Privacy Policy
Effective Date: November 1, 2024
BoxDrop Direct ("we," "our," or "us") operates the boxdropdirect.com website (hereinafter referred to as the "Service").
This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service, as well as the choices you have associated with that data. We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.
1. Definitions
- Service: The Service refers to the BoxDrop website operated by BoxDrop Direct.
- Personal Data: Information about an individual who can be identified from that data (or from other information in our possession or likely to come into our possession).
- Usage Data: Data collected automatically, generated by the use of the Service or from the Service infrastructure itself (e.g., the duration of a page visit).
- Cookies: Small files stored on your device (computer or mobile device) that track and store information.
- Data Controller: The person or entity who determines the purposes and manner of processing personal information. For this policy, BoxDrop Direct is the Data Controller of your Personal Data.
- Data Processors (or Service Providers): Entities that process data on behalf of the Data Controller. We may use the services of various Service Providers to process your data more effectively.
- Data Subject (or User): Any individual using our Service who is the subject of Personal Data.
2. Information Collection and Use
We collect various types of information for different purposes to provide and improve our Service.
Types of Data Collected
Personal Data
While using our Service, we may ask you to provide us with personally identifiable information that can be used to contact or identify you ("Personal Data"). This may include, but is not limited to:
- Email address
- First and last name
- Phone number (for SMS marketing if opted in)
- Billing and shipping address, including ZIP/postal code, city, and state
- Payment information (processed securely)
- Cookies and Usage Data
We may use your Personal Data to contact you with newsletters, marketing or promotional materials, and other information that may be of interest to you. You may opt out of receiving these communications by following the unsubscribe link or instructions provided in any email or by contacting us directly.
Usage Data
We may collect information that your browser sends whenever you visit our Service or when you access the Service via a mobile device. This Usage Data may include:
- Your IP address
- Browser type and version
- Pages of our Service that you visit
- Date and time of your visit, time spent on pages
- Device identifiers and other diagnostic data
Location Data
With your permission, we may use and store information about your location to provide features of our Service and to improve and customize our Service. You can enable or disable location services through your device settings.
Tracking & Cookies Data
We use cookies and similar tracking technologies to monitor activity on our Service and store certain information. Cookies are files with a small amount of data, which may include an anonymous unique identifier. Examples of cookies we use:
- Session Cookies: To operate our Service.
- Preference Cookies: To remember your preferences and settings.
- Security Cookies: For security purposes.
- Analytics Cookies: To analyze user interactions and improve our Service.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, some portions of our Service may be unavailable.
3. Use of Data
BoxDrop Direct uses collected data for various purposes:
- To provide and maintain our Service
- To notify you about changes to our Service
- To allow you to participate in interactive features of our Service when you choose to do so
- To provide customer support
- To gather analysis or valuable information to improve our Service
- To monitor the usage of our Service
- To detect, prevent, and address technical issues
- To provide you with news, special offers, and general information about goods, services, and events we offer that are similar to those you have already purchased or inquired about, unless you have opted out
4. Legal Basis for Processing Personal Data (for EEA Users)
If you are from the European Economic Area (EEA), BoxDrop Direct’s legal basis for collecting and using your Personal Data depends on the specific context:
- We need to perform a contract with you
- You have given us permission to do so
- Processing is in our legitimate interests and is not overridden by your rights
- Compliance with legal obligations
5. Retention of Data
BoxDrop Direct will retain your Personal Data only as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to comply with legal obligations, resolve disputes, and enforce our policies. Usage Data is generally retained for a shorter period, except when it is used to strengthen security or improve functionality, or when legally required.
6. Transfer of Data
Your information, including Personal Data, may be transferred to computers outside your state, province, country, or other governmental jurisdiction, where data protection laws may differ. By submitting such information, you consent to this transfer.
BoxDrop Direct will ensure that your data is securely handled and in accordance with this Privacy Policy. No transfer of your Personal Data will occur to an organization or country without adequate controls in place.
7. Disclosure of Data
Legal Requirements
BoxDrop Direct may disclose your Personal Data in good faith under circumstances that include:
- Compliance with a legal obligation
- Protecting BoxDrop Direct’s rights or property
- Preventing or investigating possible wrongdoing
- Protecting the safety of users or the public
- Protection against legal liability
8. Security of Data
The security of your data is important to us. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
9. “Do Not Track” Signals
BoxDrop Direct respects Do Not Track ("DNT") signals and will not track or place cookies on users who have enabled DNT in their browser settings.
10. Your Data Protection Rights (for EEA Residents)
As an EEA resident, you have the following rights regarding your Personal Data:
- Access, update, or delete your Personal Data
- Rectification of inaccurate or incomplete information
- Object to processing of your Personal Data
- Restrict processing under certain conditions
- Data portability
- Withdrawal of consent where consent was the basis of processing
11. Service Providers
We may employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, or assist in analyzing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to use it for any other purpose.
Examples of Service Providers:
- Google Analytics: To monitor and analyze website traffic and usage.
- Facebook, Instagram, Klaviyo: For marketing and remarketing purposes.
- Gorgias: For customer support management.
- SNAP Finance: For financing options if you choose to apply for credit.