At The Box Fulfillment we take the protection of your personal data very seriously. This policy explains what information we collect, what we use it for and what your rights are under the General Data Protection Regulation (GDPR).

1. Data controller

The Box Fulfillment S.L.
Pozuelo de Alarcón, Madrid (Spain)
E-mail: hola@theboxfulfillment.com

2. Data we collect

We collect the data you provide directly through our contact forms:

  • Full name
  • Phone number
  • E-mail address
  • Information about your business or enquiry (message field)

We may also automatically collect technical browsing data (IP address, browser type, pages visited) through analytics cookies, exclusively with your prior consent.

3. Purpose and legal basis

  • Handling your business enquiry — legal basis: legitimate interest and pre-contractual measures (art. 6.1.b GDPR).
  • Sending commercial communications — only if you give us your explicit consent (art. 6.1.a GDPR). You can withdraw your consent at any time.
  • Statistical analysis of the website — with your consent through the cookie banner (art. 6.1.a GDPR).

4. Data retention

We keep your data for as long as necessary to handle your request and, where a contractual relationship exists, for the applicable legal period (up to 6 years for commercial obligations). After that period, the data is securely deleted.

5. Recipients

We do not sell or transfer your data to third parties. We may share it with technical service providers (web hosting, e-mail platforms) acting as data processors under GDPR-compliant confidentiality agreements. Where we work with carriers or logistics partners in the context of a contracted service, only the data strictly necessary to provide that service is shared.

6. Your rights

Under the GDPR you have the right to:

  • Access — know what data of yours we process.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — request the deletion of your data when it is no longer needed.
  • Objection — object to the processing in certain circumstances.
  • Portability — receive your data in a structured, commonly used format.
  • Restriction — request that we restrict the processing of your data.

You can exercise any of these rights by writing to hola@theboxfulfillment.com with the subject "GDPR Rights". We will reply within one month at most. Likewise, if you believe the processing is not compliant, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Cookies

We use technical cookies necessary for the website to function. Additionally, with your consent, we may use analytics cookies to measure traffic and improve the user experience. You can manage or revoke your consent at any time from your browser settings or through this site's cookie preferences panel.

8. Security

We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration, including encrypted connections (HTTPS) and access control to the systems that store it.

9. Changes to this policy

We may update this policy to adapt it to legal or business changes. The update date will always appear in the header of this page. We recommend checking it periodically.