1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Register for an account: Name, email address, phone number, company name, job title
• Place an order: Billing address, shipping address, payment information
• Contact us: Inquiry details, communication preferences, feedback
• Subscribe to newsletters: Email address, communication preferences
• Participate in surveys: Responses, opinions, demographic information

1.2 Automatically Collected Information

When you access our website, we automatically collect certain information:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, referral sources
• Cookies and Tracking: Session cookies, persistent cookies, web beacons, analytics data
• Location Data: Approximate geographic location based on IP address

1.3 Business Information

For B2B transactions, we may collect:

• Company registration details and business licenses
• Tax identification numbers and financial information
• Project specifications and design requirements
• Purchase history and order preferences

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Delivery

• Process and fulfill your orders for custom packaging solutions
• Manage your account and provide customer support
• Communicate about your projects, orders, and inquiries
• Coordinate design consultations and prototype development

2.2 Business Operations

• Improve our products, services, and manufacturing processes
• Conduct quality control and ensure compliance with standards
• Analyze market trends and customer preferences
• Develop new packaging solutions and innovations

2.3 Marketing and Communications

• Send promotional materials, newsletters, and product updates
• Provide personalized recommendations and offers
• Conduct surveys and gather feedback
• Invite you to industry events and webinars

2.4 Legal and Security

• Comply with legal obligations and regulatory requirements
• Protect against fraud, unauthorized access, and security threats
• Enforce our terms of service and policies
• Resolve disputes and investigate complaints

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

3.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing and financial transactions
• Shipping and logistics coordination
• Cloud storage and data hosting
• Marketing automation and analytics
• Customer relationship management (CRM)

3.2 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the business transaction.

3.3 Legal Requirements

We may disclose information when required by law, court order, or government regulation, or to:

• Comply with legal processes and investigations
• Protect our rights, property, and safety
• Prevent fraud or illegal activities
• Enforce our terms and conditions

3.4 With Your Consent

We may share information with third parties when you have provided explicit consent for such disclosure.

4. Data Security

We implement comprehensive security measures to protect your information:

4.1 Technical Safeguards

• Encryption: SSL/TLS encryption for data transmission
• Access Controls: Role-based access and authentication systems
• Firewalls: Network security and intrusion detection
• Regular Audits: Security assessments and vulnerability testing

4.2 Organizational Measures

• Employee training on data protection and privacy
• Confidentiality agreements with staff and contractors
• Incident response and breach notification procedures
• Regular security policy reviews and updates

5. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

5.1 Access and Portability

• Request access to your personal information
• Obtain a copy of your data in a structured, machine-readable format
• Request information about how we process your data

5.2 Correction and Update

• Correct inaccurate or incomplete information
• Update your account details and preferences
• Request rectification of processing errors

5.3 Deletion and Restriction

• Request deletion of your personal information (subject to legal obligations)
• Restrict or object to certain processing activities
• Withdraw consent for specific data uses

5.4 Marketing Preferences

• Opt-out of marketing communications at any time
• Manage email subscription preferences
• Control cookie settings through your browser

To exercise your rights, please contact us at privacy@boxesbest.com. We will respond to your request within 30 days.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

You can control cookies through your browser settings. However, disabling certain cookies may limit website functionality.

7. International Data Transfers

BoxesBest is headquartered in Shanghai, China. Your information may be transferred to, stored, and processed in China or other countries where we or our service providers operate.

We ensure appropriate safeguards are in place for international data transfers, including:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions for data transfer to approved jurisdictions
• Binding corporate rules and data protection agreements
• Compliance with applicable data protection laws and regulations

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

• Account Information: Duration of active account plus 3 years after closure
• Order and Transaction Data: 7 years for tax and accounting purposes
• Marketing Communications: Until you unsubscribe or request deletion
• Website Analytics: Up to 26 months from collection
• Legal and Compliance Records: As required by applicable laws

After the retention period expires, we securely delete or anonymize your information.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

10. Third-Party Links

Our website may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party services you access through our website.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, legal requirements, or business operations. We will notify you of material changes by:

• Posting the updated policy on our website with a revised "Last Updated" date
• Sending email notifications to registered users
• Displaying prominent notices on our website or services

Your continued use of our services after the effective date of the updated Privacy Policy constitutes acceptance of the changes.

12. Compliance and Certifications

BoxesBest is committed to compliance with applicable data protection laws and industry standards, including:

• Personal Information Protection Law of the People's Republic of China (PIPL)
• General Data Protection Regulation (GDPR) for European customers
• California Consumer Privacy Act (CCPA) for California residents
• ISO 27001 Information Security Management System standards
• GB/T 35273 Personal Information Security Specification