Privacy Policy

Last modified: 19 June 2020

We will always be transparent about how your data is used and stored by us.

What is boxlist?

boxlist is an online service that matches your taste and mood with entertainment options. We gather and infer information related to you though our system, and we collect information on entertainment from numerous websites, data exchanges and data resellers. Following this we generate recommendations and provide you with easy access to this entertainment.

What information is collected?

When you sign up for a boxlist account, you supply us with basic personal information (including Name, Email Address(s), Location, Age range) and if you elect to upgrade to the premium account, you provide billing information (Name, Address, Credit Card details). This information is used to create and maintain your account with us and is referred to as ‘account data’. This information is held securely on our Amazon Web Services / Stripe Payment Provider servers until you request to be deleted from our servers. See data erasure below.

In addition to ‘account data’, you provide us with ‘preference data’, namely information about your opinion on certain entertainment in order for us to determine your tastes, preferences and mood.

Following your consent, we may collect anonymous ‘meta data’ relating to your interaction with our service. This may include the following: Browser, Device, Language, Operating System, Screen Resolution, Duration, Navigation, IP Address, Referrer URL and Visitor Type. This information will be held securely in either our servers or the 3rd party server of an analytics company (e.g. Google Analytics) until you request to be deleted from our servers. See data erasure below.

How is my data processed and stored?

The ‘account data’ and ‘preference data’ (above) you provide us with is used to generate a series of recommendations for you. The ‘preference data’ gathered is then analysed using proprietary and 3rd party analysis tools, but always via our own infrastructure. As part of the analysis process, your data may be reviewed by a human member of our team for service quality. The ‘preference data’ gathered and corresponding dashboard generated is held on our secure AWS environment until you delete your account or request the data to be deleted from our servers.

What can I do?

Data access:

If you wish to obtain a copy of your data, please contact us at privacy@boxlist.com

Data correction:

If you wish to correct your data, please contact us at privacy@boxlist.com

Data erasure:

If you wish to erase your data, please contact us at privacy@boxlist.comor click the 'delete account' button from within the 'my account' page

Consent

We will always ask your consent prior to emailing you or placing cookies on your device. We offer the ability to opt-out of any marketing communications by email in the email communication.

Use of your data

We will only use the data we hold about you to provide the boxlist service, as described in this policy. We will never sell, rent, trade or give your data to any third party.

Questions?

If you have any questions, please email privacy@boxlist.com and we're happy to assist.

Extended Privacy Policy

Effective Date: 19 June 2020

This Privacy Policy applies to boxlist Ltd trading as boxlist and its owned and operated websites and its subdomains (“Sites”).

This Privacy Policy explains what information of yours will be collected by boxlist when you access the boxlist service, how the information will be used, and how you can control the collection, correction and/or deletion of information

We will not use or share your information with anyone except as described in this Privacy Policy. This Privacy Policy does not apply to information we collect by other means (including offline) or from other sources.

The use of information collected through our Sites shall be limited to the purposes under this Privacy Policy and our Terms of Service to customers

The information we collect:

Our Services:

We may collect personally identifiable information about you, such as your full name, location, email address, or similar, when you register for an account. If you choose to purchase a service from us, we and or our third-party payment processors will collect your payment information. When you use the boxlist Services, we may receive certain information about you as described below. We may send you promotional emails from time to time alongside service related emails related to your account. If you no longer wish to receive these emails, you may opt out of them by unsubscribing from marketing emails or deleting your account.

Cookies And Tracking Technologies:

We use cookies to remember users’ settings as well as for authentication and analytics. If you reject cookies, you may still use our sites, but your ability to use some features or areas of our sites may be limited. All analytics products only use anonymised data. For more information or to opt-out, please review the details in our cookie management popup or contact us at privacy@boxlist.com.

Log File Information:

Log file information is automatically reported by your browser or mobile application each time you access our Sites or the boxlist Services. For example, when you access our Sites or the boxlist Services, our servers automatically record certain information that your web browser sends whenever you visit any website. These server logs may include information such as your operating system, browser type, referring / exit pages and URLs, number of clicks, domain names, landing pages, pages viewed and other such information. We do not link this automatically-collected data to personally identifiable information and these log files are only retained for 7 days before being automatically deleted.

How we keep your data:

Date Erasure & Correction:

An individual who is a current or former boxlist customer who seeks access or wishes to correct, amend or delete inaccurate data should direct their query to privacy@boxlist.com. If we receive a request under this provision, we will acknowledge it within seventy-two (72) business hours and handle it promptly and as required by law.

Data Retention:

We will retain the personal data we process on behalf of our customers for no more than 1 year after the last login of a customer. It is possible to delete your account at any time by emailing privacy@boxlist.com. Beyond this, boxlist will only retain the minimum personal information as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

How We Use Your Information:

We use the information that we collect to operate and maintain our Sites and the boxlist Services, send you marketing communications, and respond to your questions and concerns.

How we use your information:

Personally Identifiable Information:

boxlist will only use the data you provide or we gather about you for the provision of the service. We will not rent or sell your personally identifiable information to others. We may store personal information in locations outside the direct control of boxlist (for instance, on servers or databases co-located with hosting providers).

Non-Personally Identifiable Information:

We may share non-personally identifiable information (such as anonymous usage data, referring/exit pages and URLs, platform types, number of clicks, etc.) with trustworthy third parties to help them understand the usage patterns for boxlist.

Instances Where We Are Required To Share Your Information:

boxlist will disclose your information where required to do so by law, if subject to subpoena or other legal proceeding or if we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) to enforce our Terms of Service or to protect the security or integrity of our Services; and/or (c) to exercise or protect the rights, property, or personal safety of boxlist, our users or others..

What Happens In The Event Of A Change Of Control:

In the event that there is a change of control of boxlist Ltd you will be notified via email and/or a prominent notice on our Site of how this may affect you, as well as the choices you may have regarding your personal information.

Testimonials:

We display personal testimonials of satisfied customers on our Site in addition to other endorsements. With your consent, we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at privacy@boxlist.com.

How we store and process your information:

Your information collected through the boxlist Services may be stored and processed in the United States, Europe, or any other country in which boxlist or its subsidiaries, affiliates or service providers maintain facilities. boxlist may transfer information that we collect about you, including personal information, to affiliated entities, or to other third parties across borders and from your country or jurisdiction to other countries or jurisdictions around the world.

If you are located in the European Union, California or other regions with laws governing data collection, we will not transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction.

How we protect your information:

boxlist is concerned with protecting your privacy and data, but we cannot ensure or warrant the security of any information you transmit to boxlist or guarantee that your information on the boxlist Services may not be accessed, disclosed, altered or destroyed by breach of any of our industry standard physical, technical or managerial safeguards.

When you enter sensitive information (such as log in credentials) on our registration or order forms, we encrypt that information using secure socket layer technology (SSL). No method of transmission over the Internet or method of electronic storage is 100% secure, however. Therefore, we cannot guarantee its absolute security.

If you have any questions about security on our Site, you can contact us at privacy@boxlist.com. We use an outside help platform, and a credit card processing company to bill you if you purchase services. These companies do not retain, share, store or use personally identifiable information for any other purposes.

EU/US - Privacy Shield:

boxlist self-certifies compliance with EU-US Privacy Shield at the U.S. Department of Commerce. boxlist complies with the EU Data Protection Directive 95/46/EC framework as set forth by the European Union regarding the collection, use, and retention of personal data from European Union member countries and Switzerland. boxlist has certified that it adheres to the requirements of notice, choice, onward transfer, security, data integrity, access and enforcement.

GDPR - Your European Privacy Rights:

Please review our principles above to learn more about our approach to GDPR.

CCPA - Your California Privacy Rights:

Companies that collect personally identifiable information (“PII”) from California residents and disclose such information to third parties (including affiliated entities) for marketing purposes must, in response to a request by a consumer, either (1) provide a list detailing the categories of information shared and the entities to which such information was provided, or (2) provide a mechanism by which a consumer may opt-out of having their information shared with third parties.

We have elected the second option and you may request that your PII not be shared with third parties by sending your request, including your full name, email address and postal address to:privacy@boxlist.com.

In addition, California resident users are entitled to know that they may file grievances and complaints with California Department of Consumer Affairs, 400 R Street, Suite 1080, Sacramento, CA 95814; or by phone at 916-445-1254 or 800-952-5210 or by email to dca@dca.ca.gov.

We do not track our customers over time and across third party websites to provide targeted advertising and, therefore, we do not respond to Do Not Track (DNT) signals. However, some third party sites may keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you. If you are visiting such sites, your web browser allows you to set the DNT signal so that third parties (particularly advertisers) know you do not want to be tracked.

Compromise of Personal Information:

In the event that personal information is compromised as a breach of security, boxlist will promptly notify our customers in compliance with applicable law.

Data Access, Correction, Deletion, and Opt Out:

For current boxlist customers, you can review, correct, update or delete inaccuracies to the information about you that boxlist keeps on file by logging into your account to update your password and billing information. Alternatively you can contact us directly at privacy@boxlist.com. We will acknowledge your request within seventy-two (72) business hours and handle it promptly and as required by law. We will retain your information for 1 year from your last login. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes and enforce our agreements.

Other items you need to know:

Children’s Privacy:

Protecting the privacy of young children is especially important. For that reason, boxlist does not knowingly collect or solicit personal information from anyone under the age of 13. In the event that we learn that we have collected personal information from a child under age 13, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us at privacy@boxlist.com.

Notification Procedures:

It is our policy to provide notifications, whether such notifications are required by law or are for marketing or other business related purposes, to you via email, written or hard copy notice, or through conspicuous posting of such notice on the Services, as determined by boxlist in its sole discretion. We reserve the right to determine the form and means of providing notifications to you. Through agreeing to our privacy policy you consent to these notifications and you may opt out of certain means of notification as described in this Privacy Policy.

Links to Other Web Sites:

We are not responsible for the practices employed by websites or services linked to or from the boxlist Services or Sites, including the information or content contained therein. Please remember that when you use a link to go from the boxlist Services or Sites to another website or service, our Privacy Policy does not apply to third-party websites or services. Your browsing and interaction on any third-party website or service are subject to that third party’s own rules and policies.

Changes to Our Privacy Policy:

All changes to this Privacy Policy are effective when they are posted on this page. When we change the policy in a material manner, we will let you know via email and/or a prominent notice on our Site, prior to the change becoming effective and update the ‘effective date’ at the top of this page.

Appointed Agents:

If you have any questions about this Privacy Policy, the practices of this Site, or your dealings with this website, please contact us at privacy@boxlist.com, or send mail to boxlist Ltd, <Mailing Address>. For EU customers, our appointed agent for GDPR is the same.