Effective as of December 8, 2016.
This Policy describes:
- how we collect, and you may provide, information through our website, including the www.boxed.com domain, our mobile applications and our vendor information portal (collectively, the “Sites”);
- how we use and protect information;
- with whom we may share information; and
- the types of information we collect.
We put forth this Policy because we want you to be aware of the information we collect and help you make an informed decision about using our Sites and services. By visiting the Sites, linked pages, features, content, or using any of our services, you acknowledge and accept the practices and policies outlined in this Policy. If you do not agree to this Policy, you may not access or otherwise use the Sites. This Policy does not apply to any third-party websites, services or applications, even if they are accessible through our Sites.
1. WHAT INFORMATION DO WE COLLECT?
Information You Provide
We collect the information you enter on our Sites when you register as a member, create an account, engage in a transaction, search our products, contact us or our customer service department by telephone, email, or otherwise, or participate in events, surveys, questionnaires, contests or other promotions we may sponsor. Please note that we may collect personally identifiable information (“PII”) from the Sites only when you choose to provide it to us. We use this information to correspond with you and as otherwise permitted by this Policy. The information collected may include:
- Your contact information, such as your name, email address, password, shipping address, or telephone number;
- Your payment information, such as credit/debit card information, billing addresses, and other billing information;
- The shipping information of any third parties that you enter when shipping orders to such third parties, including their names, addresses, and telephone numbers; and
- Your purchase history.
Certain information, statements, data, and content (such as photographs) which you may submit to us are likely to reveal your gender, ethnic origin, race, nationality, age, and/or other demographic information about you.
We do not knowingly collect sensitive information such as government-issued identifiers, Social security Numbers, financial account information, insurance plan information or specific information related to your health or medical conditions.
From time-to-time, we may use third-party provided widgets on our Sites to help provide products and services that we feel might be of use to you. These widgets may ask you for additional information, such as the referral information (names and email addresses) of people or companies that you may wish to refer to us, pursuant to the privacy policies of such third parties. Of course, it is up to you as to whether you provide any of this type of information.
Mobile Web and IOS and Android Apps
We may collect certain additional information from you when you access the Sites with mobile devices or with our IOS and Android mobile apps (the “Boxed Apps”). This information may include location, device type, unique device identifier, mobile operating system, site navigation, and other app-specific user data. When this data is collected, it is analyzed periodically to help us create a more user-friendly, improved shopping experience within the mobile web interface and/or the Boxed Apps. You may restrict the collection of certain data, like location, and/or opt out of notifications from the Boxed Apps by changing the settings preferences on your mobile device.
Automatically Collected Information; Interest-Based Advertising.
When you interact with the Sites, advertisements or other content provided by Boxed or third parties, on behalf of Boxed, through your computer, phone or mobile device (we’ll refer to these as “Devices” throughout the Policy), we, and third parties, automatically collect non-personally identifiable information (“Non-PII”) about or from your Device, such as, without limitation, your browser information on our server logs including your IP address, browser type, browser versions, browser language, browser plug-in type and version, country and time zone, URLs that refer visitors to our Sites, dates and times of visits to our Sites, page views and site navigation, geographic location, cookie information (see below), web beacons, pixel tags, device fingerprinting or other means, the page you requested, duration of activity on our Sites, searches, shopping behavior and preferences, hardware model, operating system version, unique device identifiers, mobile network information, and purchases.
We may use this information, and tie it back to the information you provide to us, to tailor or customize your shopping experience and/or interaction with Boxed, allowing us to surface various products and special offers in which you may have interest. This form of advertising, sometimes called “behavioral advertising,” is based on anonymous information and not on any personally identifiable information. As a result, we and our vendors know your interests, but cannot personally identify you in connection with the delivery of that specific ad. We believe that such advertising is helpful because you will see advertisements that are relevant to your interests. However, if you would like to opt-out of these interest-based advertisements, please follow the opt-out process described below under “What Choices Do Users Have.”
We may also aggregate and anonymize this information with similar information from our other customers in order to understand how our customers use our Sites, and/or third party service providers may collect non-personally identifiable information from our Sites as well.
A cookie is a text file that websites send to a visitor’s computer or other internet-connected device to uniquely identify the visitor’s browser or to store information or settings in the browser. We use a variety of cookies, such as session, persistent and analytics cookies, among others, to identify and authenticate visitors and to store information in your electronic shopping baskets so it can be retrieved later.
Web Beacons and Pixel Tags
Boxed and our Third-Party Service Providers (defined below) may use web beacons or pixel tags to control the automated collection of non-personally identifiable information. These small electronic tags on specific web pages on our Sites help us monitor the activity on our Sites in order to improve your shopping experience.
Do Not Track
Some browsers may provide a “Do Not Track” option which signals to websites and web services that you do not wish to have your online activities tracked over time or across different websites. A “Do Not Track” option may also allow you to opt out of behavioral advertising. At this time, the Sites neither respond to nor support “Do Not Track” requests and will continue to collect information about your online activity as mentioned in this Policy.
2. WHAT WE DO WITH COLLECTED INFORMATION
We may use the information you provide to us, directly or indirectly, and information we collect about you for various reasons, including to:
- Improve your user experience with Boxed and expedite access to your account;
- notify you of any Boxed promotions, deals and other information that may be of use to you or any deals or promotions from our partners;
- create or administer your account and communicate with you about account creation, activity or modification, placed orders and shipping updates. You can opt out of these emails or other notifications at any time by clicking unsubscribe at the bottom of our emails or by changing your email preferences at https://www.boxed.com/account/email-preferences;
- notify you about any changes to this Policy or the Terms and Conditions;
- respond to your requests and questions;
- operate, assess, analyze, enhance, and improve our businesses, research, data, marketing and advertising strategies, and our product offerings;
- perform accounting, auditing, and billing activities;
- protect against fraud; and
- comply with applicable laws, regulations and industry standards and enforce our rights and our Terms and Conditions and other policies.
3. SHARING OF INFORMATION
Information Shared with Our Service Providers
We may share information we collect with our Third-Party Service Providers and other third parties that we engage to help us administer and provide our services and to perform tasks on our behalf (for example, shipping, customer service, marketing communications, analytics) and we share your information with such third parties when it is needed for such purposes.
Information Shared with Third Parties
From time-to-time, we may offer a referral program or referral offers on our Sites to our existing users. If you sign up for an account on the Sites or otherwise provide us with information by clicking on a referral link—whether through an email, text message, through a social media site, or other electronic or mobile mechanism—provided to you by an individual who has identified you as one of his or her contacts, and consent to the sharing of your PII, we may share your PII with the individual who has referred you to us. We may also inform individuals who identify to us that you are one of their contacts whether or not you already have an account on the Sites.
We may also share aggregated, anonymized, and non-personally identifiable information with our business partners and/or any other third party (for example, suppliers, vendors, publishers, advertisers or connected sites) for industry research and analysis, demographic profiling, and other purposes. For example, we may share such information to show trends about the general use of our services, Sites and the Boxed Apps.
We may also use your PII, as provided by you through the Site, to contact and correspond with you and/or to respond to your inquiries. We do not sell your PII to third parties or mass marketers. Finally, please note that if you specifically consent to additional uses of your PII, we may use your PII in manner consistent with that consent.
Compliance with Legal Requirements
We may disclose information about you: (i) if we are required to do so by law or legal process (such as a court order, legal process, governmental agency or otherwise); (ii) in response to a request by law enforcement authorities; or (iii) when we believe disclosure is necessary or appropriate to prevent physical, financial, or other harm, injury, or loss. However, this Policy is not intended to limit any objections or legal defenses you may have to a request to disclose your information by a third party or government.
Information Generally Disclosed
We may also share aggregated, anonymized, and other Non-PII publicly, for example in industry reports, news stories or press releases, to show trends about the general use of our services, Sites and the Boxed Apps.
Information Disclosed in connection with Business Transactions
We may also transfer the information we have about you in the event we sell, merge or transfer all or a portion of our businesses or assets (or initiate and pursue reorganization, bankruptcy, dissolution, or liquidation), or take steps in anticipation of such transactions. In such event, all the data will continue to be governed by this Policy.
4. CHILDREN’S PRIVACY RIGHTS
We do not knowingly collect information from anyone under the age of thirteen (13). Our Sites are not intended for or directed at children under the age of thirteen (13) years old.
You must be eighteen (18) years of age or older to register with Boxed. If we learn that a user is under the age of eighteen (18), we will promptly delete any information that they have provided to us. Any user under the age of eighteen (18) must be accompanied by an adult when accessing the Sites.
5. CALIFORNIA PRIVACY RIGHTS
California law permits customers in California to request certain details about how we may share their information with third parties and/or affiliates for marketing purposes. We will either provide this information, upon request, or provide California residents the option to opt out of this type of sharing. If you are a California resident, you may request information and/or request to opt out of future sharing through a written request to email@example.com or to:
451 Broadway, Second Floor
New York, NY 10013
Please include your name, street address, city, state, and zip code in your request. We are not required to respond to requests made through means other than our email or mailing address.
6. THIRD-PARTY PRIVACY PRACTICES
Our Sites may also contain links to social media platforms, and you may be given the choice of connecting to one or more social media platforms from the Sites. If you choose to do so, then depending upon your social media privacy settings, the personal information that you post, transmit, or otherwise make available on the social media platform may be viewed and/or used by others and we will have no control over such viewing and use. We do not control and are not responsible for any use of your PII by or through any of the social media platforms. By linking to any social media platform, you will be assuming therisk that the PII you provide on that platform may be viewed and/or used by third parties for any purposes and agree that we have no control or responsibility for such third party viewing and uses.
7. HOW INFORMATION IS PROTECTED AND CHECKOUT SECURED
We implement reasonable measures to protect your information through a variety of safeguards designed to help protect the information we collect and store against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.
No method of protecting information is 100% secure, and we cannot guarantee its absolute security. Therefore, we suggest that you take certain reasonable steps to protect your information. Start by safeguarding your own account username and password and not sharing that information with anyone. It is preferable that users update their password periodically and follow conventions for choosing a secure password. If users are concerned about misuse of their identity within the Sites, or are using a shared device, users should make an effort to log out as often as necessary. We will never ask for your password via email and users should report any such inquiry.
We retain your PII, if provided by you through the Sites, for as long as your inquiry is active (as determined by us) and for a reasonable time thereafter, or if applicable, for as long as you remain on our marketing list. Even if we delete some or all of your PII, we may continue to retain and use aggregate, anonymous data previously collected and/or anonymize and aggregate your personal information. Please note that we will not be liable for disclosures of your data due to errors or unauthorized acts of third parties.
8. WHICH INFORMATION CAN USERS ACCESS?
You may access and update information you have entered on the Sites through your Boxed account settings. There you can also view information like your purchase history, savings, and Cash Rewards. If you have any questions about viewing or updating your information we have on file, please contact firstname.lastname@example.org.
9. WHAT CHOICES DO USERS HAVE?
You can choose not to disclose information to us; however, some of this information may be necessary to register with us or to take advantage of the features on our Sites. As we mentioned above, you may also update certain information through your Boxed account.
You can opt out of promotional emails, other communications or notifications from the Company at any time by clicking unsubscribe at the bottom of our emails, by changing your email preferences here or using the contact information provided below. You can also opt out of the collection of certain information collected by mobile applications by changing the settings preferences on your mobile device. We will process your request within a reasonable time after receipt. However, we are not responsible for removing your PII from the lists of any third party who has previously been provided with your information in accordance with this Policy or your consent. We encourage you to raise any concerns using the contact information provided below, and we will investigate and attempt to resolve any complaints and disputes regarding use and disclosure of information. You may also request access to your PII (if you have provided PII to us through the Sites) and information about our collection, use and disclosure of that information by using the contact information provided below. Subject to certain exceptions prescribed by law, you will be given reasonable access to your personal information, entitlement to challenge the accuracy and completeness of the information, and the ability to have it amended as is appropriate. You can help us maintain the accuracy of your information by notifying us of any changes to your personal information.
As described above, we may, and may work with third parties, to use Non-PII information to deliver targeted advertisements to you based upon your online activities and other information. The online advertising industry provides a service through which you may opt-out of receiving targeted ads from certain data partners and other advertising partners that participate in self-regulatory programs. You can opt-out of targeted advertising from certain providers at www.aboutads.info/consumers.
Please note that by opting out, you will continue to see generic advertising that is not tailored to your specific interests and activities.To be clear, even if you use an online industry opt-out, these cookie-based opt-outs must be performed on each device and browser that you wish to have opted-out.For example, if you have opted out on your device browser, that opt-out will not be effective on your mobile device. You must separately opt out on each device.
If you have any questions about the features on our Sites and how best to utilize them, please contact us at email@example.com.
10. CHANGES IN POLICY
11. QUESTIONS AND HOW TO CONTACT US
If you have any questions or concerns regarding privacy and protection of information, please send a detailed message to firstname.lastname@example.org.
United States of America
Our Site is maintained in the United States of America. By using the Site, you authorize the export of your information to the USA and its storage and use as specified in this policy. You understand that data stored in the USA may be subject to lawful requests by the courts or law enforcement authorities in the USA.