Acceptable Use Policy
Last updated: 5 November 2026
Version: 2.0
1. Scope
This Acceptable Use Policy applies to your use of BOXXED, our websites, ordering flows, customer account features, delivery and collection tools, support pages, data request forms, APIs, staff or administration portals where made available to you, and any related services that link to this policy, together called the Services.
BOXXED is powered by NibbleKit technology provided by Paul Hepple trading as DarkByte Creations. NibbleKit provides software, hosting integrations, authentication support, database, storage, messaging, payment and administrative tools. Unless NibbleKit or DarkByte is expressly identified to you as the seller, food business, payment recipient or fulfilment provider for a particular transaction, those technology services do not make NibbleKit or DarkByte the seller of our products or the operator of our food business.
2. Who Must Comply
This policy applies to customers, account holders, visitors, people submitting forms or messages, authorised staff users, contractors, delivery or collection users, and anyone else who accesses the Services. If you use the Services for an organisation, you must ensure that your authorised users comply with this policy.
3. Prohibited Use
You must not use the Services:
- in a way that breaches applicable law, a court order or another person’s rights;
- for fraud, false orders, payment abuse, chargeback abuse, identity misuse, voucher abuse, account takeover or other dishonest activity;
- to threaten, harass, exploit, discriminate against, defame, abuse or endanger customers, staff, delivery personnel, support teams or any other person;
- to upload, transmit, introduce or link to malware, credential-stealing tools, corrupted data, automated scraping tools or harmful code;
- to probe, scan, overload, reverse engineer, bypass, scrape, harvest, copy, resell or commercially exploit the Services or NibbleKit platform systems without written permission;
- to gain unauthorised access to accounts, customer data, order data, payment information, administration tools or infrastructure;
- to submit spam, unsolicited marketing, deceptive messages, malicious support requests or content that is obscene, unlawful or misleading;
- to interfere with food-safety, allergen, refund, delivery, collection, verification, security or privacy workflows, or to harm or exploit a child.
4. Account and Order Information
You must provide information that is accurate, current and reasonably complete when creating an account, placing an order, setting delivery or collection details, saving preferences, making a support request, requesting a refund, submitting allergy or dietary information, or exercising privacy rights. You must not impersonate another person or use contact, payment or delivery details without authority.
When sending feedback, photos, instructions or other material, share only what is relevant and what you have the right to share. Do not send another person’s private information without authority, infringe their intellectual property or target anyone with harassment or hateful content. Good-faith complaints, refund requests and security reports are welcome.
5. Business and Admin Content
Authorised business or staff users must keep product descriptions, prices, availability, images, ingredients, allergen information, dietary claims, nutrition information, preparation notes, collection instructions, delivery settings, refund settings and business contact details accurate and up to date. Claims must be capable of substantiation and must be corrected or withdrawn without undue delay if they become inaccurate.
6. Security Research
You must not perform vulnerability testing, scanning, scraping, load testing or security research against the Services unless you have our prior written permission and comply with the authorised scope. Reporting a vulnerability does not authorise continued testing, access to personal data, disruption, persistence or public disclosure.
7. Breach of This Policy
Where we reasonably believe that this policy has been breached, we may take proportionate action, including warning you, blocking suspicious activity, removing content, restricting features, suspending or closing an account, cancelling an order before acceptance, preserving evidence, notifying service providers or authorities, or taking legal action. We will not restrict statutory consumer or data-protection rights merely because you raise a genuine complaint in good faith.
Where lawful and safe, we will tell you about a restriction and how to contact us if you think it was applied incorrectly. Restrictions do not remove rights for orders we have already accepted. Updates to this policy take effect when published unless a later date is given.
8. Contact
Questions about this Acceptable Use Policy can be sent to:
Mrs Samantha Allonby trading as Boxed Events
128 Midland Road
Royston
Barnsley S71 4QT
United Kingdom
support@boxxedfood.com
07895 986351
You may also want to read: