Privacy Policy

Safeguarding Your Information: Our Commitment to Privacy

BoxHouse Holdings, Inc. Privacy Policy

www.boxhouse.com
Effective Date: May 20, 2026

  1. Commitment To Privacy

Your privacy is important to us. This Online Privacy Policy (“Privacy Policy”) explains how BoxHouse Holdings, Inc. (“BoxHouse,” “we,” “us,” or “our”) protect your privacy when you visit this Web site and the any other BoxHouse’ affiliate’s Web sites that display this Privacy Policy, or when you use any BoxHouse digital application, such as a mobile app, that links to this Privacy Policy (collectively, our “Site(s)”). This Privacy Policy describes what types of information we gather and track when you use our Sites, how this information is used and with whom it is shared.

Please read this Privacy Policy carefully. By accessing or using this Site, you agree to the collection, use and disclosure of your Personal Information in accordance with this Privacy Policy.

IF YOU DO NOT CONSENT TO THE COLLECTION, USE AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS SET FORTH IN THIS PRIVACY POLICY, PLEASE EXIT AND DO NOT USE THIS SITE.

We also collect, use and disclose your Personal Information where it is necessary for the performance of a contract with you or where it is necessary for our legitimate interests of operating, protecting, improving our business and for the other purposes set out in this Privacy Policy.

  1. Scope of This Online Privacy Policy

This Privacy Policy covers the “Personal Information” we collect through our Sites.

“Personal Information” is information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with you personally, either alone or in combination with other information available to us. Examples of Personal Information include your name, contact details, information that identifies your person, job applications, information you provide when you create an account or a personal profile on one of our Sites and information about the pages you have viewed and the path you have taken through our Sites.

  1. Information We Collect

a. Information You Provide Directly. When you fill out forms on our Sites, we may collect the following categories of personal information:

  • First and last name
  • Email address
  • Phone number
  • Mailing or physical address

We only collect this information when you voluntarily submit it to us through our website forms.

b. Information Collected Automatically

We use Google Analytics, a web analytics service provided by Google INC, to help us understand how visitors interact with our Site. Google Analytics collects information such as:

  • Pages visited and time spent on each page
  • Browser type and version
  • Operating system
  • Referring URLs
  • General geographic location (country/city level)
  • Device type

Google Analytics uses cookies and similar tracking technologies to collect this information. The data is aggregated and does not directly identify you by name. For more information on how Google collects and processes data, please visit Google’s Privacy & Terms page at https://policies.google.com/privacy. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.

We use Microsoft Clarity, a behavioral analytics tool provided by Microsoft Corporation, to better understand how users interact with our Site. Clarity may record mouse movements, clicks, and scrolling behavior through session recordings and heatmaps. This data is aggregated and used solely to improve the usability of our Site. Microsoft may use this data in accordance with its own privacy policy, available at https://privacy.microsoft.com/privacystatement. To opt out of Clarity, visit https://choice.microsoft.com.

We use Salesforce Account Engagement (formerly Pardot), a marketing automation platform provided by Salesforce, Inc., to manage and track interactions with our Site and email communications. If you submit a form or opt in to email communications, your information may be stored and processed within Salesforce Account Engagement. This platform helps us send relevant communications and understand engagement with our content. For more information, see Salesforce’s Privacy Statement at https://www.salesforce.com/company/privacy/.

  1. Cookies and Tracking Technologies

A cookie is a small file sent by a Web site or digital app and stored on a user’s computer which enables the Web site or digital app to remember information about you and your preferences. We use “cookies” and other Web technologies in a number of ways. For example, we may use these technologies:

a. to collect information about the ways visitors use our Sites – which pages they visit, which links they use, and how long they stay on each page;

b. to support the features and functionality of our Sites – for example, to save you the trouble of reentering information already in our database or to prompt the settings you established on previous visits to our Sites;

c. to personalize your experience when you use our Sites;

d. to enable third parties (e.g. social media sites) to prepare online ‘audiences’ of its users who are either existing BoxHouse customers or who share characteristics with BoxHouse customers, subject always to that third party respecting your privacy settings;

e. to ‘recognize’ you as someone who has visited a BoxHouse website before or interacted with BoxHouse online, so we may serve you with relevant ads as you browse elsewhere online, including third party websites; and

f. to measure the success of our web or email advertising. For example, if you interact with an ad served by a third party on our behalf, we may receive non-identifying information, such as demographic information or general information about your interests.

The cookies we use can be classified into two categories: (i) “Session cookies” which are allocated to your computer for the duration of your visit of our Sites and which will be automatically removed from your computer when you close your browser; or  (b) “Persistent cookies” which expire after a reasonable period of time or until the user deletes the cookie.

Some of these uses may involve the use of “third party cookies”; that is, cookies that are set by software used by third parties, such as to carry out statistical analysis of page use, page interactions and paths through the site, or for the purposes of serving internet advertisements using an online advertising supplier. Third party cookies may collect information about your online activities over time and across different websites following your visit to our Sites.

Generally, the information collected using these Web technologies does not identify you by name. If, however, you have created a user identity, for example, by signing up to use a password-protected area on one of our Sites, we may link the information we collect using Web technologies to other information that identifies you personally.

If you do not wish to receive cookies, you may set your browser to reject cookies or to alert you when a cookie is placed on your computer. You may also delete our cookies as soon as you leave a Site.

  1. How We Use Your Information

We use the personal information we collect for the following purposes:

  • To respond to your inquiries and communicate with you
  • To send you email communications if you have opted in to receive them
  • To improve and optimize our Site through analytics
  • To comply with applicable laws and regulations
  • To protect the safety and security of our Site and users

We do not sell products or services directly through our Site, and we do not process payment information. We do not display third-party advertisements on our Site.

  1. Email Communications

If you opt in to receive emails from us, we may send you communications related to our services, updates, or other relevant information. You may unsubscribe from these communications at any time by clicking the “unsubscribe” link at the bottom of any email we send, or by contacting us directly at privacy@boxhouse.com.

We will not send you marketing emails without your prior consent.

  1. How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

  • Service Providers: We may share information with trusted third-party vendors who assist us in operating our Site (such as Google Analytics), provided those parties agree to keep this information confidential and use it solely to perform services on our behalf.
  • Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.
  1. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by law. When your information is no longer needed, we will securely delete or anonymize it.

  1. Data Security

We implement reasonable technical and organizational measures to protect your personal information from unauthorized access, use, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

  1. Children’s Privacy

Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at privacy@boxhouse.com and we will take prompt steps to delete such information.

  1. California

a. California Online Privacy Protection Act (CalOPPA). In compliance with the California Online Privacy Protection Act (CalOPPA), we agree to the following:

  • Users can visit our Site anonymously.
  • Our Privacy Policy link is accessible on our Site homepage.
  • Our Privacy Policy link includes the word “Privacy” and is easy to find.
  • Users will be notified of any Privacy Policy changes via an updated Effective Date posted on this page.
  • Users can change their personal information by contacting us directly.

Do Not Track Signals

Our Site does not currently respond to “Do Not Track” (DNT) browser signals. We will update this policy if our practices change in the future.

b. California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). This section describes those rights and how to exercise them.

i. Categories of Personal Information Collected. In the preceding 12 months, we have collected the following categories of personal information from California residents:

  • Identifiers: first name, last name, email address, phone number, and mailing address submitted through our website forms.
  • Internet or other electronic network activity information: browsing behavior and interaction data collected via Google Analytics.

We have not collected sensitive personal information as defined under CPRA (such as Social Security numbers, financial account information, precise geolocation, or biometric data).

ii. Business or Commercial Purpose for Collection

We collect the above categories of personal information to respond to inquiries, send opted-in email communications, and analyze Site traffic to improve user experience.

iii. Disclosure of Personal Information

We do not sell or share your personal information for cross-context behavioral advertising. In the preceding 12 months, we have not sold any personal information of California residents.

iv. Retention of California Personal Information. BoxHouse retains your California Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained. The length of time California Personal Information is retained will vary depending on the retention period of the category in which such Personal Information is contained. When establishing retention duration for retention categories, BoxHouse takes into consideration various criteria, including tax and legal requirements for the retention of records, issues related to the exercise or defense of legal claims, and legitimate business needs.

c. Your CCPA/CPRA Rights

Subject to certain exceptions detailed in California Privacy Law, as a California resident, you have the following rights:

  • Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You have the right to request that we delete personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: You have the right to request that we correct inaccurate personal information we maintain about you.
  • Right to Opt-Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information. We do not sell or share personal information for cross-context behavioral advertising.
  • Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

d. How to Submit a Request

To exercise any of the rights above, please contact us using the information in the “Contact Us” section below. We will respond to verified requests within 45 days. If we require more time (up to 90 days), we will inform you in writing.

We will need to verify your identity before processing your request. We may ask you to provide information consistent with what we have on file to confirm your identity.

You may designate an authorized agent to make a CCPA/CPRA request on your behalf. We may require the agent to provide proof of your written authorization and may verify your identity directly.

e. Shine the Light

California Civil Code Section 1798.83 (“Shine the Light” law) permits California residents to request information about the disclosure of their personal information to third parties for those third parties’ direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

  1. Texas, Nebraska, Maryland and Minnesota Consumers.

This section is applicable to residents in the States of Texas, Nebraska, Maryland and Minnesota explains how we collect and process Consumer Personal Information about residents in those states who are consumers (i.e., individuals acting in a personal or household context) in accordance with the Texas Data Privacy and Security Act (“Texas Privacy Law”), the Nebraska Data Privacy Act (“Nebraska Privacy Law”), the Maryland Online Data Privacy Act of 2024 (“Maryland Privacy Law”) and the Minnesota Consumer Data Privacy Act (“Minnesota Privacy Law”). This section should be read as a supplement to the entire Online Privacy Policy. However, it does not apply to data about individuals acting in a commercial or employment context.

a. Categories of Personal Information. BoxHouse may collect, process, and share the following categories of personal information about you (collectively, “Consumer Personal Information”):

i. Contact details, including name, address, telephone number, email address;

ii. Transactional data, including credit card or payment information needed to complete any transaction;

iii. Supplemental information, including information provided by our business partners, social media, or other sources; and

iv. Usage and device data, including usage data that is sent to us by your web browser or mobile application via “cookies” and other technologies, such as pages you visit and browsing history, content obtained via online forms, general (not precise) geolocation information, and responses to electronic communications, as well as information about the device you use to access our website or mobile app, such as IP address, unique device identifiers, operating system, and mobile network information.

We do not collect Consumer Personal Information that is “sensitive data” under Texas Privacy Law, Nebraska Privacy Law, Maryland Privacy Law and Minnesota Privacy Law.

b. Disclosures of Consumer Personal Information. We may disclose all of the categories of Consumer Personal Information described above to:

i. Third party service providers that perform data processing activities on our behalf, and subject to appropriate privacy and security obligations;

ii. Distributors and intermediaries in connection with the performance of transactions;

iii. Government and other authorities as required by law;

iv. Potential purchases and other parties in connection with the sale, purchase, or merger of a business; and

v. Others to the extent necessary to comply with applicable law and as otherwise permitted under Texas Privacy Law, Nebraska Privacy Law, Maryland Privacy Law and Minnesota Privacy Law.

We may also disclose email addresses, and usage and device data to social media and ad networks (see section below on targeted advertising).

c. Your Rights. You have the right to confirm whether we are processing your Consumer Personal Information, and to access, correct inaccuracies, delete, and if available, request a digital copy of your Consumer Personal Information. You also have the right to opt-out of the processing of Consumer Personal Information for purposes of targeted advertising, sale, and profiling. If you are a Minnesota Consumer, you also have the right to question the result of the profiling, to be informed of the reasons for a decision that produces legal effects or similar significant effects concerning you, to review the personal data used in the profiling, and to request reevaluation where the decision was based on inaccurate information. If you are a Minnesota Consumer you also have the right to disclose third-party recipients of your Consumer Personal Information.

d. Exercising your rights. To exercise any of the rights listed above, please contact us using the information provided below. In order to fulfill your request, we may ask for additional information to verify your identity, and we will keep a record of your request and your contact details to ensure that your request is respected. We will attempt to fulfill your request within a reasonable time and as required by Texas, Nebraska, Maryland or Minnesota law. If we decline to take action regarding your request, we will notify you providing our reasons and you may initiate an appeal decision by contacting us as specified in the “Contact Us” section below and specifying “NOTICE OF APPEAL” at the beginning of your message. You have the right to designate an authorized agent to exercise these rights on your behalf. We will comply with all requests received from authorized agents to the extent we are able to verify, with commercially reasonable effort, your identity and the authorized agent’s authority to act on your behalf.

e. Targeted Advertising and Sale of Data. BoxHouse does not sell data in the ordinary sense of the word, but we may engage in the “sale” of data as defined under Texas Privacy Law, Nebraska Privacy Law, Maryland Privacy Law and Minnesota Privacy Law. As such, BoxHouse may engage in the sale of Consumer Personal Information to third parties, and the processing of Consumer Personal Information for purposes of targeted advertising. To opt-out of these activities for the browser that you are using, please click on the “Manage Cookies” link on our web page. You can also contact us using the information provided in the Contact Us section below.

  1. Third-Party Links

Our Site may contain links to third-party websites. We have no control over the content, privacy policies, or practices of any third-party site. We encourage you to review the privacy policy of every website you visit.

  1. Changes to This Privacy Policy

We reserve the right to modify or update this Privacy Policy, at any time and without prior notice, by posting the revised version on our Sites. These changes will be effective as of the date we post the revised version on our Sites. They will apply only to the Personal Information we collect after we have posted the revised version. Your use of one of our Sites following any such change constitutes your consent to the terms of the revised Privacy Policy. For this reason, it is important to review this Privacy Policy regularly.

If we modify this Privacy Policy, we will revise the Effective Date at the top of this Privacy Policy, so that you can see at a glance whether our Privacy Policy has changed since your last visit.

Finally, this Privacy Policy may be supplemented or amended from time to time by “Privacy Notices” posted on our Sites. Generally, Privacy Notices provide details about the Personal Information we collect on particular pages or particular areas of a Site, why we need that information, and choices you may have about the ways we use that information.

  1. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

BoxHouse Holdings, Inc.
Website: www.boxhouse.com
Email: privacy@boxhouse.com
Phone: (512) 607-4409