Last Updated: August 8, 2026
Custom Boxes Deals (“Custom Boxes Deals,” “we,” “us,” or “our”) is a trading brand operated by a registered business entity.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, request a quote, communicate with us, create an account, place an order, subscribe to marketing communications, or otherwise interact with Custom Boxes Deals.
It also explains the privacy choices and rights that may be available to you under applicable United States, European Union, and United Kingdom privacy laws.
By using our website, you acknowledge the practices described in this Privacy Policy. Where applicable law requires consent for a particular activity, such as certain cookies, advertising technologies, or marketing communications, we will request that consent separately.
The personal information we collect depends on how you interact with us.
We may collect:
Contact information
Quote and packaging information
Order and transaction information
Payment information may be collected and processed by third-party payment providers. We do not intentionally store complete payment-card numbers on our own website servers.
Account information
If you create an account, we may collect:
Artwork and files
If you submit artwork, logos, images, dielines, designs, documents, or other files for quotation or production, we may process those files as necessary to provide our services and fulfil your order.
Communications
We may collect information contained in:
Marketing information
If you subscribe to our newsletter or marketing communications, we collect your email address and information relating to your subscription preferences.
When you use our website, certain information may be collected automatically, including:
We collect some of this information through server logs and technologies described in the Cookies, Analytics and Advertising section below.
Depending on your interaction with us, the categories of personal information we may process include:
We do not intentionally request sensitive personal information such as Social Security numbers, medical information, biometric identifiers, precise geolocation, or similar sensitive data through ordinary quote or order forms.
Please do not provide sensitive personal information unless it is genuinely necessary and we have specifically requested it.
We generally obtain personal information:
We may use personal information to:
We do not use personal information for materially unrelated purposes without providing additional notice or obtaining consent where required.
Where the EU GDPR or UK GDPR applies to our processing, we rely on one or more lawful bases depending on the activity.
We may process information when necessary to:
Where permitted by law, we may process information for legitimate business interests such as:
We consider the impact on individuals before relying on legitimate interests.
We rely on consent where required, including for certain:
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
We may process information where necessary to comply with tax, accounting, regulatory, court, governmental, or other legal obligations.
Our website uses cookies, scripts, tags, pixels, local storage, and similar technologies.
These technologies may be divided into the following categories.
These are necessary for functions such as:
Where permitted by applicable law, these technologies may operate without optional cookie consent.
We use Google Analytics 4 (GA4) to help us understand how visitors interact with our website.
Google Analytics may collect information such as:
Google Analytics is implemented through our website’s Google-related tagging setup, which may include Google Tag Manager.
Where applicable law requires consent, analytics technologies will be used subject to the visitor’s privacy choices.
Where applicable law provides a specific analytics or statistical-purpose exception, we may rely on that exception only where our implementation meets its legal requirements.
We use Google Ads, including advertising measurement and remarketing functionality.
These technologies may help us:
Where required by law, advertising and remarketing technologies operate only after appropriate consent has been obtained.
Visitors may change or withdraw relevant cookie choices through the privacy or cookie controls provided on our website.
Where required for applicable visitors, our website may communicate consent choices relating to analytics and advertising technologies to Google.
These choices may include whether storage or processing for analytics, advertising, advertising user data, or personalised advertising has been permitted.
We use Tawk.to to provide live-chat and customer-support functionality.
When you use the chat service, information processed may include:
Tawk.to processes information in accordance with its own applicable privacy and data-processing practices.
Please avoid sending unnecessary sensitive personal information through live chat.
Where required by applicable law, we provide controls that allow visitors to make choices about optional technologies.
Depending on your location and applicable law, these controls may allow you to:
Disabling or rejecting optional cookies should not prevent access to the core functions of the website, although certain optional features may work differently.
You can also control cookies through your browser settings.
Where required by applicable law, including applicable U.S. state privacy laws, we recognise qualifying browser-based opt-out preference signals such as Global Privacy Control (GPC).
When we receive a legally valid opt-out preference signal and applicable law requires us to honour it, we will treat the signal as a request to opt out of covered sale, sharing, or targeted-advertising activities for the browser or device associated with the signal.
A browser-level signal may not identify you across every device, browser, or offline interaction.
You may also contact us directly to exercise applicable privacy rights.
We may disclose personal information only as reasonably necessary for legitimate business purposes, including to the following categories of recipients.
Payment and transaction providers may process payment information in order to complete purchases or other authorised transactions.
We may provide names, addresses, telephone numbers, order information, and other necessary details to carriers, freight providers, fulfilment partners, or logistics companies in order to deliver orders.
Where necessary to manufacture your custom packaging, we may provide relevant artwork, order specifications, contact or order identifiers, and production information to approved manufacturing or production partners.
We may use third-party providers to support:
These include Google for relevant analytics and advertising services and Tawk.to for live chat.
We may disclose information to accountants, legal advisers, insurers, auditors, consultants, or similar professional advisers where reasonably necessary.
We may disclose information where we reasonably believe disclosure is required to:
If our business, brand, or assets are involved in a merger, acquisition, financing, restructuring, sale, or similar transaction, personal information may be disclosed or transferred as part of that transaction.
Where required by law, appropriate notice will be provided if another entity becomes responsible for your personal information.
We do not sell personal information for money.
However, certain privacy laws use broader definitions of “sale,” “sharing,” or “targeted advertising.”
For example, the use of advertising cookies, identifiers, or remarketing technologies may be considered “sharing,” targeted advertising, or a similar regulated activity under certain U.S. state privacy laws even where no money is exchanged for personal information.
Where applicable law gives you the right to opt out of these activities, you may exercise that right using:
We do not knowingly sell or share personal information of individuals under 18 for targeted advertising purposes.
If you subscribe to marketing communications, we may use your email address to send:
You may unsubscribe at any time by using the unsubscribe link included in a marketing email or by contacting:
Withdrawing from marketing communications does not prevent us from sending transactional or service-related messages concerning:
Depending on where you live and whether the applicable state privacy law applies to Custom Boxes Deals, you may have rights relating to your personal information.
These may include the right to:
The availability and scope of these rights varies by state.
We will not unlawfully discriminate against you for exercising an applicable privacy right.
If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”), applies to our processing of your personal information, California residents may have rights including:
Depending on your interaction with us, during the applicable reporting period we may collect:
Identifiers: name, email, telephone number, postal address, IP address, and online identifiers.
Commercial information: quotation activity, orders, transaction records, packaging preferences, and purchase history.
Internet or network activity: browsing activity, website interactions, referring URLs, device information, and cookie-related data.
Approximate geolocation: general location information inferred from an IP address or similar information.
Customer communications: emails, forms, live-chat messages, and support communications.
Account information: login and account-related information where an account is created.
We collect this information from the sources and for the purposes described elsewhere in this Policy.
We may disclose relevant categories to service providers, contractors, payment providers, carriers, production partners, analytics providers, advertising providers, and other parties described in this Policy.
Our use of certain advertising technologies may constitute “sharing” under California law.
Where the CCPA applies, qualifying opt-out preference signals will be handled as required by applicable law.
You may submit an applicable privacy request by contacting:
Email: info@customboxesdeals.com
Phone: +1 888-316-7748
Please describe the privacy right you want to exercise and provide enough information for us to understand and process the request.
We may need to verify your identity before fulfilling certain requests.
We will request only information reasonably necessary for verification and will use verification information for that purpose.
Where applicable law permits an authorised agent to submit a request on your behalf, we may request evidence of the agent’s authority and may take reasonable steps to verify the request.
We will respond within the period required by applicable law.
If we cannot fulfil all or part of a request, we will explain the reason where required.
Where applicable law provides a right to appeal our decision, you may submit an appeal by replying to our decision or contacting us at the email address above and clearly stating that you are requesting an appeal.
Where the EU GDPR applies, individuals in the European Economic Area may have rights including:
Some rights are subject to conditions, exceptions, or limitations under applicable law.
To exercise your rights, contact:
Where processing is based on consent, withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.
Where UK data-protection law applies, individuals in the United Kingdom may have rights including:
You also have an absolute right to object to the use of your personal information for direct marketing.
You may contact us first if you have a concern about how we handle personal information.
You may also have the right to complain to the United Kingdom Information Commissioner’s Office or another appropriate regulator.
If you believe that we have not handled your personal information appropriately, contact us at:
Please provide enough information for us to identify the issue and investigate it.
We will review privacy complaints and respond in accordance with applicable law.
Nothing in this section prevents you from contacting an applicable privacy or data-protection regulator where you have the legal right to do so.
Custom Boxes Deals operates from the United States.
If you access our website or interact with us from another country, your personal information may be processed in or transferred to the United States or another country in which our service providers or business partners operate.
Privacy and data-protection laws in those countries may differ from those in your country of residence.
Where EU, EEA, or UK data-protection law requires additional safeguards for an international transfer, we will use an applicable lawful transfer mechanism or other legally recognised safeguard as required.
These may include, where applicable:
We do not rely merely on your use of the website as blanket consent to international transfers where applicable law requires another legal mechanism.
Custom Boxes Deals is operated from the United States.
If applicable EU or UK data-protection law requires us to appoint a representative in the European Economic Area or United Kingdom, the applicable representative’s contact details will be made available in this Policy or through another legally appropriate notice.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, accounting, tax, contractual, fraud-prevention, dispute-resolution, and recordkeeping requirements.
Retention periods may differ depending on the type of information.
For example:
Quote information may be retained for a reasonable period to respond to enquiries, provide follow-up quotations, maintain business records, and resolve disputes.
Order and transaction information may be retained for as long as reasonably necessary to fulfil the order and meet tax, accounting, warranty, dispute, and other legal obligations.
Artwork and production information may be retained where reasonably necessary to support order fulfilment, reorders, customer service, quality records, or legal obligations.
Account information may be retained while an account remains active and for an appropriate period afterwards where needed for legitimate business or legal purposes.
Customer-support and live-chat records may be retained as reasonably necessary for support, quality assurance, dispute resolution, security, and legal obligations.
Marketing information may be retained until you unsubscribe or otherwise withdraw consent, subject to limited suppression records that may be maintained to ensure we respect your opt-out.
Analytics and advertising information is retained according to our selected platform settings and applicable legal requirements.
When personal information is no longer reasonably required, we may delete, anonymise, or securely dispose of it.
We use reasonable administrative, technical, and organisational safeguards designed to protect personal information against unauthorised access, alteration, disclosure, misuse, or loss.
These measures include use of SSL/TLS encryption for information transmitted through protected areas of our website.
Payment-card information is processed through applicable payment providers, and we do not intentionally store complete card numbers on our own website servers.
Access to customer information is limited to personnel, contractors, or service providers who reasonably require access for legitimate business purposes.
However, no website, network, transmission method, or electronic storage system can be guaranteed to be completely secure.
If we become aware of a personal-data breach, we will investigate and take reasonable steps appropriate to the circumstances.
Where applicable law requires notification to affected individuals, regulators, or other authorities, we will provide such notification in accordance with applicable requirements.
Our website and services are primarily intended for businesses and adults.
We do not knowingly collect personal information from children under 18 for the purpose of selling custom packaging to them.
If you believe that a person under 18 has provided us with personal information without appropriate authorisation, contact us at:
We will review the matter and take appropriate action.
Our website may contain links to third-party websites or services.
We are not responsible for the privacy, security, or content practices of websites that we do not control.
We encourage you to review the privacy policies of third-party websites before providing them with personal information.
We may update this Privacy Policy from time to time to reflect:
When we make changes, we will update the “Last Updated” date at the top of this Policy.
Where applicable law requires additional notice or consent for a material change, we will provide it.
If you have questions about this Privacy Policy, want to exercise a privacy right, or want to submit a privacy complaint, contact:
Custom Boxes Deals 295 5th Ave New York, NY 10016 United States
Phone: +1 888-316-7748 Email: info@customboxesdeals.com