contact us with a question or an issue
We don't use your data for anything beyond running this business — we don't sell your data to third parties.
Who we share it with
- Shopify — our e-commerce platform, which processes payments and hosts our store. Shopify has its own privacy policy governing how it handles data on our behalf.
- Delivery couriers — your name and delivery address only, so your box can actually reach you.
Some of these providers may process data outside the UK/EEA. Where that happens, we rely on their own compliance with UK-recognised data transfer safeguards.
How long we keep it
We keep your data for as long as your account is active, and for a reasonable period afterward to meet our legal and accounting obligations (typically up to 6 years for financial records, per HMRC requirements). You can ask us to delete your data sooner — see your rights below.
Your rights
Under UK GDPR, you have the right to:
- Ask what personal data we hold about you
- Ask us to correct inaccurate data
- Ask us to delete your data (subject to our legal obligation to keep certain records)
- Ask us to restrict or object to certain processing
- Receive your data in a portable format
- Complain to the Information Commissioner's Office (ico.org.uk) if you think we've mishandled your data
To exercise any of these, contact us at support@mysterymanga.com
Cookies
Our site uses cookies for essential store functionality (like your cart) and, where enabled, analytics and marketing cookies. You'll be asked to consent to non-essential cookies when you first visit the site, and can change your preference at any time.
Children
Mystery Manga Box is not intended for children. Some manga content is aimed at mature readers. If you're buying as a gift for a younger reader, please use the content sensitivity section of our quiz to flag that.
Contact us
Questions about this policy or your data: support@mysterymanga.com