Privacy Policy

This Privacy Policy applies to information we collect:

• through the Services
• in email, text, and other electronic communications sent through or in connection with the Services
• from third parties, where permitted by law

This Privacy Policy does not apply to information collected by third-party websites, applications, or services that you may access through the Services. Please review their privacy policies separately.

By using the Services, you agree to this Privacy Policy and to the collection, use, disclosure, and retention of your information as described below, subject to applicable law.

Boxpressd LTD, located at 320 Harbison Blvd Suite B #1116, Columbia, SC 29212, is the controller of your personal information for purposes of the UK GDPR and EU GDPR, and the business responsible for your personal information under applicable U.S. state privacy laws, including California law, as applicable.

We may collect the following categories of information:

• full name
• email address
• physical address
• phone number
• date of birth
• password
• profile photo
• account preferences
• website or social media information
• payment information
• content you submit, such as reviews, comments, photos, lists, favorites, messages, reservation details, and other information you choose to provide

• IP address
• browser type
• device type
• operating system
• device identifiers
• browser and device settings
• pages viewed
• links clicked
• search terms
• time spent on the Services
• traffic and usage data
• referral URL
• location information, if you enable it
• cookies and similar technologies

• social login providers such as Google or Facebook, if you choose to sign in that way
• payment processors
• analytics providers
• advertising and referral partners
• business partners
• service providers
• publicly available sources, where permitted by law

If you exchange messages through the Services, we may store them to process and deliver them, allow you to manage them, and investigate possible violations of our Terms of Service or other wrongdoing.

If you send information from the Services to your mobile device by SMS, we may log your phone number, mobile carrier, and the date and time the message was processed. Carrier message and data rates may apply.

• device identifiers
• mobile network information
• mobile status
• stored information and files, including metadata from photos, audio, video, and contacts where permitted and enabled by you
• precise location information, if you allow it
• information about other applications on your device, where permitted by law and your device settings

We use personal information for the following purposes:

• to provide, operate, and maintain the Services
• to create, verify, and manage accounts
• to process transactions and payments
• to provide customer support
• to personalize your experience
• to improve and develop the Services
• to send service-related notices and account communications
• to send marketing communications where permitted
• to provide advertising and measure its effectiveness
• to run referral, affiliate, or ambassador programs
• to detect, investigate, and prevent fraud, abuse, spam, and security issues
• to comply with legal obligations
• to enforce our Terms of Service and other agreements
• for any other purpose we disclose at the time we collect the information
• with your consent, where required

If you are located in the UK, EEA, or another jurisdiction that requires a lawful basis for processing, we process your personal information based on one or more of the following:

• Performance of a contract: to provide the Services you request.
• Consent: where you have given us consent, including for certain cookies, marketing, or location features.
• Legitimate interests: such as improving our Services, securing our systems, preventing fraud, and supporting our business, where those interests are not overridden by your rights.
• Legal obligation: where we need to comply with the law.
• Vital interests: where necessary to protect a person’s life or safety.

We use cookies, pixels, tags, SDKs, and similar technologies to operate the Services, remember preferences, analyze usage, support security, and, where permitted, support referral and advertising functions.

• Strictly necessary cookies: needed for the Services to function, such as login and account access.
• Functional cookies: used to remember settings and preferences.
• Analytics/performance cookies: used to understand how the Services are used.
• Referral/affiliate cookies: used for our Ambassador referral program through GoAffPro.
• Advertising cookies: used, where applicable, for marketing and measurement.

We use cookies and similar technologies in connection with our Ambassador referral program through GoAffPro to track referrals, attribute commissions, and measure program performance. These cookies may identify when a visitor came from an ambassador referral link and help us credit the referring ambassador appropriately.

If required by applicable law, we will ask for your consent before placing non-essential cookies on your device.

You can control cookies through your browser settings and, where available, through our cookie consent tools. If you disable cookies, some parts of the Services may not work properly.

We may share personal information in the following ways:

• hosting providers
• payment processors
• email and SMS providers
• customer support providers
• analytics providers
• security vendors
• referral and affiliate program providers, including GoAffPro
• advertising partners, where applicable

These parties may use the information only to perform services for us or on our behalf, subject to contractual restrictions.

We may share information with our affiliates or related entities under common ownership or control.

We may share or transfer information in connection with a merger, acquisition, financing, reorganization, bankruptcy, dissolution, or sale of all or part of our business or assets.

• comply with law, legal process, or government requests
• enforce our Terms of Service or other agreements
• investigate, prevent, or address fraud, abuse, or security issues
• protect the rights, property, or safety of Boxpressd, our users, or others

We may share information in any other way we describe when you provide it or when you consent.

If you choose to connect your account to a third-party service, such as Google or Facebook, or interact with social media features, those services may share information with us according to their own policies and your settings.

If you participate in our Ambassador or referral program, referral tracking may be handled by GoAffPro and may use cookies or similar technologies to track referrals and commissions.

Your interactions with third-party services are governed by their own privacy policies.

We may work with third parties to display ads, measure ad performance, and understand how users interact with our Services and other websites or apps.

Depending on your location, you may have the right to opt out of:

• targeted advertising
• the “sale” of personal information
• the “sharing” of personal information for cross-context behavioral advertising

Where required by law, we will provide a mechanism for you to exercise those rights.

You can make the following choices:

• Email marketing: You can unsubscribe from promotional emails by following the instructions in the message or by adjusting your account preferences. We may still send administrative or service-related messages.
• Cookies: You can disable or manage cookies through your browser settings and, where available, our cookie tools.
• Location: You can disable location services through your device settings.
• Account information: You can update or correct certain information through your account settings, where available.

Depending on where you live, you may have the following rights:

To exercise these rights, contact us at support@boxpressd.com.

We may need to verify your identity before responding. We will respond within the time required by applicable law.

If you are a California resident, this section applies to you.

• identifiers, such as name, email address, phone number, IP address, and device identifiers
• customer records, such as account and payment information
• commercial information, such as purchase and transaction history
• internet or other electronic network activity, such as browsing and usage data
• geolocation data, if enabled
• audio, visual, or similar information, such as profile photos or uploaded content
• inferences drawn from the above
• sensitive personal information, only if you provide it or enable features that collect it

• you
• your devices
• service providers
• analytics partners
• advertising partners
• social login providers
• business partners

Depending on how our advertising and referral tools are configured, some cookie-based advertising or referral activities may be considered a “sale” or “sharing” of personal information under California law. If that applies, you may have the right to opt out.

If applicable, California residents may exercise opt-out rights by contacting us at support@boxpressd.com or through any opt-out tools we provide.

• know the categories and specific pieces of personal information we collect
• know the categories of sources, business purposes, and third parties
• request deletion
• request correction
• opt out of sale or sharing
• limit use of sensitive personal information, if applicable
• not receive discriminatory treatment for exercising privacy rights

To submit a request, email support@boxpressd.com.

If you are in the UK or EEA, you may also have the right to:

• request access to your personal data
• request correction
• request deletion
• restrict processing
• object to processing
• request portability
• withdraw consent at any time where processing is based on consent

If you believe we have not handled your personal information properly, you may also complain to your local data protection authority.

For the UK, you may contact the Information Commissioner’s Office (ICO) at ico.org.uk/concerns.

We retain personal information for as long as reasonably necessary to:

• provide the Services
• comply with legal obligations
• resolve disputes
• enforce agreements
• prevent fraud and abuse
• maintain business records

When personal information is no longer needed, we will delete it, de-identify it, or retain it only as required by law.

If you close your account, we may remove or dissociate public posts from your account, but we may retain certain information as permitted or required by law.

We use reasonable physical, administrative, and technical safeguards designed to protect personal information. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your password and account credentials confidential. If we receive instructions using your username and password, we may treat those instructions as authorized by you.

We follow the Payment Card Industry Data Security Standard (PCI DSS) when handling payment card data. Payment card information is processed and stored securely through PCIVault and may be subject to PCIVault’s own privacy policy and security practices.

We recommend that you review PCIVault’s privacy policy for more information about how it handles payment data.

The Services are intended only for users who are of legal age to purchase or use tobacco-related products or services in their jurisdiction, and in no event for anyone under 18 years old. We do not knowingly collect personal information from anyone under that age.

If we learn that we have collected personal information from a person who does not meet the applicable age requirement, we will delete that information as soon as reasonably practicable.

If you believe we may have collected information from an underage user, contact us at support@boxpressd.com.

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of those third parties. Please review their privacy policies before providing personal information to them.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will post the updated Policy on this page and update the “Last updated” date above.

Your continued use of the Services after the revised Policy is posted means you accept the changes, to the extent permitted by law.