CreventBOX Privacy Policy

Effective Date: March 1, 2023

CreventBOX and their affiliates (collectively, “CreventBox,” “we,” “our,” “us”) value your privacy. In this Privacy Policy, we describe how we collect, use, and process the personal information we obtain about people who use our websites or mobile apps, browse or purchase our products, apply to become franchisees, or who otherwise interact with us online or offline (collectively, our “Services”). This Privacy Policy does not apply to any websites or mobile apps that are created, run, or controlled by independently owned or operated CreventBox franchisees or any other third party.

This privacy statement explains how we gather, use, and disclose personal data. You accept this Privacy Policy and our Terms and Conditions by downloading, using, creating an account on, or registering for our Services, or by otherwise providing your personal information to us.

PERSONAL INFORMATION WE COLLECT ABOUT YOU

We may collect personal information directly from users of our Services. You can use some parts of our Services without registering or directly submitting your personal information to us, but we may automatically collect certain information about your use of our Services through cookies and other tracking technologies.

Information We Collect Directly From You. To use some features of our Services (for example, to sign up for promotional emails, enter contests, make a purchase, or request a franchise kit from us), you must register with us or otherwise provide us with your personal information. We also may collect personal information that you enter through our Services or provide to us in other ways, such as through email or text message. The types of personal information that we collect from you will depend on your interactions with us and how you use our Services, but may include:

• personal details, such as full name, mailing address, email address, phone number, and other contact information;
• purchase transaction information, such as information about the products you buy, billing address, method of payment, and payment details;
• location data; and
• other personal information you choose to provide to us.

Information We Collect Automatically. We, and the vendors we work with, may also collect other information about your use of our Services using automated tools. For example, cookies and other passive information collection technologies enable us to compile aggregate statistics concerning use of our Services, analyze trends, enhance the security of our Services, deliver content and advertisements, and otherwise administer and improve our Services. This information may include your browser type, language preference, operating system, device identifier, device type, access time, Internet Protocol (IP) address, the URLs of websites you visited before and after visiting our websites, the web search that landed you on our websites, the length of your visits to our websites, and the links you click and pages you visit within our websites. You can set your browser not to accept cookies, to remove cookies, or to notify you when you are sent a cookie, giving you the opportunity to decide whether or not to accept it. However, please note that if you disable the use of cookies on your computer, some functionality of our websites will not work. Please see our Cookie Policy for more information.

When you visit different websites or use online services, you might be able to transmit a “Do Not Track” signal using the settings on your web browser. Our websites, like many others, are not made to respond to “Do Not Track” signals sent by browsers.

We may use certain third-party web analytics services to help us understand and analyze how visitors use our Services and to serve advertisements on our behalf across the Internet. We have implemented Google Analytics Advertising features such as dynamic remarketing, interest-based advertising, audience targeting, behavioral reporting, demographics and interests reporting, user segment analysis, device reporting, display advertising, and video ads reporting. We may use cookies and other identifiers to deliver advertisements, create a profile of you, measure your interests, personalize content, and detect your demographics, location, or device. For more information on how Google Analytics uses data, visit www.google.com/policies/privacy/partners/. To opt out of Google Analytics cookies, visit www.google.com/settings/ads/ and tools.google.com/dlpage/gaoptout/>.

To better understand and analyze how users use our services and to make those services better, we use the service provider Hotjar. Users of our websites may give Hotjar the following kinds of information:

• device IP Address
• device screen size
• device type (unique device identifiers)
• browser information, geographic location (country only)
• preferred language used to display our website

Hotjar stores the above information in a pseudonymized format. Hotjar does not use this information to identify individual users, or match or link the information with other information about users. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For more information regarding Hotjar’s collection and use of information, please visit Hotjar’s privacy policy here.

Information We Collect About Your Location. Your geolocation information may be accessed and collected by our Services in order to improve the services we offer, such as informing you about stores nearby. The location of the device you are using may also be used by us to deliver more relevant advertising and to better understand how our Services are being used. For most mobile devices and computer systems, you are able to withdraw your permission for us to collect this information through your device or web-browser settings.

We Collect From Others. We might obtain personal data from our affiliated businesses, franchisees, service providers, and third parties about our clients, potential franchisees, and current franchisees. We might also keep track of any remarks or evaluations you post about us on other websites. You are subject to the terms of use and privacy policies of the third party to which you provide information. CreventBox may combine information about you that we already have with information we obtain from third parties. If you submit someone else’s personal information to us, you represent that you have been authorized to provide this information to us.

HOW WE USE YOUR INFORMATION

We may use your personal information to:

• communicate with you, including to respond to your questions and requests, provide you with documentation or communications you have requested, send you notices about our Services, offer customer support, or contact you for information or after-sales support;
• process your orders or purchases;
• market and advertise our products, including to send you news, updates, special offers and promotions, and targeted advertising;
• personalize our content, including to make recommendations to you about our Services, to tailor the information we send or show you, and to offer location-based customizations and personalization based on your purchase history or past interactions with our Services;
• monitor and analyze trends, usage, and the activities of users of our Services to better understand how our users access and use our Services in order to improve them, respond to user preferences, and for other research purposes;
• improve our Services and notify you about important updates;
• perform business analyses or for other business purposes, such as evaluating transactions involving our Services;
• facilitate, manage, personalize, and improve our partnership and franchisee relationships;
• identify, prevent, investigate, and take other actions with respect to suspected or actual fraud or illegal activity or other activity that violates our policies;
• ensure the security and integrity of our personal information processing;
• protect our rights, property, or safety and that of our users and our confidential and proprietary information;
• comply with applicable laws, rules, regulations, and legal processes as well as our company policies, including to respond to claims asserted against us and to enforce or administer terms and agreements; and
• achieve other purposes, with your consent (when required).

HOW WE DISCLOSE YOUR INFORMATION

We reserve the right to share your personal information within our organization, with our affiliates, with our franchisees and business partners, and with our vendors. Your personal information might also be disclosed to:

• provide you with goods or services, such as when we work with an app developer or payment processor;
• more effectively address your questions;
• promoting or marketing our goods and services;
• conduct marketing research for needs related to sales, support, and services;
• safeguarding one’s rights, property, health, life, security, and safety;
• respond to a court order, subpoena, or other legal process, which may include disclosing personal information to the opposing party in a lawsuit, a court, a legal authority, our attorneys, or other advisors;
• negotiate or complete any proposed or actual merger, purchase, sale, or any other type of acquisition or other transaction, including a transfer of all or a portion of our business to another organization;
• disclose personal information with your consent or at your direction; and
• achieve any other purpose consistent with our statements in this Privacy Policy or otherwise allowed by applicable law.

We may disclose your personal information to comply with applicable law, such as in response to requests from law enforcement agencies, regulators, other public authorities, courts, and third-party litigants in connection with legal proceedings or investigations.

All of the other users may be able to access and search any information, including personal information, that you post in any public areas of our Services, such as reviews, comments, and photos. The public may also have access to reviews. 

LINKS TO OTHER WEBSITES

Our Services may include links to other websites that we do not own or operate. This Privacy Policy does not apply to those websites, which may have their own privacy policies that you should review to understand how they may collect, use, or disclose your personal information. We are not responsible for the content or privacy practices of any linked websites that are not under our control.

SOCIAL FEATURES

Certain features of our Services may permit you to interact with social media networks operated by unaffiliated parties, for example, if you “like” or “follow” us on those platforms (“Social Features”). If you choose to “like” or share content or post information using Social Features, that information may be publicly displayed, and the party operating the social media platform may receive information about you and your use of our Services. Similarly, if you interact with us through Social Features, we may have access to information about you from the social media platform. In addition, we may track when you like us, follow us, or share our content through Facebook, Twitter, or other social media platforms.

Please note that if you mention CreventBox, or comment about or in response to us, in your post on a social media platform, that platform may allow us to publish your post on our Services or public social media pages or otherwise use your post about us. You should review the terms, policies, and settings of these platforms to learn more about their data practices and adjust your settings accordingly.

SECURITY OF YOUR PERSONAL INFORMATION

We maintain appropriate safeguards designed to protect personal information from loss, theft, misuse, and unauthorized access, disclosure, alteration, and destruction. Nevertheless, no data security measures can guarantee 100% security. We encourage you to safeguard your passwords, ID numbers, and other information you use to access our Services.

OUR RETENTION OF YOUR PERSONAL INFORMATION

We retain personal information for as long as necessary or permitted for the purposes described in this Policy or otherwise authorized by law. This generally means holding the information for as long as one of the following apply:

• your personal information is reasonably necessary to manage our operations, to manage your relationship with us, or to satisfy another purpose for which we collected the information;
• your personal information is reasonably necessary to carry out a disclosed purpose that is reasonably compatible with the context in which the personal information was collected;
• the personal information is reasonably necessary to protect or defend our rights or property (which will generally relate to applicable laws that limit actions in a particular case); or
• we are otherwise required or permitted to keep your personal information by applicable laws or regulations.

Where personal information is used for more than one purpose, we will retain it until the purpose with the latest period expires. For more information about our retention practices, please contact us using the contact details below.

YOUR CHOICES

Updating Your Information. If you wish to update the personal information you have provided to us, you may do so by logging in to your account or by contacting us at Contact Us. Please note that outdated copies of information that you have updated may remain viewable in cached and archived pages for a period of time, and we may maintain records in our systems of this information as well.

Text Messages. You have the choice to opt-in to receiving text messages and alerts on the mobile phone number(s) you disclose to us. Once you opt-in, we may send you text messages (i) regarding your account and your orders; (ii) about our products and promotions (including advertisements, sales, and special offers); (iii) to investigate or prevent fraud; and (iv) to alert you in the event of an issue with any of your purchases. You do not have to opt-in to text messages and alerts to use and enjoy our website or products. If you opt-in, standard text messaging charges may apply. You may choose to opt-out of our text messages and alerts at any time by sending us a text message from your mobile phone with the word STOP, STOP ALL, END, QUIT, CANCEL or UNSUBSCRIBE, and we will unsubscribe you from text communications.

PRIVACY OF CHILDREN

Children are not the target audience for our Services, and we do not knowingly collect personal data from them. If we discover that we have gathered personal information about a child, we will take the appropriate legal steps to have it removed.

Right to Know. You have the right to know:

1. The categories of personal information we have collected about you, including:
   • The categories of sources from which the personal information was collected
   • Our business or commercial purposes for collecting (or selling or sharing—if applicable) your personal information
   • The categories of recipients to which we disclose personal information
   • The categories of personal information about you that we sold, and for each category identified, the categories of third parties to which we sold that particular category of personal information; and
   • The categories of personal information that we disclosed for a business purpose, and for each category identified, the categories of recipients to which we disclosed that particular category of personal information.
2. The specific pieces of personal information we have collected about you.

Deletion. You have the right to request that we delete personal information that we collected from you, subject to certain exceptions. In response, we will delete, and instruct any applicable service providers or contractors to delete, your personal information, unless an exception applies. Where we use deidentification to satisfy a deletion request, we commit to maintaining and using the information in deidentified form and will not attempt to reidentify the information.

Correction. If you believe that personal information we maintain about you is inaccurate, you may submit a request for us to correct that information. Upon receipt of a verifiable request to correct inaccurate personal information, we will use commercially reasonable efforts to correct the information as you direct.

Right to Limit Use and Disclosure of Sensitive Personal Information. You may direct us to limit the use and disclosure of your sensitive personal information to uses/disclosures that are reasonably necessary to provide our goods and services, or as needed: to ensure security and integrity; to prevent fraud or illegal activity; for physical safety; for short-term, transient use, including for non-personalized advertising; to perform services on behalf of the business; and to verify or maintain the quality or safety of a service or device owned, manufactured, manufactured for, or controlled by us, and to improve, upgrade, or enhance such services or devices.

Non-Discrimination Rights. You have the right not to be discriminated against for exercising any of your CCPA rights. This means that, consistent with California law, we will not deny providing our products or services to you, charge you different prices or provide a different level or quality of products or services to you unless those differences are related to the value of your personal information.

California’s Shine the Light Law. California residents may ask CreventBox to provide them with (i) a list of certain categories of personal information that we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, and (ii) the identity of those third parties. California residents may make one such request per calendar year.

To make this request, you may contact CreventBox at info@creventbox.com or send a letter to 66-34 53rd Dr, Queens, NY 11378, USA In your request, please state that you are a California resident making a request under California’s Shine the Light Law and provide a current California mailing address for our response. Please allow up to thirty (30) days for a response. CreventBox reserves its right not to respond to such requests submitted to addresses other than those specified in this paragraph.

Please note that rights under the CCPA and California’s Shine the Light law must be exercised separately.

ADDITIONAL INFORMATION FOR VIRGINIA CONSUMERS

As a supplement to the information provided throughout this Privacy Policy, we provide the following information to Virginia consumers, including a description of how to exercise their rights under the under the Virginia Consumer Data Protection Act (“VCDPA”). Terms defined in the VCDPA that are used in this section shall have the same meaning as in the VCDPA.

CreventBox is the data controller for customer personal information collected through our Services. Please see the other sections of this Privacy Policy for information about the categories of personal information we process, our purposes for processing personal information, categories of personal information we disclose and who we disclose it to.

Additional Information about Certain Data Uses.

We may process your personal information for targeted advertising. To opt out of the use of your personal information for targeted advertising, please go to the Your Privacy Choices link in the cookie banner or the footer of the website where you want to opt out.

Virginia Privacy Rights

If you are a Virginia consumer, you have the right to submit certain requests relating to your personal information as described below. To exercise your rights, please submit a request through our webform or, to opt out of targeted advertising, go to the Your Privacy Choices link in the cookie banner or the footer of the website where you want to opt out. Please note that we will need to authenticate your identity before your request can be processed. For authentication, you will be asked to log into your account or to provide 2-3 pieces of personal information that we will match against our records.

Right to Access and Data Portability. You have the right to confirm whether we are processing your personal information, to access your personal information, and to obtain a copy of personal information you provided to us in a portable format.

Right to Correct. You have the right to request that we correct inaccuracies in your personal information, taking into account the nature of the personal information and our purposes for processing it.

Right to Delete. You have the right to request that we delete your personal information.

Right to Opt Out. Under the VCDPA, you have the right to opt out of the following uses of your personal information: (a) targeted advertising; (b) the sale of personal information; and (c) profiling in furtherance of decisions that produce legal or similarly significant effects. We do not use your personal information in ways that qualify as sales or profiling under the VCDPA. To opt out of targeted advertising, please submit a request as outlined above.

Please note that if you make a privacy rights request, we will retain a record of your request for recordkeeping purposes.

PRIVACY INFORMATION FOR NEVADA RESIDENTS

Nevada residents may opt-out of the “sale” of “covered information” to third parties, including but not limited to name, address, social security number, telephone number, email address, and other information through which a person may be contacted. Our uses of your personal information are not sales under Nevada law.  If you have any questions or if you would like to receive notice by email in the event we should engage in “sales” of personal information under Nevada law in the future, please contact us using the contact information provided below.

INTERNATIONAL USERS

CreventBox is based in the United States. If you are using our Services outside the United States, please be aware that personal information we obtain about you may be transferred to and processed in the United States or other jurisdictions outside your own. Your personal information may be accessible by public authorities where it is processed. By using our Services and providing your personal information, you acknowledge that your personal information may be transferred to and processed in jurisdictions other than your own. Please be aware that the data protection laws and regulations that may apply to your personal information transferred to the United States or other countries may be different from the laws in your country of residence.

NOTICE TO EUROPEAN ECONOMIC AREA AND UNITED KINGDOM RESIDENTS

As a supplement to the information provided throughout this Privacy Policy, we provide the following information as a notice to residents of the European Economic Area (“EEA”) of their rights under the European Union’s General Data Protection Regulation and residents of the United Kingdom (“UK”) of their rights under the United Kingdom’s General Data Protection Regulation.

CreventBox is the data controller for customer personal information collected through our Services. You may be required to provide certain personal information, such as your contact information and payment details, in order to use our Services and place an order for our products.

Legal Bases for Our Personal Information Processing. Your personal information is processed under the following legal bases:

• The processing is necessary for us to provide you with the services you request or to respond to your questions.
• We have a legal obligation to process your personal information, such as compliance with applicable tax laws or other government regulations or compliance with a court order or binding law enforcement request.
• We have a legitimate interest in processing your personal information and our reasons for using your personal information outweigh the potential prejudice to your data protection rights. In particular, we have a legitimate interest in the following instances:
  • To analyze and improve the safety and security of our Services, including by implementing and enhancing security measures and safeguards and protecting against fraud, spam, and other abuses;
  • To maintain and improve our Services;
  • To operate and promote our Services, to advertise and provide you with information and communications about our Services that are tailored to, and in accordance with, your preferences; and
  • To protect our legal rights, prevent misuse of our Services, perform on a contract, or comply with other legal obligations.
• You have consented to our processing of your personal information. When you consent, you may change your mind and withdraw your consent at any time by emailing us at info@creventbox.com.

Your Privacy Rights. You may ask us to take the following actions with respect to your personal information:

• provide you with information about our processing of your personal information and access to your personal information;
• update or correct inaccuracies in your personal information;
• delete your personal information;
• transfer a copy of your personal information to you or a third party of your choice; and
• stop or restrict our processing of your personal information.

You may submit these requests by emailing us at info@creventbox.com. We may require specific information from you to help us verify your identity prior to processing your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to any legal restrictions on disclosing this information.

Submitting a Complaint. If you would like to submit a complaint about our use of your personal information or our response to your request regarding your personal information, you may contact us at info@creventbox.com or submit a complaint directly to the data protection authority in your jurisdiction. If you reside in the EEA, you can find information about your data protection authority here. If you reside in the UK, you may file complaints with the Information Commissioner’s Office here.

Transfers of Your Personal Information. When you directly provide your personal information through our Services, you acknowledge that your personal information is being provided by you to a company based in the United States. The laws that apply to personal information protection in the United States differ from those applicable in the EEA and the UK. If it is necessary for us to transfer personal information out of the EEA and the UK, we do so by using suitable data transfer safeguards, such as the standard contractual clauses approved by the European Commission, which impose data protection obligations on parties to the transfer. You may obtain additional information about our data transfer mechanisms by contacting us at info@creventbox.com.

NOTICE TO RESIDENTS OF CANADA

Your Privacy Rights. You have the following rights with respect to your personal information:

• access to your personal information;
• verify or correct inaccuracies in your personal information;
• delete your personal information; and
• where you have provided your consent to the collection, use, transfer, or other processing of your personal information, withdraw your consent under certain circumstances.

You may submit these requests by email to us at info@creventbox.com. We may require specific information from you to help us verify your identity prior to processing your request. Applicable law may require or permit us to decline your request. If we decline your request, we will tell you why, subject to any legal or regulatory restrictions on disclosing this information. Please note, if you withdraw your consent, we may not be able to provide you with a particular product or service. We will explain any impact to you to help you with your decision.

CHANGES TO THIS POLICY

We may update or modify this Privacy Policy from time to time at our discretion. We will indicate changes to this Privacy Policy by updating the “Effective Date” at the beginning of the Privacy Policy. Please review this Privacy Policy periodically and especially before you provide any personal information to us. Your continued use of our Services after any update will constitute your acceptance of our changes.

CONTACT US

If you have questions about this Privacy Policy or CreventBox privacy practices, please contact us at info@creventbox.com or by mail at 66-34 53rd Dr, Queens, NY 11378, USA