Privacy Policy for 876BOX

Last updated: July 5, 2025

1. Introduction

876BOX (“we,” “us,” “our”) operates a WebView-based Android and iOS app and corresponding website (the “Service”) to sell and ship non-perishable Jamaican grocery boxes. This Privacy Policy explains what information we collect, why we collect it, how we use it, and your rights.

2. Data Controllers

876BOX LTD (UK)
876BOX Portugal
Email: [email protected]

3. Information We Collect

3.1 Personal Data You Provide Directly

• Account & Order Data: name, email address, shipping/billing address, phone number.
• Payment Information: processed by our payment processor (e.g. Stripe) and not stored on our servers.
• Customer Service: messages you send via chat or email.

3.2 Automatically Collected Data

• Device & Usage Data: device model, OS version, unique identifiers, IP address, session timestamps.
• Analytics & Crash Reports: anonymized usage patterns and crash stacks via Firebase Analytics and Sentry.
• Cookies & Web Storage: to keep you logged in, remember preferences, and track cart contents.

4. How We Use Your Data

• Order Fulfillment: process and ship your orders.
• Payments: verify and complete transactions.
• App & Service Improvement: monitor performance and fix bugs.
• Marketing & Promotions: with your consent, send newsletters and offers (opt-out anytime).
• Legal & Compliance: satisfy tax, accounting, and regulatory requirements.

5. Data Sharing

We may share your information with:

• Service Providers: couriers, payment processors, analytics vendors, email/SMS platforms.
• Legal Authorities: when required by law or to protect our rights.
• Business Transfers: as part of a merger or sale (we will notify you).

We do not sell or rent your data to third parties for marketing.

6. International Transfers

Your data is stored in the EU (Portugal) and may be processed by partners in the EU or U.S. We safeguard transfers under EU Standard Contractual Clauses or equivalent measures.

7. Data Retention

• Order & Account Data: up to 10 years for legal and tax needs.
• Analytics & Crash Data: up to 24 months, then aggregated or purged.
• Marketing Consents: until you withdraw consent.

8. Security

We use reasonable technical and organizational measures (TLS/HTTPS, encrypted backups, access controls). However, no internet transmission is 100% secure—please use strong passwords and keep devices updated.

9. Your Rights

Under GDPR and the UK Data Protection Act, you have the right to:

• Access your personal data.
• Correct inaccurate or incomplete data.
• Request deletion where no legal basis exists.
• Restrict processing of your data.
• Receive your data in a portable format.
• Withdraw marketing consent at any time.
• Lodge a complaint with your Data Protection Authority.

To exercise these rights, contact us at [email protected].

10. Children’s Privacy

Our Service is not directed to children under 16. We do not knowingly collect data from minors. If you believe we have, please contact us for deletion.

11. Third-Party Links

Our site or emails may link to external sites (e.g. social media). This Policy does not apply to them—please review their privacy notices.

12. Changes to This Policy

We may update this Policy to reflect changes in our practices or laws. We’ll post the new date at the top and notify you if changes are material.

Contact Us

876BOX LTD (UK)
876BOX Portugal
Email: [email protected]