1. About this policy
This policy explains how we handle personal information when you use the box4u website or app, enquire about listing your business, or reserve a box4u Bag. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
2. What we collect
If you enquire about joining as a business, we collect your business name, your name, suburb, email address or mobile number, type of business, and the language you were viewing the site in. If you message us on WhatsApp, we also receive your phone number, WhatsApp profile name and your messages.
If you list your business on box4u, we also collect your business details (such as ABN, address and opening hours), contact people, listings, reservation and sales records, and the bank details needed for payouts.
If you reserve box4u Bags, we collect your name, email address, phone number (if you give it), reservation history, payment records, reviews or photos you share, and messages you send to support. If you allow it in your device settings, we use your location to show bags nearby. Card details are handled by our payment provider; we don't store full card numbers.
When anyone visits our website or app, our hosting and network providers record technical information such as your IP address, browser and device type, and the pages requested.
3. How we collect it
Mostly directly from you — through our forms, the app, email, phone or WhatsApp. We also receive information from our payment provider (for example, confirmation that a payment succeeded), and from Merchants about the reservations they fulfil.
You don't have to give us your details, but without them we can't contact you about joining, set up your account or process your reservations.
4. Why we use it
- to contact you about joining box4u and to set up your business;
- to create and run your account, show your listings and process reservations;
- to take payments, make payouts, and give refunds or credits;
- to give a Merchant the details needed to hand over a reservation (your first name and pickup code);
- to answer questions, resolve complaints and keep box4u safe, including preventing fraud and misuse;
- to understand how box4u is used so we can improve it;
- to send you service messages, and marketing where you've agreed to it (see section 8); and
- to meet our legal obligations, such as keeping tax and financial records.
5. Who we share it with
We don't sell personal information. We share it only as needed with:
- Merchants — the limited details needed to fulfil your reservation;
- service providers who help us run box4u, including website hosting and network security (Cloudflare), delivery of website enquiries by email (Web3Forms), payment processing, and email and messaging services (including WhatsApp, if you contact us that way);
- our professional advisers, such as accountants and lawyers;
- government agencies or others where the law requires or permits it; and
- a buyer or successor of the box4u business, if that happens, who must handle it under this policy.
6. Overseas storage
Some of our service providers store or process information outside Australia, including in the United States and the European Union. We take reasonable steps to make sure they protect it in a way that's consistent with the Australian Privacy Principles.
7. Cookies and third-party content
Our website doesn't use advertising or analytics cookies. It stores your language choice in your own browser so the site remembers it next time. Fonts are loaded from Google Fonts and photos from Unsplash; when your browser loads them, those providers receive your IP address and browser details under their own privacy policies.
8. Marketing
We'll only send you marketing if you've agreed to it or the law otherwise allows it. Every marketing email includes a way to unsubscribe, and you can also ask us to stop at any time. Service messages about your account or reservations will still be sent.
9. Security and retention
We take reasonable steps to protect personal information from misuse, loss and unauthorised access, including access controls and encrypted connections. We keep information only as long as we need it for the purposes above or as the law requires — for example, financial and tax records are generally kept for 5 years. When we no longer need it, we delete or de-identify it.
10. Access and correction
You can ask for a copy of the personal information we hold about you, or ask us to correct it, by contacting us (section 11). We'll respond within 30 days. If we can't give you access, we'll tell you why.
11. Questions and complaints
Contact us at [email protected] or on WhatsApp at +61 475 449 896. If you have a complaint about how we've handled your information, we'll acknowledge it promptly and aim to resolve it within 30 days. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.
12. Changes to this policy
We may update this policy as box4u develops. The date at the top shows when it was last changed, and we'll let you know about significant changes.