Last Updated: 9th September 2026

Boxed Bills Privacy Notice

Boxed Bills brings a household’s selected utilities into one managed monthly arrangement. This notice follows the information journey from requesting a quote through to the end of a household agreement. It explains what we need at each stage and what happens to that information.

Boxed Bills LTD is responsible for the personal information described here. We are registered in England and Wales under company number 17074871. Our registered office is 59 Baltic Quay, Mill Road, Gateshead, United Kingdom, NE8 3QW.

1 Privacy at a glance

• We use personal information to quote for, arrange and manage household utility services.
• Utility suppliers receive the details they need to provide gas, electricity, water or broadband.
• Stripe handles payment-card information. Boxed Bills records payment instructions, status and transaction references rather than raw card details.
• We do not carry out credit-reference searches or report payment performance to credit-reference agencies.
• We do not make decisions about customers solely by automated means where those decisions have legal or similarly significant effects.
• You can ask about your information or exercise your rights through hello@boxedbills.co.uk.

2 Getting a quote

When you ask for a quote, we use the property address, proposed occupation dates, number of household members, selected utilities and your contact details to calculate and explain the available package. We use this information because you have asked us to take steps before entering into an agreement.

If a letting agent, accommodation partner or another household member introduces you, we may receive your name, contact details and relevant property information from them. We will provide you with this notice when required.

3 Joining a Boxed household

The lead tenant supplies the information needed to create the household account. Other household members may provide their own details when they use a join-household link. We record names, email addresses, telephone numbers, the service address, occupation dates, the selected package and each person’s role in the household.

We use this information to accept the order, communicate with the household and provide the service. Our main lawful bases are taking requested steps before a contract and performing the household agreement. Where a lead tenant gives us another person’s details, we will tell that person how their information is being used when the law requires us to do so.

4 Managing payments

Stripe processes payment-card and payment-instruction information. Boxed Bills receives information such as the payer, amount, payment status, transaction reference and whether a collection has succeeded or failed. We use it to allocate household contributions, collect amounts due, pay supplier invoices, deal with failed payments and maintain financial records.

This processing is necessary to perform the agreement. We also keep accounting and tax records where the law requires us to do so. If an amount remains unpaid, relevant information may be provided to professional advisers or a debt-recovery provider where recovery is lawful and necessary.

5 Working with utility suppliers

To arrange and manage a selected service, we may give an energy, water or broadband supplier the identity, contact, property and account information it reasonably requires. We may receive supplier account references, tariffs, invoices, service updates, meter readings and consumption information in return.

We use that information to open or administer accounts, submit readings, check bills, make supplier payments, respond to account problems and prepare a closing statement. This is done to perform the household agreement and under the authority provided by the lead tenant. A supplier may be independently responsible for the information it receives and will explain its own use in its privacy notice.

If you choose to give us health or vulnerability information so that appropriate supplier support can be requested, we will use it only for that purpose and identify an appropriate legal condition. We will obtain explicit consent where it is required.

6 When the household changes or the service ends

We use move-in, move-out and replacement-tenant information to update household payments and supplier accounts. At the end of the service, we use readings, supplier charges and payment records to complete the account and deal with any balance or refund.

Contract, payment and supplier-account records are normally retained for up to six years after the agreement ends so that we can meet accounting and legal requirements and deal with disputes. Information may be kept longer where a legal requirement, dispute or investigation makes that necessary, or deleted sooner where it is no longer required.

7 Using our website

Our website may record technical information such as IP address, device and browser type, pages viewed and cookie identifiers. Essential cookies support security and basic operation. Where the law requires it, we will ask before using non-essential analytics or advertising cookies. The website’s cookie information and preference tool describe the cookies currently in use.

Messages needed to provide a quote or manage an account are service communications. If we send marketing, you may opt out through the message or by contacting us. Opting out of marketing does not stop necessary service communications.

8 The organisations that help us

Besides the utility suppliers and Stripe described above, information may be handled by providers supporting our website, email, communications, customer management and IT. It may also be disclosed to auditors, insurers, legal advisers, regulators, courts, law-enforcement bodies or other authorities where necessary or legally permitted.

If Boxed Bills or relevant business assets are reorganised or transferred, information may be shared with a genuine purchaser or successor under appropriate confidentiality and data-protection safeguards.

A provider may sometimes process information outside the United Kingdom. Where that happens, we will use a lawful transfer route, such as UK adequacy regulations or approved contractual safeguards. You may ask us for information about the safeguard used for a particular transfer.

9 How we protect information

We limit access to people who need information for their work and use service providers, access controls, confidentiality requirements and incident procedures appropriate to the information and risks involved. No system is completely secure, so we review our safeguards and respond to suspected personal-data breaches.

We also use information where reasonably necessary to prevent fraud, maintain accurate records, secure our systems, answer enquiries and operate Boxed Bills effectively. For those activities we rely on legitimate interests after considering the effect on individual rights. We use or disclose information where a legal obligation requires it.

10 Your choices and legal rights

Depending on the information and why it is being used, you may ask us to provide a copy, correct inaccuracies, erase information, restrict its use or supply certain information in a portable format. You may object to processing based on legitimate interests and may object to direct marketing at any time. Where processing depends on consent, you may withdraw that consent without affecting earlier lawful use.

Legal conditions and exceptions apply to some requests. We may ask for information needed to verify identity. We do not normally charge, although the law permits a fee or refusal in limited circumstances.

11 Questions requests and complaints

Email hello@boxedbills.co.uk, telephone +44 7466 674 984, or write to Boxed Bills LTD at 59 Baltic Quay, Mill Road, Gateshead, United Kingdom, NE8 3QW.

We will acknowledge a data-protection complaint within 30 days, investigate it without undue delay and explain the outcome. You may also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

12 Keeping this notice current

We will update this notice when our service, providers or legal obligations change. The website will show the current effective date. If a change materially affects how we use information, we will take reasonable steps to bring it to the attention of affected people before the new use begins.