Privacy policy

Last Updated: February 21, 2025

 

 

This Privacy Policy describes how BoxMemories (hereinafter referred to as the “Site,” “we,” or “our”) collects, uses, and discloses your personal information when you visit or use our services, make a purchase on i81kzu-gs.myshopify.com (the “Site”), or otherwise interact with us regarding the Site (collectively referred to as the “Services”). For the purposes of this Privacy Policy, the terms “you” and “your” refer to you as a user of the Services, whether as a customer, website visitor, or any other individual whose information we have collected under this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last Updated” date, and take any other steps required by applicable law.

Collection and Use of Your Personal Information

To provide the Services, we have collected and may collect your personal information over the past 12 months from a variety of sources, as described below. The information we collect and use depends on how you interact with us.

In addition to the specific uses described below, we may use the information we collect to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce applicable terms of service, and protect or defend the Services, our rights, our users, and others.

Personal Information We Collect

The types of personal information we collect depend on how you interact with our Site and Services. “Personal information” refers to data that identifies or describes you individually or that can be linked or associated with you. Below are the categories and specific types of personal information we collect.

Information You Provide Directly

The information you provide to us through our Services may include:

• Contact details: Your name, address, phone number, and email address.
• Order information: Billing and shipping address, payment confirmation, email address, and phone number.
• Account information: Username, password, security questions, and other details used for account security.
• Customer support information: Any information you choose to include in communications with us (e.g., messages sent through the Services).

Some features may require that you provide certain information. You may choose not to provide this information, but this may prevent you from using or accessing some features.

Information Collected Automatically

We may automatically collect certain information about your interaction with the Services (“Usage Data”) through cookies, pixels, and similar technologies (“Cookies”). Usage Data may include access and usage information, device and browser details, network information, IP address, and interactions with the Services.

Information from Third Parties

We may also collect information from third parties, including vendors and service providers who collect data on our behalf, such as:

• Companies supporting our Site and Services, such as Shopify.
• Payment processors that collect payment information (e.g., bank or credit card data, billing address) to process transactions and fulfill orders.
• Tracking technologies (e.g., pixels, SDKs, libraries, cookies) may be used by us or third parties when you interact with our Site or emails.

We treat third-party information according to this Privacy Policy. See also Third-Party Sites and Links below.

Use of Your Personal Information

• Service and product delivery: We use your information to provide the Services and fulfill our contract with you (e.g., process payments, ship orders, send account and purchase notifications, returns and exchanges, account management, etc.). We may also improve your experience by allowing Shopify to link your account to other Shopify services you use.
• Marketing and advertising: We may use your personal information for promotional purposes via email, SMS, or mail, and show targeted ads. If you are an EEA resident, our legal basis for processing this information is our legitimate interest under Article 6(1)(f) of the GDPR.
• Security and fraud prevention: We use your data to detect and investigate fraud, illegal activity, or abuse. You are responsible for keeping your account credentials secure. If you suspect a breach, contact us immediately.
• Service improvement and communication: We use your data to offer support and improve our Services, based on our legitimate interest under GDPR Article 6(1)(f).

Cookies

We use Cookies to operate and improve our Site and Services. For details on Shopify-related cookies, see Shopify Cookie Policy. You can set your browser to delete or reject cookies, but this may affect site functionality. Some third parties may also use cookies to personalize services or ads.

We recognize the Global Privacy Control (GPC) signal to opt out of certain uses or disclosures. Learn more at https://globalprivacycontrol.org. Other than GPC, we do not recognize other “Do Not Track” (DNT) signals.

Disclosure of Your Personal Information

We may disclose your personal information in certain circumstances:

• To vendors or third parties performing services (e.g., IT, payments, support, shipping).
• To business and marketing partners to display ads or offer services.
• With your consent (e.g., social media widgets, product referrals).
• Within our business group, based on our legitimate interest.
• During business transactions (e.g., mergers), to comply with legal obligations or protect our rights and users.

In the past 12 months, we’ve disclosed the following categories of personal data:

Category	Recipients
Identifiers (e.g., contact details, order info)	Vendors, marketing partners, affiliates
Customer records (e.g., contact/order info)	Same as above
Commercial information (e.g., purchases)	Same as above
Internet/network activity (e.g., usage data)	Same as above
Geolocation data	Same as above

We do not use or disclose sensitive personal data without your consent.

We have “sold” and “shared” the following categories of information for advertising/marketing in the past 12 months:

Category	Recipients
Identifiers	Marketing partners
Commercial information	Marketing partners
Usage data	Marketing partners

Third-Party Sites and Links

Our Site may link to other websites. Please review their privacy and security policies. We are not responsible for the privacy or accuracy of external sites. Publicly shared data (e.g., social media posts) may be visible to others.

Children’s Data

The Services are not intended for children. We do not knowingly collect personal data from minors. If you’re a parent and believe your child has submitted personal data, contact us for deletion. As of this policy’s effective date, we are not aware of any sale/sharing of personal information of users under 16.

Security and Retention

No system is perfectly secure. Do not send sensitive data via insecure channels. We retain your information based on factors such as account activity, service provision, legal obligations, or policy enforcement.

Your Rights

Depending on your location, you may have the following rights:

• Access/know: Request access to your personal data and how we use/share it.
• Delete: Request deletion of your personal information.
• Correct: Request corrections to inaccurate personal data.
• Portability: Request a copy or transfer of your data.
• Opt-out of sale/sharing/targeted ads: Request to stop sale/sharing of your data. GPC signals may be recognized automatically.
• Restrict processing: Request to limit data processing.
• Withdraw consent: Withdraw consent where applicable.
• Appeal: Appeal a denied request.
• Communication preferences: Unsubscribe from promotional emails (transactional emails may still be sent).

You can exercise these rights via the Site or by contacting us. We may require verification of your identity. You may authorize an agent to make requests on your behalf.

Complaints

If you have concerns, contact us using the details below. You may also file a complaint with your local data protection authority. EEA residents can find their supervisory authority here.

International Users

We may transfer, store, and process your data outside your country. When transferring data from Europe, we use recognized mechanisms such as EU Standard Contractual Clauses or UK equivalents, unless transferring to countries with adequate protection levels..