This privacy notice explains how Lunchboxes & Laundry (www.lunchboxesandlaundry.co.uk) handles personal data. It's written to meet the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Who is responsible
The data controller is Gemma Shaw, 7 Beckett's Park Drive, Leeds LS6 3PD, United Kingdom. Email: gemma@lunchboxesandlaundry.co.uk.
What I collect and why
You can read this blog without giving me any personal information. There are no accounts, no comments and no contact forms.
- Emails you send me. If you email me, I use your name, email address and whatever you write to reply to you. The lawful basis is legitimate interests (answering your message). I keep correspondence for up to 12 months and then delete it, unless we're still in touch.
- Server logs. The site is hosted and delivered by Cloudflare, Inc. To keep the site running and protect it from abuse, Cloudflare processes technical data such as your IP address, browser type and the pages requested. The lawful basis is legitimate interests (security and reliability). Cloudflare may process this data outside the UK; those transfers are covered by the UK International Data Transfer Addendum and Cloudflare's data processing terms.
- Newsletter box. There is no mailing list at the moment and the sign-up box doesn't store or send your email address. If I ever start one, this notice will be updated first.
Cookies and similar technologies
I don't use analytics, advertising or tracking cookies. Your browser may store a small note that you've dismissed the cookie message, so it isn't shown on every page. That's strictly necessary for the site to work as you'd expect, so it doesn't need consent under PECR. Fonts are served from this site's own domain, not from a third-party font service.
Affiliate links
Some posts contain affiliate links. Nothing is shared with a retailer just by reading a post. If you click an affiliate link, you leave this site, and the retailer or affiliate network may set cookies to record that you came from here. That's covered by their own privacy and cookie policies, which you can read on their sites.
Your rights
Under UK GDPR you have the right to ask for a copy of the personal data I hold about you, to have it corrected or deleted, to restrict or object to how it's used, and to data portability. Email me and I'll respond within one month. I won't charge for this.
If you're unhappy with how I've handled your data, you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator: ico.org.uk, helpline 0303 123 1113. I'd appreciate the chance to sort it out first, so please get in touch.
Children
This blog is written for adults. I don't knowingly collect personal data from children.
Changes
I'll update this notice if anything changes. Last updated: October 2026.