Privacy Policy

This policy explains what information Custom Boxez collects when you visit customboxez.com, request a quote or place an order, how we use it, who we share it with and the choices you have. We have written it in plain language because we would rather you read it than skip it.

Who we are

Custom Boxez is the trading name of Custom Boxez Limited. We make custom printed boxes and packaging for businesses across the United States: rigid boxes, mailer boxes, folding cartons, corrugated boxes, product and retail packaging, gift boxes and inserts. Every job is quoted and manufactured to the customer's own dimensions and artwork.

Our office is at 1846 E. Innovation Park Dr. STE 100, Oro Valley, AZ 85755. You can reach us on (209) 444-0744, at sales@customboxez.com for quotes and orders, and at info@customboxez.com for general questions and privacy requests. Custom Boxez is responsible for the personal information described in this policy.

Information we collect

We collect two kinds of information: information you give us directly, and a small amount of technical information that is recorded automatically when you use the website. We do not collect more than we need to quote, make and deliver your packaging and to keep the website running safely.

There is no user account, login, shopping cart or online checkout on customboxez.com. The website does not collect card or bank details. Quotations and payment are handled by our sales team by email or phone.

Information you provide

When you use the quote form at customboxez.com/quote, we ask for the details we need to price and plan your job, together with the details we need to reply to you:

• Project details: a description of your product, the packaging type, dimensions, quantity, material and printing preferences, finishes and any notes.
• Files: an optional artwork file and an optional reference file (PDF, AI, EPS, PNG, JPG, WEBP, SVG or ZIP, up to 15 MB each).
• Contact details: your name, your email address, and optionally your business name and phone number.
• Where you came from: the form records the page address and any query string you arrived from, so we can see which page or campaign led to your inquiry. When you reach us from an ad or campaign link, this can include campaign parameters such as UTM tags and a Google Ads click identifier (gclid).

The quote form also contains a hidden field that ordinary visitors never see or fill in. It exists only to catch automated spam submissions. We do not use a CAPTCHA.

If you phone us or email us, we collect whatever you choose to tell us in that conversation, such as your name, contact details, order requirements, delivery address and correspondence about your job. If you go on to place an order, we also hold the order details, proof approvals, delivery address and records of payment made outside the website.

Artwork and reference files sometimes contain personal information of their own, for example a founder's name or a photograph. We use those files only to prepare your quotation, proof and packaging.

Information collected automatically

Our website is hosted on Vercel, which serves the site through a content delivery network and serverless functions. Like almost every web host, Vercel keeps server logs that record the IP address, browser and device type (user agent), requested page address, referring page and the time of each request. These logs exist so that the site can be kept secure and problems can be diagnosed. They are retained for a limited period set by the hosting provider and we do not use them to build profiles of individual visitors.

Cookies and tracking technologies

The public pages of customboxez.com set no cookies of their own. Google Analytics and Google Ads, loaded through Google Tag Manager when measurement is enabled, set their own cookies as described under Analytics and advertising below. You can browse the site, read our guides and send a quote request whether or not those cookies are allowed.

The one exception is our private content-management interface at customboxez.com/studio, which is used only by our staff to maintain the website. That interface sets authentication cookies so that authorized staff can sign in. Members of the public do not use it and it sets nothing on their devices.

To remember where a visit began, the site stores a small first-party record in your browser's local storage: the first page you landed on, the referring site, any campaign parameters in the address (such as utm or click identifiers) and the time. It stays in your browser for up to 90 days, is not a cookie, is not sent anywhere until you submit a quote request, and is attached to that request so we know which page or campaign it came from. Clearing your browser's site data removes it.

No advertising pixels or remarketing tags are installed on the site today. The site includes Aura, our own packaging assistant, described in the section below. If we add other tools, we will update this section before they go live.

Analytics and advertising attribution

The site is instrumented through Google Tag Manager. When enabled, it loads Google Analytics 4, which uses cookies to measure traffic sources, pages visited and site behavior in aggregate, and Google Ads conversion measurement, which records that an inquiry was made (with a reference number and the packaging category, never your name, email or phone) so that we can understand which advertising brought customers to us. Google's use of this data is governed by Google's privacy policy. Visitors in the European Economic Area, the United Kingdom and Switzerland are served with these tags disabled unless consent is given.

You can opt out of advertising cookies on this site at any time under Your choices at the end of this policy (which stores a preference in your browser), through Google's Ads Settings, or by blocking cookies in your browser. Separately from Google, our own customer-service system records the landing page, referring site and campaign parameters described above, attached to a quote request or Aura conversation.

Aura, our packaging assistant

Aura is a chat assistant on customboxez.com that answers questions about box styles, materials, finishes, minimum order, production time and the quotation process. It is built on a large language model provided by Anthropic (Claude). When you send Aura a message, the text of your conversation is sent from our server to Anthropic's API so that a reply can be generated, together with our instructions and the public content of this website. We do not send your name, email address or any other account information with it unless you type it into the conversation.

Aura conversations are stored in our customer-service system (Aura Desk, hosted on Supabase) so that a member of our team can join the same conversation when you ask for a person, and so that a quote request you start in Aura is linked to what you discussed. The record holds the messages, the page you were on, the time, a random visitor identifier and the campaign attribution described above; it holds your name, email or phone only if you type them or leave them for a follow-up. Your browser also keeps the thread in session storage until the tab is closed. If you ask Aura to prepare a quote, the details you gave it are carried into the quote form for you to review before you submit them.

Conversation records are kept for as long as we need them to answer your inquiry and, if you become a customer, to support your orders; records that did not lead to an inquiry are reviewed and deleted periodically. You can ask us to delete a conversation using the contact details below.

Aura does not ask for and must not be given payment details, passwords or other sensitive information. Anthropic's handling of API inputs is governed by its own terms; see the review note under Contact if you would like to know more about how long API inputs are retained by Anthropic before you use the assistant.

We record simple usage events for Aura, such as that it was opened, that a question was asked, that a quote link was clicked or that a visitor asked to speak to the team. These events do not contain the text of any message.

How we use information

We use the information described above to:

• Prepare and send your quotation, and answer questions about it.
• Produce proofs, manufacture your packaging and deliver it to the address you give us.
• Communicate with you about your inquiry or order by email or phone, including proof approvals, production updates and delivery arrangements.
• Invoice you and keep the accounting and tax records we are legally required to keep.
• Understand which pages and campaigns generate inquiries so we can improve the website and our marketing.
• Keep the website secure, detect spam and abuse, and diagnose technical problems.
• Comply with the law and respond to lawful requests from authorities.

We do not use your information to make automated decisions that have a legal or similarly significant effect on you.

Service providers and processors

We rely on a small number of service providers to run the website and the business. Each of them handles your information only to provide its service to us and is bound by its own contractual and legal obligations:

• Vercel hosts the website and processes the server logs described above.
• Supabase hosts Aura Desk, our customer-service and sales database, where quote requests, Aura conversations, contact details, notes and the status of your inquiry are stored so that our team can respond and, if you order, manage the job.
• Resend delivers our transactional email, such as the acknowledgement of your quote request.
• Google (Tag Manager, Analytics 4 and Ads) processes the measurement data described above.
• Sanity provides our cloud-hosted content system. Artwork or reference files you upload with a quote request are stored there as unlisted assets so that our sales team can prepare your quotation; if our customer-service database is unavailable, the quote request itself is stored there temporarily.
• Anthropic provides the language model behind Aura and processes the text of Aura conversations to generate replies, as described in the Aura section.
• Our email provider processes the messages we exchange with you.
• Shipping carriers receive your name and delivery address so they can deliver your order.
• Payment processors handle your payment only at the point you pay us outside the website. The website itself never sees your card or bank details.

Some of these providers operate infrastructure in more than one location. When information is stored or processed outside the state or country where you live, it remains covered by this policy.

Order fulfillment and shipping

To deliver your order we pass your name, delivery address and, where the carrier needs it, a contact phone number to the shipping carrier handling the consignment. Carriers use that information to deliver the parcel and to contact the recipient about the delivery if necessary. We do not share your artwork, order value or other business details with carriers.

When we share information

We do not sell personal information, and we do not share it with third parties for their own marketing. We share information only:

• With the service providers listed above, to the extent needed to provide their services.
• With professional advisers such as accountants, lawyers and insurers, where they need it to advise us.
• When the law requires it, for example in response to a subpoena, court order or lawful request from a regulator or law-enforcement agency.
• To protect the rights, property or safety of Custom Boxez, our customers or others, including to investigate fraud or abuse of the website.
• If Custom Boxez is sold, merged or reorganized, in which case customer records may transfer to the new owner under the same protections described in this policy.

Data retention

We keep quote requests and the files attached to them for as long as we need them to quote your job and, if you order, to manufacture and support it. Order records, invoices and correspondence are kept for as long as the law requires us to retain business and tax records, and for as long as they may be needed to resolve any dispute about an order.

Server logs are retained by our hosting provider for a limited operational period and then discarded. When information is no longer needed, we delete it or make it anonymous.

Data security

The website is served over HTTPS, so information you send through the quote form is encrypted in transit. Access to quote requests, uploaded files and order records is limited to staff who need them to do their jobs, and the content system that holds them requires authentication. Our hosting and content providers maintain their own physical and technical safeguards for the systems they run.

No method of transmission over the internet or of electronic storage is completely secure, so we cannot promise absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities where the law requires it.

Your choices and marketing communications

We contact you about your quotation or order because you asked us to. If we send you marketing emails about our packaging, you can stop them at any time by using the unsubscribe link in the email or by emailing info@customboxez.com. We will still send messages that are necessary to handle a quotation or order you have asked for.

You do not have to give us any information to browse the website. The quote form asks only for the details we need to price your job and reply to you; the business name and phone fields are optional.

Your privacy rights

Based on where you live, you may have rights under state or other privacy laws to ask what personal information we hold about you, to receive a copy of it, to have inaccurate information corrected, or to have it deleted. Residents of certain US states have these rights under their state's privacy law, and some laws also give you the right not to be treated differently for exercising them.

To make a request, email info@customboxez.com or write to us at the address below with enough detail for us to identify you and the information concerned. We will need to verify that the request comes from you, or from someone you have authorized to act for you, before we act on it. We will respond within the time the applicable law allows. If we cannot meet a request, for example because we must keep a record for tax purposes, we will explain why.

Children's privacy

Custom Boxez sells to businesses. The website is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please email info@customboxez.com and we will delete it.

Links to other websites

Our guides and pages sometimes link to other websites, such as material suppliers or industry references. Those sites have their own privacy practices, which we do not control and are not responsible for. This policy applies only to information collected through customboxez.com and through our direct dealings with you.

Changes to this policy

We will update this policy when our practices change, for example if we introduce analytics, add a new service provider or start collecting a new type of information. The effective date at the bottom of this page shows when the current version took effect. Where a change materially affects how we use information you have already given us, we will take reasonable steps to bring it to your attention.

Contact

For any question about this policy, or to make a privacy request, contact us at:

• Custom Boxez Limited, 1846 E. Innovation Park Dr. STE 100, Oro Valley, AZ 85755
• Email: info@customboxez.com (privacy and general questions) or sales@customboxez.com (quotes and orders)
• Phone: (209) 444-0744

Effective date

Effective date: September 10, 2026.

Last updated: September 10, 2026.