The Custom Boxes Hub is a custom packaging and printing business. To make your boxes we need a few things from you: where to ship, who to bill, and what to print. We only ask for what the job actually requires.
This policy covers our website, quote forms, phone and email orders, and artwork uploads. By using any of these, you agree to the practices described here.
This policy applies only to channels operated by The Custom Boxes Hub, which include:
- Our website and every form on it (quote, rush order, contact, newsletter)
- Orders placed over phone, WhatsApp or email
- The upload portal where you send us your design files
- Support tickets and live chat conversations
If you leave our site for an outside page, such as a shipping carrier's tracking page or one of our social profiles, that company's own policy applies there, not ours.
Information reaches us in three ways. They are different, so we list them separately.
A. What you give us directly
- Identity: your name, company name, and job title if you choose to add it
- Contact: email, phone number, billing and shipping address
- Order details: box dimensions, material, quantity, finishing, deadline
- Uploads: logos, dielines, print ready artwork, reference images
- Messages: whatever you write in chat, email, or the notes field on a quote form
B. What gets recorded automatically
- IP address and approximate city level location
- Browser, device type and operating system
- Pages viewed, time spent, and the link that brought you here
- Cookie IDs and session identifiers
C. What we receive from others
- Transaction confirmation status from payment processors
- Delivery and tracking updates from shipping carriers
- Aggregate campaign data from ad platforms (never an individual's identity)
What we never ask for: your social security number, national ID number, health information, or your full card number. If anyone requests these while claiming to be us, it isn't us. Please report it right away.
Every piece of data has a job to do. Once that job is done, so is the use.
Completing your order
Building a quote, sending a proof, scheduling production and getting the boxes to you.
Supporting you
Pulling up your history for a reprint, a damage claim, or a delivery issue.
Improving the site
Seeing which pages confuse people and where the checkout gets stuck.
Preventing fraud
Spotting and blocking suspicious orders and chargeback attempts.
Marketing (opt in)
Emails about new box styles and seasonal offers, only if you subscribe.
Keeping legal records
Invoices and tax records we are required by law to hold on to.
We do not sell your personal information to anyone. Not email lists, not behavioural profiles, not anything else. That simply isn't our business model.
04
Your artwork and design files
This section is specific to packaging work, so it's worth reading closely.
- The files you upload stay yours. We only take permission to print them.
- Your artwork goes to our prepress team, the printing partner, and if needed a proofing vendor. Nobody else.
- We will not use your design on our website, in our portfolio, or on samples unless you give us written permission.
- Print ready files stay archived for 24 months after an order completes so reprints are easy, then they are deleted.
- You can ask us to delete your files sooner at any time. If you do, you will need to send the file again for a future reprint.
Cookies are small text files saved in your browser. We group ours into four categories.
| Type | What it does | How long | Can you turn it off? |
| Essential |
Remembers your cart, keeps you logged in, runs security checks |
Session or 12 months |
No, the site won't work without them |
| Preferences |
Saves your chosen units, currency and language |
12 months |
Yes |
| Analytics |
Aggregate traffic and page performance data |
Up to 24 months |
Yes |
| Marketing |
Ad relevance and conversion measurement |
Up to 13 months |
Yes |
You can block or delete cookies in your browser settings. Blocking the essential ones will break the quote form and the cart. We also honour the "Do Not Track" browser signal wherever it is technically possible.
Only the people your order cannot be completed without:
- Printing and finishing partners who actually produce your boxes
- Shipping carriers such as FedEx, UPS and DHL, delivery details only
- Payment processors to authorise the transaction
- Software vendors such as our email, CRM and cloud hosting providers
- Professional advisors like accountants and auditors, on a need to know basis
Each of them works under a written agreement that limits them to the specific task we hired them for. Beyond this, we share information only when the law, a court order, or a valid legal request requires it.
Here is the most important point on this page: we do not store your card number on our servers.
The details you enter at checkout travel encrypted straight to a PCI DSS compliant payment processor. All we get back is whether the transaction succeeded, the amount, and the last four digits of the card so you can recognise the invoice.
Our team will never ask for your full card number or CVV over phone or email. If someone does, hang up and let us know at
support@thecustomboxeshub.com.
Holding data forever is bad for you and bad for us. These are our default periods:
| Data | Retention period | Reason |
| Order and invoice records | 7 years | Tax and accounting requirements |
| Print ready artwork | 24 months | Reprints and repeat orders |
| Support conversations | 24 months | Complaint history and quality review |
| Marketing contacts | Until you unsubscribe | Based on your consent |
| Analytics logs | 14 months | Year on year comparison |
Once a period ends, the record is either deleted or anonymised so that it can no longer be linked back to any individual.
09
Your rights and choices
Your exact rights depend on where you live, but we honour all of the following for every customer:
Access
Ask for a copy of everything we hold about you.
Correction
Fix a misspelled name, an old address, or a wrong number.
Deletion
Ask us to erase your data, apart from records the law requires us to keep.
Portability
Take your data with you in a machine readable file.
Objection
Opt out of marketing or profiling at any time.
No retaliation
Making a request never means worse service or a higher price.
To make a request, email support@thecustomboxeshub.com with "Privacy Request" in the subject line. We will verify your identity first (an order number or your registered email works), then respond within 30 days. For complicated cases we may take another 30 days and will tell you if we do.
To stop marketing emails, click the unsubscribe link at the bottom of any message. You will still receive order confirmations and shipping updates, since those are service messages rather than promotions.
- TLS encryption across the whole site, so data can't be read in transit
- Databases and file storage encrypted at rest
- Role based access: the sales team can't see payment logs, prepress can't see billing
- Two factor authentication required on all staff accounts
- Regular backups and routine review of access logs
- Security assessment of every vendor before we onboard them
It's worth saying plainly that no system on the internet is 100 percent safe. We hold ourselves to industry standard measures, but no honest company can promise absolute security.
11
If something goes wrong
If a breach ever gives someone unauthorised access to your personal information, this is our plan:
- Contain the problem immediately and isolate the affected systems
- Notify affected customers without unnecessary delay
- Tell you which data was involved and what steps you can take
- Notify regulators where the law requires it and cooperate with any investigation
Our services are built for businesses and adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their details, write to support@thecustomboxeshub.com and we will delete the record once we verify it.
13
International transfers
Our servers and some of our service providers are based in the United States, and parts of our production or support team may sit in other countries. That means your data can be transferred and processed outside the country you live in.
Wherever that happens, we rely on recognised safeguards such as standard contractual clauses so the level of protection stays consistent with the law in your own country.
Our site links out to other places, such as carrier tracking, a payment gateway, or our social profiles. We don't control their content or their privacy practices, so it's a good idea to check their own policy before you share anything there.
Businesses change, tools change, and so does the law. We update this policy from time to time, and the "Last updated" date at the top changes with it.
If a change is significant, for example a new purpose for using your data, we will tell you beforehand by email or a notice on the site. In the event of a business transfer, merger or acquisition, your data may pass to the new entity, and that entity stays bound by this policy until you receive a new notice.