Privacy Policy & GDPR - Box Drop Storage

Privacy Policy

Last Updated On 25-Jun-2025
Effective Date 25-Jun-2025

This Privacy Policy describes the policies of Buail Bosca Limited T/A BoxDrop Storage, Stonepark Co. Roscommon Ireland F42 K062, Roscommon F42 K062, Ireland, email: [email protected], phone: 014821010 on the collection, use and disclosure of your information that we collect when you use our website ( https://boxdrop.ie ). (the “Service”). By accessing or using the Service, you are consenting to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use the Service.

We may modify this Privacy Policy at any time without any prior notice to you and will post the revised Privacy Policy on the Service. The revised Policy will be effective 180 days from when the revised Policy is posted in the Service and your continued access or use of the Service after such time will constitute your acceptance of the revised Privacy Policy. We therefore recommend that you periodically review this page.

Information We Collect:

We will collect and process the following personal information about you:
1. Name
2. Email
3. Mobile
4. Date of Birth
5. Address
6. Work Address
7. Payment Info
8. Home Address
9. Personal Preferences and Interests
How We Collect Your Information:

We collect/receive information about you in the following manner:
1. When a user fills up the registration form or otherwise submits personal information
2. Interacts with the website
3. From public sources
How We Use Your Information:

We will use the information that we collect about you for the following purposes:
1. Marketing/ Promotional
2. Creating user account
3. Testimonials
4. Customer feedback collection
5. Processing payment
6. Support
7. Administration info
8. Targeted advertising
9. Manage customer order
10. Site protection
11. Dispute resolution
12. Manage user account
If we want to use your information for any other purpose, we will ask you for consent and will use your information only on receiving your consent and then, only for the purpose(s) for which grant consent unless we are required to do otherwise by law.
How We Share Your Information:

We will not transfer your personal information to any third party without seeking your consent, except in limited circumstances as described below:
1. Ad service
2. Marketing agencies
3. Legal entities
4. Analytics
5. Payment recovery services
6. Data collection & process
We require such third party’s to use the personal information we transfer to them only for the purpose for which it was transferred and not to retain it for longer than is required for fulfilling the said purpose.

We may also disclose your personal information for the following: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates any third-party rights. If the Service or our company is merged or acquired with another company, your information will be one of the assets that is transferred to the new owner.
Retention Of Your Information:

We will retain your personal information with us for 90 days to 2 years after user accounts remain idle or for as long as we need it to fulfill the purposes for which it was collected as detailed in this Privacy Policy. We may need to retain certain information for longer periods such as record-keeping / reporting in accordance with applicable law or for other legitimate reasons like enforcement of legal rights, fraud prevention, etc. Residual anonymous information and aggregate information, neither of which identifies you (directly or indirectly), may be stored indefinitely.
Your Rights:

Depending on the law that applies, you may have a right to access and rectify or erase your personal data or receive a copy of your personal data, restrict or object to the active processing of your data, ask us to share (port) your personal information to another entity, withdraw any consent you provided to us to process your data, a right to lodge a complaint with a statutory authority and such other rights as may be relevant under applicable laws. To exercise these rights, you can write to us at [email protected]. We will respond to your request in accordance with applicable law.

Do note that if you do not allow us to collect or process the required personal information or withdraw the consent to process the same for the required purposes, you may not be able to access or use the services for which your information was sought.
Cookies Etc.

To learn more about how we use these and your choices in relation to these tracking technologies, please refer to our Cookie Policy.
Security:

The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse or unauthorized alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk.
Third Party Links & Use Of Your Information:

Our Service may contain links to other websites that are not operated by us. This Privacy Policy does not address the privacy policy and other practices of any third parties, including any third party operating any website or service that may be accessible via a link on the Service. We strongly advise you to review the privacy policy of every site you visit. We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Grievance / Data Protection Officer:

If you have any queries or concerns about the processing of your information that is available with us, you may email our Grievance Officer at Buail Bosca Limited T/A BoxDrop Storage, Stonepark Co. Roscommon Ireland F42 K062, email: [email protected]. We will address your concerns in accordance with applicable law.

GDPR Policy

Last Updated: 25-Jun-2025
Effective Date: 25-Jun-2025

1. Data Controller & DPO

Controller:
Buail Bosca Limited T/A BoxDrop Storage
Stonepark, Co. Roscommon, F42 K062, Ireland
Email: [email protected]
Phone: +353 14 821 010

Data Protection Officer:
Alan Joyce, DPO
Email: [email protected]

2. Personal Data We Collect

Identity & Contact: name, date of birth, email, mobile, home & work addresses
Credentials & Authentication: login details
Payment: payment card details (tokenised via PCI-compliant provider)
Usage & Preferences: site usage, preferences, marketing consents
Sensitive Data: none

3. How We Collect Data

Directly: registration forms, account creation, correspondence
Automatically: cookies, server logs, analytics
From Third Parties: public sources, marketing partners

4. Legal Basis for Processing (GDPR)

Consent: e.g. for marketing emails; withdraw anytime via unsubscribe or account settings.
Contractual Necessity: to create/manage your BoxDrop account and fulfill storage services.
Legitimate Interests: to improve our website, prevent fraud, and secure our Service (balanced against your rights).
Legal Obligation: to comply with accounting, tax, anti-money laundering laws.
Vital Interests: in emergencies (e.g. to protect someone’s safety).

5. Purposes of Processing

We use your data to:

Create/manage your account and process payments
Provide customer support and logistics for your stored items
Send transactional communications (e.g. booking confirmations)
Send marketing/promotional content (only if consented)
Display personalised ads
Monitor usage trends and optimise our Service
Comply with legal and regulatory obligations

6. Data Sharing & Processors

We may share data with:

Service Providers: payment gateways, IT hosts, analytics, marketing agencies, logistics partners
Legal Authorities: where required by law, court order, or to defend legal rights
Business Transfers: in context of merger/acquisition

All third parties are bound by Data Processing Agreements to use your data only as instructed and to keep it secure.

7. International Transfers

If we transfer your data outside the European Economic Area, we will do so under EU Standard Contractual Clauses or other approved safeguards.

8. Data Retention

Data Category	Retention Period
Account & Contractual Data	2 years after account closure
Financial Records	Up to 6 years (legal requirement)
Marketing Consents	Until consent withdrawal
Anonymised/Aggregate Data	Indefinitely

9. Your Rights

Under GDPR you may:

Access your data
Rectify inaccuracies
Erase (“right to be forgotten”)
Restrict processing
Port your data to another provider
Object to processing (including profiling)
Withdraw consent at any time

Submit requests to [email protected]. We will respond within one month (extended by two further months if complex).

You also have the right to lodge a complaint with the Irish Data Protection Commission.

10. Automated Decision-Making & Profiling

We do not perform any automated decision-making or profiling that produces legal or similarly significant effects.

11. Security Measures

We implement appropriate measures, including:

Encryption (SSL/TLS) in transit
Encryption at rest for backups
Access controls & regular security audits
Staff training on data protection

12. Data Breach Notification

In the event of a personal data breach, we will notify the DPC and, where required, affected individuals within 72 hours.

13. Changes to This Policy

We may update this policy from time to time. The “Last Updated” date will reflect changes. Material changes will be notified on our website or by email.

Privacy Policy

Information We Collect:

How We Collect Your Information:

How We Use Your Information:

How We Share Your Information:

Retention Of Your Information:

Your Rights:

Cookies Etc.

Security:

Third Party Links & Use Of Your Information:

Grievance / Data Protection Officer: