Last updated 16 August 2026
1. Who we are
MK Bullion is a trading name of Adam Okapa, a sole trader based in the United Kingdom. For the purposes of UK data protection law we are the “data controller” for the personal information described on this page — meaning we decide how and why it is used.
| Trading name | MK Bullion |
|---|---|
| Legal name | Adam Okapa |
| Correspondence address | 5 Deeping Gate, Stonebridge, Milton Keynes, MK13 0DE |
| info@mkbullionboxes.com |
2. The short version
This website has no accounts, no shopping cart, no analytics and no cookies. We do not track you, we do not build a profile of you, and we never sell or rent your information to anyone.
The only personal information we hold is what you choose to send us when you get in touch, plus what we need to fulfil and account for an order.
3. What we collect, and when
When you simply browse this site
We collect nothing ourselves. There are no cookies, no analytics scripts, no advertising pixels and no visitor tracking of any kind. However, two third parties are involved in delivering the page to you:
- Cloudflare hosts the site. Like any web host, its servers automatically log technical information — including your IP address, browser type and the pages requested — for security and to keep the site running. See the Cloudflare Privacy Policy.
- Google Fonts supplies the typefaces used on this site. Because the font files are requested from Google's servers, your IP address is transmitted to Google when a page loads. See the Google Privacy Policy.
When you contact us
Our enquiry form and “Send as enquiry” buttons do not transmit anything to us on their own. They open your own email app or WhatsApp with a message pre-filled, which you then choose to send. Nothing reaches us unless you press send.
When you do send us a message, we receive and keep:
- Your name and the email address or phone number you contact us from
- The specification you configured, if you used the box builder
- Anything else you choose to write to us
If you message us on WhatsApp, that conversation also passes through WhatsApp's own systems, operated by Meta. See the WhatsApp Privacy Policy.
When you place an order
To make and send your box, we will additionally need:
- Your delivery address
- Any custom text you want printed onto the insert
- A record of what you ordered, what you paid and when
We never see or store your card details. If you pay by card, the payment is handled entirely by Revolut UK Ltd, who process it under their own privacy policy. If you buy through eBay or Whatnot, that marketplace handles your payment and shares only what we need to dispatch your order.
4. Why we use it, and our lawful basis
| What we do | Why | Lawful basis |
|---|---|---|
| Reply to your enquiry and quote for a build | You asked us to | Steps taken at your request before entering a contract |
| Make, pack and deliver your order | To perform our side of the deal | Performance of a contract |
| Keep sales and accounting records | HMRC requires it | Legal obligation |
| Handle a complaint, return or warranty claim | To put things right and keep a record | Legal obligation and our legitimate interests |
We do not send marketing emails. If that ever changes we will ask for your consent first, and every message will carry a one-click unsubscribe.
5. Who we share it with
We share your information only with the suppliers we need to run the business:
- Our email provider, which stores our correspondence with you
- Our hosting provider (Cloudflare), which serves this website
- Delivery carriers such as Royal Mail or a courier, who need your name and address to deliver
- Our payment provider (Revolut UK Ltd), who processes payments
- Our accountant and HMRC, where required for tax
We do not sell, rent or trade your personal information, and we do not share it for anyone else's advertising.
6. How long we keep it
- Enquiries that don't become orders: up to 12 months, then deleted.
- Order and accounting records: up to six years after the end of the tax year they relate to, because HMRC requires us to keep them.
- Custom artwork or engraving text: kept with the order record, so we can repeat or repair a build.
7. Where your information is held
We are based in the UK and our records are held here. Some of our suppliers — including Cloudflare, Google and Meta — are international and may process data outside the UK. Where that happens, those transfers are covered by safeguards recognised under UK data protection law, such as the International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.
8. Your rights
Under UK GDPR you have the right to:
- Ask what personal information we hold about you, and get a copy
- Have inaccurate information corrected
- Ask us to delete your information, where we have no ongoing legal reason to keep it
- Ask us to restrict how we use it, or object to that use
- Receive your information in a portable format
- Withdraw consent at any time, where we relied on consent
To exercise any of these, email info@mkbullionboxes.com. We will respond within one month. It is free, unless a request is manifestly unfounded or excessive.
9. Complaining
If you think we have mishandled your information, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator:
- Online: ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
10. Cookies
This website sets no cookies and uses no local storage, so there is no cookie banner and nothing to consent to. If we ever add analytics, we will ask before anything non-essential is stored on your device.
11. Children
Our products are not aimed at children and we do not knowingly collect information from anyone under 16. If you believe a child has sent us personal information, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the business changes. The date at the top always shows the current version.