Privacy Policy

This policy explains how Bag Box handles information submitted through this custom-packaging inquiry website.

Information we collect

When you request a quote, we collect your full name, work email, phone number, company, product type, estimated quantity and project details. Please do not include sensitive personal information in project details.

We also collect first-touch campaign parameters (UTM values), advertising click identifiers when present, the landing page URL and the referring website origin. We limit stored URLs to attribution information and remove unrelated query parameters. First-touch information is held in your browser’s session storage for the current tab session. A hidden field and form timing checks help identify automated submissions.

How we use information

We use this information to respond to your inquiry, understand your packaging requirements, prepare and follow up on quotes, assess inquiry sources, and protect the website from abuse. Submitting an inquiry permits Bag Box to contact you about that inquiry only; it does not enroll you in marketing email or SMS campaigns.

Service providers and hosting

The site and inquiry storage use Lovable Cloud and its hosting and infrastructure providers. Authorized service providers may process information to operate the website and support inquiry handling. If Bag Box later enables a lead-routing service, information may be shared with that service for the same inquiry-handling purpose. No external CRM is connected as part of this website setup. Providers may process data in locations outside your jurisdiction.

Advertising measurement and cookie choices

After you accept optional marketing cookies, Meta Pixel may be used for advertising measurement of page visits (PageView) and successfully saved quote requests (Lead). Meta receives these events, the page URL and technical browser and connection information, and may use cookies such as _fbp and _fbc to associate activity with advertising. We do not send your form contact details, company, project text or other form contents to Meta, and do not enable advanced customer matching. Meta processes this data under its own privacy policy.

Marketing tracking is off by default for all visitors and remains off if you reject it. Ad clicks and impressions can still be counted by Facebook or Instagram independently of this website’s cookie choice. Accepting marketing cookies does not enroll you in marketing email or SMS. Cookie Preferences in the footer lets you accept, reject or withdraw consent at any time; opening preferences alone does not change your choice. We honor the browser’s Global Privacy Control opt-out for this tracking.

Your choice is stored in your browser with a random visitor reference, timestamp, the notice text and version, and the prior choices so acceptance and withdrawal remain recorded. Saved-event consent references stay in first-party browser storage and are not shared with Meta. Clearing browser storage removes these local records and you will be asked again. Withdrawal stops future Meta reporting but does not recall data already received by Meta. You can also contact info@bag-box.com about privacy choices.

Retention

Inquiry information is retained only as needed to handle the inquiry, maintain relevant business records, meet applicable obligations and resolve disputes. Retention depends on the inquiry and applicable requirements; this policy does not promise a fixed deletion period. You may contact us to request deletion.

Security

We use access controls and input validation to help protect inquiry information. Visitors cannot read other visitors’ saved inquiries. No method of transmission or storage can be guaranteed completely secure.

To limit automated or repeated quote requests, the server derives a keyed, one-way identifier from the connection’s network address where available. The limiter stores this identifier, an attempt count and a window timestamp, not raw IP addresses. Networks may share an allowance. Inactive limiter records older than 24 hours and expired single-use submission permits are removed when the limiter next processes a request.

Your rights and requests

Depending on where you live and applicable law, you may have rights to request access, correction, deletion or a copy of your personal information, or to object to or restrict certain processing. Email info@bag-box.com with your request. We may need to verify your identity and may retain information where legally required. You may also ask us to stop contacting you about an inquiry.

Children’s privacy

This website is intended for business packaging inquiries and is not directed to children under 13. If you believe a child has submitted personal information, contact us so we can review and address it.

Policy updates

We may update this policy as the website or our practices change. The revised policy will be posted on this page. Material changes will be communicated when required by applicable law.

Contact

For privacy questions or requests, contact Bag Box at info@bag-box.com.