Privacy & Cookie Policy

The information we collect depends on how you interact with Box, including whether you browse our website, make a purchase, create an account, subscribe to communications, participate in a program or promotion, or contact us.

Sources of Information

We may obtain personal information:

• Directly from you.
• Automatically when you use our website.
• From our ecommerce, payment and fulfillment providers.
• From service providers that support analytics, advertising, customer service or marketing.
• From social networks when you interact with Box through those platforms.
• From affiliates, partners or other sources where permitted by law.

We may use personal information to:

• Process, fulfill, ship and manage orders.
• Process returns, refunds and warranty requests.
• Create and maintain customer accounts.
• Provide customer service and respond to inquiries.
• Authenticate users and prevent fraud or misuse.
• Operate, maintain, troubleshoot and improve our website.
• Understand website usage and business performance.
• Personalize content and customer experiences.
• Send transactional messages about orders or accounts.
• Send marketing emails or SMS messages when permitted by law and subject to your communication preferences.
• Measure and deliver advertising where permitted and consistent with your privacy choices.
• Enforce our terms, policies and agreements.
• Protect Box, our customers and others from fraud, abuse or security threats.
• Comply with legal, tax, accounting and regulatory obligations.
• Establish, exercise or defend legal claims.

We seek to collect, use and retain personal information only as reasonably necessary and proportionate for the purposes disclosed to you or otherwise permitted by applicable law.

We may disclose personal information to the following categories of recipients where reasonably necessary:

• Ecommerce and hosting providers that operate or support our online store.
• Payment processors that process payments and help detect fraudulent transactions.
• Shipping, logistics and fulfillment providers that deliver orders.
• Customer-service and technology providers that help operate our systems and provide support.
• Email, SMS and marketing providers that assist us in communicating with customers.
• Analytics and advertising providers that help us understand website performance, measure campaigns or provide advertising, subject to applicable privacy choices.
• Professional advisers, including attorneys, accountants, auditors, insurers and consultants.
• Government authorities or other parties when disclosure is required or permitted by law or reasonably necessary to protect rights, safety or property.
• Business transaction parties in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets or similar corporate transaction.

We and our service providers may use cookies, pixels, tags, software development kits and similar technologies.

Types of Technologies We Use

• Essential technologies: Required for security, checkout, account access, shopping-cart functionality and core website operation.
• Functional technologies: Remember preferences and improve website functionality.
• Analytics technologies: Help us understand traffic, performance and how visitors use the site.
• Advertising technologies: May be used to measure campaigns, limit repetitive advertising and, where permitted, personalize advertising.

You may manage cookies through the privacy or cookie controls made available on our website and through your browser settings. Disabling certain cookies may affect website functionality.

Global Privacy Control

Where required by applicable law, we treat a qualifying browser-based opt-out preference signal, such as Global Privacy Control (GPC), as a request to opt out of the sale or sharing of personal information for the browser or device that sends the signal.

Do Not Track

Some browsers offer a legacy “Do Not Track” or DNT setting. Because there is no universally accepted standard governing legacy DNT signals, our website may not respond to DNT signals. This does not affect our obligation to honor legally recognized opt-out preference signals, such as GPC, where required.

Third parties providing analytics, advertising or social-media functionality may collect information about your online activities through their technologies, subject to their own privacy practices and your applicable privacy choices.

Certain information may be considered sensitive personal information under applicable law, such as account credentials or payment-related information.

Box uses sensitive personal information only as reasonably necessary to provide requested products and services, process transactions, maintain account security, prevent fraud, comply with law or for other purposes permitted by applicable law.

We do not use sensitive personal information to infer characteristics about you unless disclosed and permitted by applicable law.

If applicable law gives you the right to limit certain uses or disclosures of sensitive personal information, you may submit a request using the methods described below.

We retain personal information only for as long as reasonably necessary and proportionate to accomplish the purposes for which it was collected or as otherwise permitted or required by law.

Retention periods vary based on factors including:

• The nature and sensitivity of the information.
• The length of our relationship with you.
• Order, return and warranty requirements.
• Accounting, tax and financial-record obligations.
• Fraud prevention and security needs.
• Legal claims, disputes and limitation periods.
• Contractual and regulatory obligations.

When information is no longer reasonably necessary, we may delete, de-identify or otherwise dispose of it in accordance with applicable law.

We maintain reasonable administrative, technical and organizational safeguards designed to protect personal information against unauthorized access, destruction, loss, alteration or disclosure.

We also use service providers that maintain security measures appropriate to the services they provide.

Depending on where you live and subject to applicable law and exceptions, you may have some or all of the following rights:

Submitting a Privacy Request

You may initiate a privacy request by contacting us at:

• Email: orders@boxcomponents.com
• Online: Contact Support
• Phone: (714) 449-9197

We may need to verify your identity before completing certain requests. Verification information will be used only as reasonably necessary to verify and process the request.

Where permitted by law, an authorized agent may submit a request on your behalf. We may require proof that the agent is authorized to act for you and may separately verify your identity.

We may deny or limit a request when permitted by law, including when we cannot reasonably verify the request or when information must be retained to comply with legal obligations, complete a transaction, prevent fraud, protect security, exercise legal rights or satisfy another applicable exception.

California residents may have rights under the California Consumer Privacy Act, as amended (CCPA), to the extent the CCPA applies to Box and to the particular processing activity.

These rights may include the right to know, access, delete and correct personal information; opt out of the sale or sharing of personal information; limit certain uses or disclosures of sensitive personal information; and receive non-discriminatory treatment for exercising privacy rights.

Sale & Sharing

Box does not sell personal information for monetary consideration.

Some analytics or advertising activities may constitute “sharing” or a “sale” as those terms are broadly defined under California law, including certain disclosures for cross-context behavioral advertising. Where applicable, California residents may opt out through our website privacy controls or by sending a qualifying opt-out preference signal such as GPC.

Personal Information Disclosed for Business Purposes

During the preceding 12 months, we may have disclosed the categories of personal information described in this policy to service providers or contractors for business purposes such as processing transactions, shipping orders, operating our website, providing customer support, security, fraud prevention, analytics and communications.

Minors

We do not knowingly sell or share the personal information of consumers under 16 years of age without legally required authorization.

If the European Economic Area, United Kingdom or another jurisdiction with similar data-protection laws applies to our processing of your personal information, additional rights and obligations may apply.

Legal Bases

Where required, we process personal information based on one or more lawful grounds, including:

• Contract: processing necessary to fulfill an order or provide requested services.
• Legitimate interests: operating and improving our business, protecting security, preventing fraud and understanding how our services are used, where those interests are not overridden by your rights.
• Consent: where you have given consent, such as for certain marketing or cookie activities where consent is required.
• Legal obligations: processing necessary to meet tax, accounting, regulatory or other legal requirements.

Your Rights

Where applicable, you may have rights to access, correct or erase personal information, restrict or object to processing, receive portable copies of certain information, withdraw consent and lodge a complaint with an applicable data-protection authority.

Withdrawing consent does not affect the lawfulness of processing performed before consent was withdrawn.

International Transfers

Box is based in the United States. Personal information may therefore be processed in the United States or other countries where our service providers operate. Where required by applicable law, we use legally recognized transfer mechanisms or safeguards for international transfers of personal information.

You may unsubscribe from promotional email by following the unsubscribe instructions contained in the message.

If you receive promotional SMS messages from Box, you may opt out using the instructions provided in those messages.

Even if you opt out of promotional communications, we may continue to send non-promotional communications when necessary, including messages about orders, transactions, accounts, warranties, security or customer-service matters.

Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13 without legally required authorization, we will take appropriate steps to delete it.

Parents or guardians who believe a child has provided personal information to us may contact us using the information below.

Our website may contain links to websites, applications or services operated by third parties.

Their privacy practices are governed by their own policies and not this Privacy & Cookie Policy. Box is not responsible for the privacy, security or content practices of third-party websites or services.

We encourage you to review the privacy policies of third parties before providing them with personal information.

We may update this Privacy & Cookie Policy from time to time to reflect changes in our practices, technologies, services, legal requirements or other factors.

When we make changes, we will update the date shown at the top of this policy.

If required by applicable law, we will provide additional notice or obtain consent before material changes take effect.

We encourage you to review this policy periodically.

If you have questions, concerns or requests relating to this Privacy & Cookie Policy or our privacy practices, contact:

Box
1580 N. Orangethorpe Way
Anaheim, CA 92801
United States

Email: orders@boxcomponents.com

Phone: (714) 449-9197