Privacy Policy

This privacy notice for Boxinom Oy / Ltd (“Company,” “we,” “us,” or “our“), describes how and why we might collect, store, use, and/or share (“process“) your information when you use our services (“Services“), such as when you:

• Visit our website at https://www.boxinom.com, or any website of ours that links to this privacy notice
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@boxinom.com.

Summary of Key Points

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by reviewing the full sections below or using the table of contents.

• What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Boxinom Oy / Ltd and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.
• Do we process any sensitive personal information? We do not process sensitive personal information.
• Do we receive any information from third parties? We may receive information from public databases, marketing partners, social media platforms, and other outside sources. Learn more about information collected from other sources.
• How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.
• In what situations and with which types of parties do we share personal information? We may share information in specific situations and with specific categories of third parties. Learn more about when and with whom we share your personal information.
• How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise that unauthorized parties will not gain access. Learn more about how we keep your information safe.
• What are your rights? Depending on where you are located, the applicable privacy law may give you certain rights regarding your personal information. Learn more about your privacy rights.
• How do you exercise your rights? The easiest way is by submitting a data subject access request or contacting us. We will act on any request in accordance with applicable data protection laws.

Table of Contents

1. 1. WHAT INFORMATION DO WE COLLECT?
2. 2. HOW DO WE PROCESS YOUR INFORMATION?
3. 3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
4. 4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
5. 5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
6. 6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
7. 7. DO WE OFFER SOCIAL LOGINS?
8. 8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
9. 9. HOW LONG DO WE KEEP YOUR INFORMATION?
10. 10. HOW DO WE KEEP YOUR INFORMATION SAFE?
11. 11. DO WE COLLECT INFORMATION FROM MINORS?
12. 12. WHAT ARE YOUR PRIVACY RIGHTS?
13. 13. CONTROLS FOR DO-NOT-TRACK FEATURES
14. 14. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
15. 15. DO VIRGINIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
16. 16. DO WE MAKE UPDATES TO THIS NOTICE?
17. 17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
18. 18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us when you register, express interest in our Services, participate in activities, or contact us.

The types of information depend on how you interact with us and may include names, phone numbers, email addresses, mailing addresses, job titles, usernames, passwords, contact preferences, authentication data, billing addresses, and other similar data. All information must be accurate, and you should notify us of any changes.

We do not process sensitive information on this public site. We do not collect online payments or offer social logins here. If our client work requires invoicing, identity verification, or third-party collaboration tools, those are covered under a separate services agreement shared with you before any data is processed.

Information automatically collected

In Short: We automatically collect certain technical information (such as IP address, browser details, and usage logs) needed to secure and operate the Services. This may include device data, log and usage data, and location data, often gathered via cookies and similar technologies.

Information collected from other sources

In Short: To enhance our services and records, we may obtain information from public databases, marketing partners, social media platforms, and other third parties.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process information to deliver and improve Services, communicate with you, ensure security, comply with law, and support other purposes with your consent. This includes account management, customer support, marketing communications, targeted advertising, trend analysis, campaign effectiveness, and protecting vital interests.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We process personal information only when we have a valid legal reason, such as consent, contractual necessity, legitimate interests, legal obligations, or vital interests. This section describes legal bases for the EU/UK (GDPR) and Canada, including scenarios where consent may be implied or exceptions apply.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share information with vendors, consultants, service providers, and other partners as needed, under contracts that protect your data. We may also share information for business transfers, with affiliates, business partners, and in public interactions (e.g., social media).

5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

In Short: We are not responsible for third-party websites, services, or applications linked to our Services. Review their policies directly, as their data practices are outside of this notice.

6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Yes, we may use cookies, pixels, and similar technologies to store information. See our Cookie Notice for details and opt-out options.

7. DO WE OFFER SOCIAL LOGINS?

In Short: No. The public-facing site does not include social login features. If we ever enable a third-party authentication option for a private client portal, it will be covered by a separate notice and opt-in process.

8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: Yes. We operate from Finland and may transfer data within the EU/EEA or to other regions when a project requires it. We implement safeguards such as Standard Contractual Clauses when cross-border transfers are necessary.

9. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We retain personal information only as long as necessary for stated purposes or legal requirements. When no longer needed, we delete or anonymize data, or securely store it until deletion is feasible.

10. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use organizational and technical safeguards to protect data. However, no internet transmission or storage is completely secure, so use the Services within secure environments.

11. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18. If such data is found, we will delete it. Contact us if you become aware of any data we may have collected from minors.

12. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your region (EEA, UK, Canada, etc.), you may access, correct, erase, restrict, or object to processing of your personal information, or request data portability. You can withdraw consent at any time and manage marketing preferences. Contact us to exercise your rights.

13. CONTROLS FOR DO-NOT-TRACK FEATURES

In Short: We currently do not respond to DNT signals because no uniform standard exists. If adopted in the future, we will update this notice.

14. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes. California residents have rights under the CCPA, including access, deletion, non-discrimination, and the right to know what personal information is collected, used, and shared. We describe categories collected, third-party disclosures, and how to exercise rights (including “Shine The Light” and data removal requests).

Contact us at info@boxinom.com or via https://boxinom.com/contact-us/ to exercise rights or submit authorized agent requests.

15. DO VIRGINIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes. Under the Virginia Consumer Data Protection Act (CDPA), consumers have rights to access, correct, delete, obtain copies of, and opt out of certain processing of personal data. We describe how to exercise those rights (including appeals) and our obligations.

16. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes. We update the privacy notice as needed to stay compliant. Changes become effective as soon as posted, and material changes may be accompanied by prominent notice or direct communication.

17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Submit a data subject access request or contact us via the details above to review, update, or delete personal information, in accordance with applicable laws.