Privacy Policy

Privacy Policy — iBox.travel

At iBox.travel, your privacy is our priority. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, make a purchase, or interact with us through digital means.

  1. Information We Collect

We may collect the following types of personal and usage data:

Personal Information:
• Full name
• Email address
• Shipping and billing address
• Phone number
• Payment information (processed securely via third-party services such as Stripe, PayU, or PayPal)
• Account login details (if you create an account)

Technical and Usage Information:
• Device information (IP address, operating system, browser type)
• Location data (based on IP)
• Referring URL and pages visited
• Cookies and similar tracking technologies (see Section 6)

  1. How We Use Your Information

We use your personal information for the following lawful purposes:
• To process and fulfill orders
• To provide customer service and support
• To personalize your user experience
• To send order confirmations, shipping updates, or other transaction-related messages
• To send marketing communications if you’ve opted in (with the option to opt out at any time)
• To analyze and improve the website’s performance and functionality
• To comply with legal obligations and protect our legal rights

  1. Legal Basis for Processing (For EU Users)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the context, including:
• Your consent (e.g., for marketing)
• Contractual necessity (e.g., to fulfill a purchase)
• Compliance with legal obligations
• Legitimate business interests

  1. How We Protect Your Information

We take data security seriously and implement appropriate technical and organizational measures, including:
• SSL encryption
• Secure payment gateways
• Access controls and regular audits
• Data minimization and retention policies

While we strive to protect your information, no system is 100% secure. You use our services at your own risk.

  1. Sharing and Disclosure

We do not sell your personal information. We may share limited data with trusted third parties, only as necessary:
• Payment processors and logistics/shipping partners
• Email and marketing platforms (only with your consent)
• IT service providers for site functionality
• Legal authorities when required by law or to protect our rights

All third parties are contractually bound to protect your information under data processing agreements.

  1. Cookies and Tracking Technologies

We use cookies and similar technologies to:
• Enable essential site functionality
• Track usage and analytics (e.g., via Google Analytics)
• Remember preferences

You may disable cookies in your browser settings. Note that this may impact your experience on our site.

  1. Your Rights and Choices

Depending on your location, you may have the right to:
• Access the personal data we hold about you
• Correct or update inaccurate information
• Delete your data (subject to legal and transactional retention)
• Withdraw consent for marketing or data processing
• Object to or restrict processing
• Port your data to another service (where applicable)

To exercise your rights, email us at: privacy@ibox.travel.

California residents may also visit our “Do Not Sell or Share My Information” page to exercise specific CCPA rights.

  1. Data Retention

We retain your information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes.

  1. User-Generated Content (Comments)

When visitors leave comments:
• We collect the data shown in the comment form, IP address, and browser user agent to prevent spam.
• A hashed (anonymized) version of your email may be used by the Gravatar service to display profile pictures. See Gravatar’s Privacy Policy: https://automattic.com/privacy/.

Approved comments may be publicly visible.

  1. Media Uploads

If you upload images, avoid including embedded location data (EXIF GPS). Visitors may be able to extract this information from public images on the website.

  1. Children’s Privacy

Our services are not intended for individuals under the age of 13. We do not knowingly collect personal data from children without parental consent.

  1. International Transfers

If you are accessing the website from outside the U.S., your data may be transferred to and processed in the United States. We take steps to ensure such transfers comply with applicable laws.

  1. Updates to This Policy

We may revise this Privacy Policy periodically. The updated version will be posted on this page with the “Effective Date.” Your continued use of our services means you accept the updated terms.

  1. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

iBox Travel
Email: contact@ibox.travel