Who is responsible
What we collect and why
We process your contact details, order information, your messages to support and technical data in order to fulfill orders, provide support, prevent fraud and meet our obligations. Your IP address is also used locally to work out which country you are connecting from, so the store can apply the sales zones it is set up for. It is not used to place you precisely.
From the moment you arrive on the site, and without any action from you, we also record which pages and products you look at, what you add to the cart, when a checkout starts and when an order completes. We use that to measure our Meta advertising, attribute conversions and avoid showing you the same ad over and over. This is how the store pays for itself. You can ask us to stop by writing to us, or limit it from your browser.
Who receives your data
Stripe processes card payments and receives what it needs to take the payment securely. DigitalOcean hosts the site and its technical data. Resend receives your email address and the content strictly needed for confirmations and updates. Carriers and fulfillment partners receive only what is needed to deliver your parcel. Meta Platforms receives advertising events, through the Meta Pixel in your browser and through server-side conversions measurement from our own server: event ids, product ids, amount and currency, the _fbp and _fbc identifiers, IP address, browser, and for a confirmed purchase certain contact details that are normalized and then hashed. Open Box Home never sends card numbers to Meta.
How long we keep it
Order and billing records are kept for the length of our commercial relationship, then archived for as long as tax and accounting rules require. Support requests are kept while we handle them, then for as long as they stay useful if a dispute comes up. Meta event payloads sit in a technical queue only until they are sent successfully or until retries stop, then they are deleted from that queue. Ids and technical statuses may be kept for deduplication and security.
Security
Access is limited to the people and providers who need it. The site runs on HTTPS, and the payment fields built into our checkout page are supplied by Stripe. Full card details go straight to Stripe and are never received or stored by Open Box Home. Reasonable technical and organizational measures protect the rest.
Your choices and your rights
Wherever you live, you can ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or tell us to stop using it for advertising measurement. Write to support@openboxhome.com and we answer within 30 days. Asking never changes the price you pay or the service you get.
We do not sell your personal information. We do share the advertising events described above with Meta, and you can tell us to stop at any time. You can also turn off personalized advertising in your Meta account settings and clear or block trackers in your browser, as explained in our cookie notice. Customers in the United Kingdom, Australia, Canada and several US states have further rights under local law, and this same email address is how you use them.
Where your data is processed
The store is run from the United States, and our providers may process data in the United States and in other countries where they operate. Where the law requires safeguards for sending data out of your country, we rely on the contractual protections those providers put in place.
Last updated: August 17, 2026