Privacy Policy for PaperBox

PaperBox is a food-saving platform that connects customers with participating restaurants, bakeries, grocery stores, and other food businesses offering surplus food, promotional food boxes, and other available food offers.

Through PaperBox, customers can discover participating vendors, browse available offers, make reservations, manage their reservations, and collect reserved items from participating vendor locations.

PaperBox currently operates using a city-selection system. Users select their preferred city, and PaperBox displays participating vendors and offers available within that selected city.

The information we collect depends on how you use PaperBox and the features available in the version of the Services you use.

2.1 Account and Contact Information

When you create or use a PaperBox account, we may collect:

• Full name
• Email address
• Phone number
• User or account identifier
• Profile information

We use this information to create and manage your account, authenticate you, provide PaperBox functionality, process reservations, communicate with you, and provide customer support.

2.2 Selected City

PaperBox asks users to manually select a city in order to display vendors, food offers, and services available in that city.

PaperBox does not request, access, or collect your device's precise or current GPS location for this purpose.

The city you select may be stored with your account or within the application so that PaperBox can provide relevant vendors and offers for your selected area.

You may change your selected city through the application where this functionality is available.

A selected city is used as an application preference and does not represent the collection of your residential, home, or physical street address.

2.3 Reservation and Transaction Information

When you make, modify, or cancel a reservation through PaperBox, we may collect information such as:

• Reservation or booking identifier
• Selected vendor
• Selected food box or offer
• Quantity
• Reservation date
• Collection time or time slot
• Reservation status
• Amount associated with the reservation
• Cancellation information
• Other information necessary to manage and fulfill the reservation

We use this information to process and manage reservations, provide reservation functionality, and maintain appropriate operational and transaction records.

2.4 User-Provided Content

Where such features are available, users may provide information or content directly to PaperBox, such as profile information, feedback, customer support requests, or other information necessary to use a particular feature.

We collect this information only when you choose to provide it or when it is necessary to provide a requested feature.

If a particular feature is not available in the version of PaperBox you are using, we do not collect information through that feature.

2.5 Device and Technical Information

We or our service providers may receive limited technical information necessary to operate, secure, maintain, and improve PaperBox.

This may include:

• Device type
• Operating system
• Application version
• Technical identifiers
• Crash information
• Diagnostic information
• Application performance information

This information may be processed by service providers that provide infrastructure, authentication, notifications, analytics, crash reporting, security, or other technical services used by PaperBox.

We may use information collected through PaperBox to:

• Create and manage user accounts
• Authenticate users
• Provide PaperBox features and functionality
• Display vendors and offers based on your selected city
• Process and manage reservations
• Provide reservation confirmations and updates
• Facilitate collection of reserved items
• Communicate important service information
• Send service-related notifications
• Provide customer support
• Maintain and improve the Services
• Diagnose and resolve technical issues
• Protect the security and integrity of PaperBox
• Detect and prevent fraud, misuse, or unauthorized activity
• Maintain appropriate business and transaction records
• Comply with applicable laws and legal obligations

We will not use your personal information for materially different purposes without providing appropriate notice or obtaining consent where required.

PaperBox connects customers with participating independent vendors.

When you make a reservation, certain information may be provided to the relevant vendor where reasonably necessary to process, verify, manage, or fulfill your reservation.

This information may include:

• Your name
• Reservation identifier
• Reservation details
• Number of reserved items or food boxes
• Collection date and time
• Other information reasonably necessary to fulfill the reservation

Participating vendors are responsible for handling information they receive in accordance with applicable laws and their own legal obligations.

PaperBox may use trusted third-party service providers to provide and operate certain parts of the Services.

These services may include:

• User authentication
• Cloud databases and hosting
• File storage
• Push notifications
• Maps for displaying vendor locations
• Application analytics
• Crash and performance monitoring
• Security and fraud prevention
• Payment processing, where applicable
• Other technical infrastructure

For example, PaperBox may use services provided by Google Firebase and other Google services for application infrastructure, authentication, databases, storage, notifications, maps, or related functionality.

Third-party service providers may process certain information as necessary to provide their respective services and in accordance with their applicable terms, privacy policies, and legal obligations.

PaperBox does not require access to your device's GPS or current location in order to show vendors.

Instead, users manually select a city, and PaperBox uses that selected city to determine which participating vendors and offers to display.

PaperBox does not treat your selected city as your home or physical address.

PaperBox may display vendor locations or addresses so that customers can identify where reserved items can be collected. Displaying a vendor's location does not require PaperBox to collect the customer's current device location.

PaperBox does not sell users' personal information to third parties.

Unless expressly disclosed otherwise, PaperBox does not use users' names, email addresses, phone numbers, user identifiers, or other personal information for cross-app or cross-website tracking for targeted advertising purposes.

If these practices change in a future version of PaperBox, we will update our privacy disclosures and obtain any permissions or consent required by applicable law or platform requirements.

We may share information when reasonably necessary with:

• Participating PaperBox vendors for processing and fulfilling reservations
• Service providers that operate infrastructure or functionality on our behalf
• Payment providers, if payment functionality is provided
• Professional advisers where reasonably necessary
• Government authorities, regulators, or law enforcement where required by applicable law
• Parties involved in a merger, acquisition, restructuring, financing, sale, or similar corporate transaction, subject to applicable legal requirements

We do not disclose personal information to unrelated third parties for materially unrelated purposes without an appropriate legal basis.

We retain personal information only for as long as reasonably necessary to:

• Provide PaperBox and its Services
• Maintain your account
• Complete and maintain reservation records
• Meet applicable legal, regulatory, tax, or accounting requirements
• Resolve disputes
• Prevent fraud and abuse
• Enforce our agreements
• Protect PaperBox, its users, and participating vendors

Retention periods may vary depending on the type of information and applicable legal requirements.

When personal information is no longer reasonably required, we may delete, anonymize, or securely dispose of it in accordance with applicable law.

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, destruction, or loss.

However, no internet-based service, electronic transmission, or storage system can guarantee absolute security.

Users are responsible for keeping their account credentials secure. If you believe your PaperBox account has been accessed without authorization, please contact us promptly at support@ourpaperbox.com.

Depending on your location and applicable law, you may have certain rights regarding your personal information.

These rights may include the ability to:

• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of eligible personal information
• Withdraw consent where processing is based on consent
• Object to or restrict certain processing where applicable
• Request information regarding how your personal information is processed

You may also manage applicable application permissions, such as notifications, through your device settings.

Privacy requests may be subject to reasonable identity verification and limitations permitted or required under applicable law.

PaperBox users may request deletion of their account and associated personal information at any time.

To submit an account and data deletion request, please visit:

PaperBox Account & Data Deletion Request: Request Account & Data Deletion

You may also contact us at support@ourpaperbox.com if you require assistance with your account or data deletion request.

After receiving and verifying a valid deletion request, PaperBox will delete or anonymize eligible personal information associated with your account.

Certain information may be retained where reasonably necessary or legally required for purposes such as:

• Legal or regulatory compliance
• Accounting and transaction records
• Fraud prevention
• Security
• Resolving disputes
• Enforcing agreements
• Establishing, exercising, or defending legal claims

Information retained for these purposes will be retained only for as long as reasonably necessary or required by applicable law.

PaperBox is not intended for children who are not legally permitted to use the Services independently under applicable law.

We do not knowingly seek to collect personal information from children in violation of applicable laws.

If we become aware that personal information from a child has been collected in circumstances requiring parental or guardian consent without appropriate authorization, we will take reasonable steps to delete or otherwise appropriately handle that information.

Parents or guardians who believe that a child has provided personal information to PaperBox improperly may contact us at support@ourpaperbox.com.

PaperBox may contain links to or integrations with third-party websites, maps, vendor pages, or other external services.

These third-party services operate independently from PaperBox and may have their own privacy policies and data practices.

PaperBox is not responsible for the privacy practices, security, or content of independently operated third-party services. We encourage users to review the applicable privacy policies before providing information to third-party services.

PaperBox and some of our service providers may process or store information in countries other than the country in which you reside.

Where required by applicable law, we take reasonable measures to ensure that international transfers and processing of personal information are subject to appropriate safeguards.

We may update this Privacy Policy from time to time to reflect changes to:

• PaperBox features and functionality
• Our data practices
• Third-party services
• Legal or regulatory requirements
• Security or operational requirements

When this Privacy Policy is updated, we will revise the Last Updated date at the top of this page.

Where required by applicable law, we may provide additional notice or obtain consent for material changes.

We encourage users to review this Privacy Policy periodically.

If you have questions, concerns, complaints, or requests regarding this Privacy Policy, your personal information, or PaperBox's privacy practices, please contact:

PaperBox Malaysia Sdn. Bhd.
Malaysia
Email: support@ourpaperbox.com

Account & Data Deletion: Request Account & Data Deletion

We will make reasonable efforts to respond to legitimate privacy-related requests in accordance with applicable laws.