Privacy Policy

# Vseebox Privacy Policy  
**1. Introduction**  
Vseebox ("we," "us," or "our") respects your privacy. This policy explains how we collect, use, disclose, and protect personal information from users ("you") in the United States and Canada when you:  
- Visit our website ([www.vseebox.co](http://www.vseebox.co))  
- Purchase Vseebox products/services  
- Contact customer support  
- Subscribe to marketing communications  

**2. Information We Collect**  
* **Personal Identifiers:** Name, email, shipping/billing address, phone number.  
* **Payment Information:** Credit card details (processed securely by PCI-compliant gateways; *we do not store full card numbers*).  
* **Commercial Data:** Purchase history, product preferences, warranty registrations.  
* **Digital Footprints:** IP address, device ID, browser type, cookies (see Section 6), browsing activity.  
* **Communications:** Support tickets, chat logs, survey responses sent to **support@vssebox.co**.  

**3. How We Use Your Information**  
| Purpose                         | Legal Basis                     |  
|---------------------------------|--------------------------------|  
| Process orders & deliver products | Contractual necessity          |  
| Provide customer support        | Legitimate interest            |  
| Send transactional emails (order confirmations, shipping updates) | Legal obligation/Contract |  
| Personalize website experience  | Consent (where required)       |  
| Send marketing emails (opt-in only) | Consent                      |  
| Prevent fraud & enhance security | Legitimate interest            |  
| Comply with legal obligations   | Legal requirement              |  

**4. How We Share Information**  
We *never sell* your personal data. We share it only with:  
* **Service Providers:** Payment processors (Stripe, PayPal), shipping carriers (FedEx, UPS), cloud hosting (AWS), email platforms.  
* **Legal Compliance:** If required by law (e.g., court order, tax audit).  
* **Business Transfers:** During mergers/acquisitions (you will be notified).  

**5. Your Privacy Rights (US & Canada)**  
Depending on your residency, you may:  
* **Access/Know:** Request details of personal data we hold.  
* **Delete:** Ask us to delete your data (exceptions apply for legal/compliance).  
* **Correct:** Update inaccurate information.  
* **Opt-Out of Marketing:** Unsubscribe via any marketing email or email **support@vssebox.co**.  
* **Limit Use/Disclosure (CCPA/CPRA):** Opt-out of "sale" (we do not sell) or sharing for cross-context behavioral advertising.  
* **Withdraw Consent:** Where processing relies on consent.  

**To exercise these rights**, email **support@vssebox.co** with "Privacy Request" in the subject line. We’ll verify your identity before processing.  

**6. Cookies & Tracking Technologies**  
We use:  
* **Essential Cookies:** For site functionality (e.g., shopping cart).  
* **Analytics Cookies:** (e.g., Google Analytics) to understand site traffic.  
* **Advertising Cookies:** (Opt-in only) for personalized ads via platforms like Meta/Google.  

Manage preferences via our **Cookie Consent Banner** or browser settings.  

**7. Data Retention**  
We retain your information:  
* As long as needed for the purposes outlined (e.g., order history for tax compliance).  
* Until you request deletion (subject to legal limits).  
* Marketing data until you unsubscribe.  

**8. International Data Transfers**  
Data may be transferred to/service providers in the US or other countries. We use Standard Contractual Clauses (SCCs) and adequacy decisions to ensure protection.  

**9. Children’s Privacy**  
Our services are **not directed at children under 13 (US) or 16 (Canada)**. We do not knowingly collect their data. Contact us if you believe a child has provided information.  

**10. Security**  
We implement technical (SSL encryption, firewalls) and organizational measures to protect your data. No system is 100% secure—we promptly investigate breaches per legal requirements.  

**11. Changes to This Policy**  
We’ll notify you of material changes via email or website notice. The "Last Updated" date reflects the latest version.  

**12. Contact Us**  
For privacy questions, rights requests, or complaints:  
> **Email:** support@vssebox.co  
> **Subject Line:** "Privacy Request"  
> **Response Time:** Within 30 days (as required by CCPA/CPRA/PIPEDA).  

You may also lodge complaints with your local data protection authority.  

---

**Key North American Compliance Highlights:**  
🔹 **CCPA/CPRA (California):** Explicit "Do Not Sell/Share My Info" rights, verifiable deletion requests, disclosure of data categories.  
🔹 **PIPEDA (Canada):** Emphasized consent, data minimization, and accountability for cross-border transfers.  
🔹 **COPPA Compliance:** Strict prohibition on collecting data from children <13.  
🔹 **Opt-Out Flexibility:** Clear unsubscribe mechanisms for marketing.  
🔹 **Security & Breach Protocols:** Aligned with state/provincial breach notification laws.  

> ⚠️ **Next Steps:**  
> 1. Replace `[www.vseebox.com]` with your actual domain.  
> 2. Confirm your payment processor/carrier names.  
> 3. Implement a cookie consent manager (e.g., OneTrust, Cookiebot).  
> 4. Create a dedicated intake process for privacy requests sent to **support@vssebox.co**.