Privacy Policy

Boxis Privacy Policy

At Boxis, protecting Personal Information is a key concern for us. This policy describes how we collect, use, disclose and store your Personal Information.

Effective Date: 04-Dec-2025 | Last Updated: 04-Dec-2025

Introduction

As part of its activities, Boxis and companies within the Boxis group LLC may be required to collect, use, disclose and store Personal Information about you ("Concerned Person", "you", "your"). If you are a Boxis customer or prospective customer (hereinafter referred to as "Customer(s)"), or if you are an officer, employee, or employee of the latter (hereinafter referred to as "Agent(s)"), the purpose of this Privacy Policy is to describe the conditions under which Boxis manages your Personal Information, whether when using its products and services, its website, or contacts with its support service.

This policy does not apply to the Personal Information that Clients entrust to Boxis in the context of using its services, including those hosted by Clients on infrastructure provided to them by Boxis. This information is only used and stored by Boxis as a service provider, on instruction from the Client, under the conditions set out in the Personal Information Protection Agreement.

What is personal information?

Personal Information is any information about an individual that can be identified, directly or indirectly, in accordance with the GDPR and Swiss data protection laws (FADP). This can be your surname, first name, postal or email address, but also an order or invoice number, or an IP address.

Data Collection

Why does Boxis collect my Personal Information?

Boxis collects and uses the Personal Information of its Customers for the purposes of the activities described below. Personal Information is collected directly from you when you provide it to Boxis, or automatically on our websites through analytical tools or digital markers.

Contract Management

Processing orders, making services available, payment processing, and delivery of products. We collect identification information, login data, payment data, and order history.

Running Boxis Services

Provision of services and maintenance. We collect customer identification data, communications, service characteristics, IP addresses, configurations, and usage data.

Customer Relationship Management

Managing exchanges with Customer Service to respond to requests for information and complaints. We collect identification data, service information, and communication history.

Business Prospecting

Informing customers about Boxis activities, new products and services, promotions, and events. We only use this data after obtaining your express, free and informed consent.

Fraud Prevention

Ensuring the security of payments, detecting and preventing fraud. We collect identification data, payment data, connection data, and location data.

Payment Facilitation

Storing payment method information for services with automatic renewal or when you choose to save your payment details for future transactions.

Service Improvement

Developing statistical reports to evaluate overall satisfaction related to Boxis products and services, and improving customer relationship management.

Legal Compliance

Complying with tax and accounting obligations, processing requests to exercise rights, responding to requests from courts or administrative authorities.

Data Storage

Where is the Personal Information collected by Boxis hosted?

Swiss Data Centers

The Personal Information covered by this policy is hosted in Switzerland in data centers owned and operated by Boxis. Your data remains in Switzerland and is never shared with third parties without your explicit consent.

Remote Access

Due to Boxis's international dimension, companies within the Boxis group LLC may participate in the use of your Personal Information. When disclosure occurs, Boxis implements technical and administrative measures to protect Personal Information in accordance with applicable laws.

Security Measures

Personal Information Security Measures

The protection of Personal Information is fully integrated into Boxis's information security management system.

Industrial Approach

Deployment of an industrial, large-scale security approach.

Certifications

Demonstration of security via certifications, internal control and external audit.

Employee Training

Authorized employees are subject to confidentiality obligations and receive appropriate training.

Continuous Improvement

Security assessment and implementation of continuous improvement processes.

Who are the recipients of the Personal Information collected?

The Personal Information collected is used by authorized personnel within Boxis. We ensure that only authorized persons can access personal information and only when necessary for the execution of their missions.

We may also be required to communicate your Personal Information to:

  • Companies within the Boxis group LLC, in the context of the execution of the uses mentioned in this policy.
  • Third-party service providers such as security service providers, network providers, application and internal tools providers, payment service providers, email solution providers, satisfaction surveys.
  • Boxis ensures that its service providers commit to respecting applicable laws regarding Personal Information protection and implement appropriate Personal Information protection measures.
Cookie Policy

What are cookies?

This Cookie Policy explains what cookies are and how we use them, the types of cookies we use, the information we collect using cookies and how that information is used, and how to manage the cookie settings.

What are cookies?

Cookies are small text files that are used to store small pieces of information. They are stored on your device when the website is loaded on your browser. These cookies help us make the website function properly, make it more secure, provide better user experience, and understand how the website performs and to analyze what works and where it needs improvement.

How do we use cookies?

As most of the online services, our website uses first-party and third-party cookies for several purposes. First-party cookies are mostly necessary for the website to function the right way, and they do not collect any of your personally identifiable data.

The third-party cookies used on our website are mainly for understanding how the website performs, how you interact with our website, keeping our services secure, providing advertisements that are relevant to you, and all in all providing you with a better and improved user experience and help speed up your future interactions with our website.

Manage cookie preferences

You can change your cookie preferences any time by clicking the button above. This will let you revisit the cookie consent banner and change your preferences or withdraw your consent right away.

In addition to this, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers:

If you are using any other web browser, please visit your browser's official support documents.

Your Rights

Rights of data subjects

In accordance with applicable laws, data subjects have the right to access their Personal Information, as well as the right to rectify it and request its deletion and portability.

Right of Access

You have the right to access your Personal Information and obtain a copy of the data we hold about you.

Right to Rectification

You have the right to request correction of inaccurate or incomplete Personal Information.

Right to Erasure

You have the right to request deletion of your Personal Information under certain circumstances.

Right to Portability

You have the right to receive your Personal Information in a structured, commonly used format.

How to exercise your rights

These rights may be exercised by mail to the following address:

Privacy Officer, Boxis
Switzerland

They can also be exercised using the email address privacy@boxis.net. You may be asked to provide proof of identity to confirm your identity. This part will be deleted immediately after your request is processed.

In compliance with applicable laws, each request must be accompanied by information that can demonstrate the identity of the requestor. They shall be replied to as soon as possible and in any event within 30 days of receipt.

Duration of personal data storage

We process and store personal data only for the time necessary to achieve the purpose of storage or to the extent required by law. As a general rule, the purpose of processing is achieved when the contract is terminated.

  • You can modify and delete the data stored in our services yourself. After termination of the contract, we will delete your data stored in the corresponding services after the legal retention period has expired.
  • Backup copies in our systems are automatically deleted after the period specified in our general terms and conditions. Contractual data is deleted after the statutory retention period has expired.
  • The data you enter during the order process will be kept for a maximum period of six months.

Questions about our Privacy Policy?

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer.

Boxis will investigate any complaints about your Personal Information and, if warranted, take appropriate action to correct the situation. This complaint shall be answered as soon as possible and, where possible, within 30 days of receipt.