Version 3 · Effective 8 August 2026 · Last updated 9 October 2026
Welcome to BoxBox.
BoxBox is a digital platform that connects vehicle owners with independent automotive service providers, enabling users to search for garages, request quotations, book vehicle services, manage repairs, communicate with garages, and access related automotive services through our website and mobile application (the "Platform").
This Privacy Policy explains how BoxBox collects, uses, stores, discloses and protects your Personal Data when you access or use the Platform.
We recognise that your Personal Data is important. We are committed to handling your information responsibly, transparently and in accordance with applicable data protection laws.
Please read this Privacy Policy carefully before using the Platform.
By creating an Account or otherwise using the Platform, you acknowledge that you have been provided with and have had an opportunity to review this Privacy Policy.
This Privacy Policy does not, by itself, constitute consent to any processing activity for which consent is required under applicable law. Where BoxBox relies on your consent to process Personal Data, we will request that consent separately in a clear and appropriate manner.
Where you provide consent, you may withdraw that consent at any time, subject to applicable law. Withdrawal of consent will not affect the lawfulness of processing undertaken before the withdrawal of consent.
The Platform is operated by:
BoxBox LLC-FZ
Meydan Free Zone
Dubai
United Arab Emirates
Email: privacy@boxbox.ae
For the purposes of applicable data protection legislation, BoxBox is generally the controller of Personal Data collected through the Platform.
Where a Garage independently collects or processes your Personal Data outside the Platform, that Garage will generally act as an independent controller of that information.
This Privacy Policy governs BoxBox's collection and processing of Personal Data, including Personal Data collected by BoxBox and subsequently disclosed to third parties.
Third parties such as Garages, payment providers, insurers and other service providers may separately process Personal Data for purposes that they independently determine. Where they act as independent Controllers, their own privacy notices and practices will apply to that independent processing.
BoxBox is not responsible for independent processing carried out by a third party outside BoxBox's control. However, this Privacy Policy continues to apply to BoxBox's own collection, use, disclosure and receipt of Personal Data in connection with those third parties.
For the purposes of this Privacy Policy:
Account means a registered BoxBox account.
Garage means an independent automotive repairer, workshop, dealer or service provider registered on the Platform.
Personal Data means any data relating to an identified natural person or relating to a natural person who can be identified, directly or indirectly, through the linking of data, in accordance with applicable data protection law. References in this Privacy Policy to “your Personal Data” mean Personal Data relating to you.
Platform means the BoxBox mobile application, website and related services.
Services means the services provided by BoxBox through the Platform.
Vehicle Data means information relating to a vehicle listed on the Platform.
User means any individual using the Platform.
Depending on how you use the Platform, we may collect the following categories of information.
5.1.1When you register for an Account, we may collect:
(a)full name
(b)email address
(c)mobile telephone number
(d)authentication credentials, including passwords stored using appropriate cryptographic hashing and security controls
(e)country of residence
(f)preferred language
(g)account preferences
5.2.1When you register a vehicle or request automotive services through the Platform, we may collect information relating to your vehicle, including:
(a)vehicle registration number;
(b)chassis number or vehicle identification number (VIN);
(c)make;
(d)model;
(e)derivative or trim;
(f)model year;
(g)engine size;
(h)fuel type;
(i)transmission;
(j)odometer reading;
(k)vehicle colour;
(l)service history;
(m)warranty information, where provided;
(n)vehicle photographs;
(o)maintenance records;
(p)vehicle inspection or testing records;
(q)uploaded invoices; and
(r)uploaded service documents.
5.2.2Vehicle Registration Card (Mulkiya):
(a)Certain Garages may require a copy of a vehicle registration card (Mulkiya) before accepting a booking, commencing work, verifying vehicle details or providing particular automotive services.
(b)Where reasonably necessary for these purposes, BoxBox may request that you upload a copy of your Mulkiya and may make the relevant document or information available to the Garage involved in your booking.
(c)BoxBox will seek to collect a Mulkiya only where reasonably necessary for the relevant service, booking, vehicle-verification or dispute-resolution purpose.
(d)Where practicable, BoxBox will not require a Mulkiya solely for the purpose of creating a vehicle profile where the relevant service can be provided without it.
(e)Mulkiya information will be retained only for so long as reasonably necessary for the purpose for which it was collected or for any additional period required or permitted by applicable law.
5.3.1When you request automotive services we may collect:
(a)requested service
(b)service category
(c)preferred appointment date
(d)preferred location
(e)booking history
(f)booking status
(g)quotations
(h)accepted quotations
(i)cancelled bookings
(j)invoices
(k)completion reports
(l)repair notes
(m)service recommendations
5.4.1Where you communicate with a Garage through the Platform we may collect:
(a)messages
(b)photographs
(c)videos
(d)attachments
(e)repair updates
(f)quotation revisions
(g)appointment confirmations
5.4.2Communications may be stored to:
(a)facilitate the transaction;
(b)improve customer support;
(c)investigate disputes;
(d)detect fraud;
(e)improve service quality; and
(f)comply with legal obligations.
5.5.1Payments made through the Platform are processed by authorised third-party payment service providers.
5.5.2BoxBox generally does not store complete payment card numbers.
5.5.3Depending upon the payment method used, we may receive:
(a)payment confirmation
(b)transaction identifier
(c)payment status
(d)billing address
(e)last four digits of payment card
(f)card type
(g)payment token
(h)refund status
5.6.1In limited circumstances, BoxBox may request additional information in order to verify the identity or authority of a User, Garage operator, authorised representative or other person interacting with the Platform.
5.6.2Depending on the circumstances, this information may include:
(a)government-issued identification;
(b)Emirates ID;
(c)driving licence;
(d)passport;
(e)proof of address;
(f)trade licence information; or
(g)evidence of authority to act on behalf of a Garage or other business.
5.6.3BoxBox will request identity documentation only where reasonably necessary for purposes such as:
(a)verifying Garage ownership, management or authorised representatives;
(b)preventing or investigating fraud or misuse of the Platform;
(c)satisfying a legal or regulatory requirement;
(d)resolving a material dispute;
(e)establishing, exercising or defending legal rights; or
(f)otherwise protecting the integrity and security of the Platform.
5.7.1Where you operate a Garage, we may collect:
(a)business name
(b)trade licence
(c)VAT registration
(d)authorised signatories
(e)insurance certificates
(f)workshop photographs
(g)technician qualifications
(h)banking information
(i)pricing schedules
(j)opening hours
(k)certifications
(l)service capabilities
(m)recovery vehicle information
(n)inspection reports
(o)verification status
5.8.1When you access the Platform we may automatically collect:
(a)IP address
(b)device model
(c)operating system
(d)browser type
(e)device identifiers
(f)mobile network
(g)language settings
(h)application version
(i)diagnostic information
(j)crash logs
(k)performance data
5.9.1With your permission, BoxBox may collect precise or approximate location information to:
(a)identify nearby garages;
(b)calculate estimated travel distances;
(c)assist with roadside recovery;
(d)improve search results;
(e)provide location-based recommendations.
5.9.2You may disable location permissions at any time through your device settings.
5.9.3Certain Platform functionality may become unavailable if location access is disabled.
5.10.1We may collect information regarding your use of the Platform including:
(a)searches
(b)viewed garages
(c)viewed services
(d)quotation requests
(e)clicks
(f)feature usage
(g)time spent using the Platform
(h)navigation paths
(i)referral sources
(j)marketing interactions
5.11.1Certain features of the Platform may use artificial intelligence, machine learning or other automated technologies (“AI Systems”).
5.11.2Depending on the feature being used, AI Systems may process information submitted to the Platform, including vehicle information, quotations, repair descriptions, photographs, documents and communications.
5.11.3AI Systems may be used to:
(a)explain quotations in plain language;
(b)compare quotations;
(c)identify differences between quotations;
(d)identify potentially incomplete or inconsistent quotation information;
(e)suggest possible service categories;
(f)assist with Garage recommendations;
(g)classify documents or information;
(h)identify potentially unusual or fraudulent activity; and
(i)assist BoxBox customer support personnel.
5.11.4Where an AI feature is provided at your request as part of the Platform, BoxBox may process the information reasonably necessary to provide that feature.
5.11.5BoxBox may use third-party technology providers to provide certain AI functionality. Where Personal Data is shared with such providers, BoxBox will seek to ensure that appropriate contractual, technical and organisational safeguards apply.
5.11.6Unless otherwise expressly disclosed to you and permitted under applicable law, BoxBox will not use identifiable Personal Data submitted by Users to train general-purpose AI models unrelated to the provision, security or improvement of the BoxBox Platform.
5.11.7Where BoxBox wishes to use identifiable Personal Data for a materially different AI-development or model-training purpose that requires consent under applicable law, BoxBox will request that consent separately.
5.11.8BoxBox may use information that has been aggregated or anonymised so that it no longer identifies an individual to analyse and improve the Platform, including AI-enabled functionality.
5.11.9AI-generated outputs are intended to assist Users only. They do not constitute professional mechanical advice and do not replace vehicle inspections, professional judgment or advice from a qualified automotive service provider.
BoxBox processes Personal Data only for specified and lawful purposes and only to the extent reasonably necessary for those purposes. We may use your Personal Data for one or more of the following purposes.
6.1.1We use your information to:
(a)create and manage your BoxBox account;
(b)authenticate your identity when you sign in;
(c)register and manage your vehicles;
(d)facilitate searches for Garages and automotive services;
(e)enable quotation requests and bookings;
(f)process and manage appointments;
(g)provide customer support;
(h)communicate with you regarding your account or bookings;
(i)display your service history; and
(j)maintain Platform functionality.
6.2.1Where you request services through the Platform, we use your information to:
(a)transmit booking requests to Garages;
(b)share vehicle information necessary for preparing quotations;
(c)enable communication between you and the selected Garage;
(d)manage booking confirmations;
(e)facilitate payments;
(f)administer refunds where applicable;
(g)record completed services;
(h)generate invoices and receipts; and
(i)maintain records of transactions.
6.3.1We continually improve BoxBox by analysing how the Platform is used. This includes using information to:
(a)understand user behaviour;
(b)improve search functionality;
(c)improve recommendation algorithms;
(d)optimise booking workflows;
(e)identify frequently requested services;
(f)improve user interface design;
(g)develop new features;
(h)evaluate Platform performance;
(i)measure customer satisfaction; and
(j)improve customer support.
6.4.1BoxBox may use AI Systems to provide and improve specific Platform features. Depending on the relevant feature, these systems may be used to:
(a)explain automotive quotations using plain language;
(b)identify significant differences between quotations;
(c)estimate indicative pricing ranges;
(d)recommend service categories;
(e)recommend Garages based on criteria selected by the User;
(f)identify incomplete or inconsistent quotations;
(g)assist with fraud detection;
(h)assist customer support personnel; and
(i)classify uploaded documents or information.
6.4.2Where Personal Data is used to provide an AI-enabled feature requested by a User, BoxBox will limit the information used to that which is reasonably necessary for that purpose.
6.4.3BoxBox may analyse aggregated, de-identified or anonymised information to evaluate and improve the performance of its AI-enabled functionality.
6.4.4Where BoxBox proposes to use identifiable Personal Data for a separate purpose of training or materially developing AI models, BoxBox will ensure that an appropriate legal basis exists and will obtain consent where required by applicable law.
6.4.5AI-generated results may be incomplete, inaccurate or unsuitable for a particular vehicle or circumstance. Users should obtain appropriate professional automotive advice or inspection before relying on AI-generated information to make material decisions concerning vehicle repair, safety or maintenance.
6.4.6Automated Processing and Human Review
(a)Certain Platform functions may involve automated processing, including the use of algorithms or AI Systems to analyse information, identify patterns, rank or recommend Garages, detect potentially fraudulent activity or generate other outputs.
(b)BoxBox does not intend to rely solely on automated processing to make decisions that produce legal effects or similarly significant adverse effects on Users unless permitted by applicable law and appropriate safeguards are in place.
(c)Where applicable law gives you a right to object to a decision based on automated processing, request human intervention or request that an automated decision be reviewed, you may exercise that right by contacting privacy@boxbox.ae.
(d)BoxBox may request information reasonably necessary to verify your identity and understand the decision to which your request relates.
6.5.1We process information to protect users and the integrity of the Platform. This includes detecting and preventing:
(a)fraudulent bookings;
(b)payment fraud;
(c)identity theft;
(d)account compromise;
(e)fake reviews;
(f)spam;
(g)malicious software;
(h)abuse of the Platform;
(i)suspicious login attempts; and
(j)other unlawful activities.
6.6.1We may process Personal Data where necessary to:
(a)comply with applicable laws;
(b)comply with court orders;
(c)respond to lawful requests from regulators;
(d)comply with tax obligations;
(e)maintain accounting records;
(f)enforce our legal rights;
(g)investigate legal claims; and
(h)comply with applicable data protection legislation.
BoxBox will process Personal Data only where permitted under applicable data protection law.
The legal basis applicable to particular processing will depend upon the nature of the information, the purpose for which it is processed and the circumstances in which it is collected.
7.1.1BoxBox may process Personal Data without separate consent where the processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
7.1.2This may include processing necessary to:
(a)create and administer your Account;
(b)register and manage vehicles;
(c)respond to quotation or booking requests;
(d)provide information about Garages and automotive services;
(e)transmit information required by a Garage to prepare or perform a requested service;
(f)facilitate appointments and bookings;
(g)facilitate payments and refunds;
(h)provide requested Platform functionality;
(i)provide requested AI-enabled features;
(j)communicate with you regarding bookings, transactions or your Account; and
(k)provide customer support.
7.2.1Where applicable law requires consent for a particular processing activity, BoxBox will request your consent before undertaking that activity.
7.2.2Activities for which BoxBox may request consent include:
(a)sending promotional or direct marketing communications;
(b)using non-essential cookies or similar technologies;
(c)accessing precise device location where that access is optional;
(d)sending promotional push notifications;
(e)certain optional profiling or personalisation activities; and
(f)certain uses of identifiable information for AI or product-development purposes.
7.2.3Where consent is requested, BoxBox will seek to ensure that the request is clear, specific and distinguishable from other matters.
7.2.4You may withdraw your consent at any time using the method provided when consent was obtained, through applicable Account or device settings, or by contacting BoxBox.
7.2.5Withdrawal of consent will not affect processing lawfully undertaken before consent was withdrawn.
7.3.1BoxBox may process Personal Data where necessary to comply with obligations imposed by applicable law, regulation, court order or lawful request from a competent authority.
7.3.2This may include processing relating to:
(a)accounting and taxation;
(b)regulatory reporting;
(c)lawful requests from public authorities;
(d)court proceedings; and
(e)record-keeping obligations.
BoxBox may process Personal Data where permitted by applicable law for purposes connected with establishing, exercising or defending legal claims, resolving disputes, protecting the rights of BoxBox or third parties, or responding to judicial or regulatory proceedings.
In limited circumstances, applicable data protection law may permit Personal Data to be processed without consent on another statutory basis. Where BoxBox relies on such a basis, it will do so only to the extent permitted by applicable law and reasonably necessary for the relevant purpose.
9.1.1BoxBox is established in the United Arab Emirates. Some of the service providers used to operate the Platform may process or store Personal Data in other countries.
9.1.2Accordingly, Personal Data may be transferred to or processed in jurisdictions outside the UAE in connection with services such as:
(a)cloud hosting;
(b)data and document storage;
(c)payment processing;
(d)communications services;
(e)analytics;
(f)customer support;
(g)cybersecurity; and
(h)AI processing.
9.1.3Where Personal Data is transferred outside the UAE, BoxBox will seek to ensure that the transfer is made in accordance with applicable UAE data protection law.
9.1.4Depending on the relevant jurisdiction and circumstances, BoxBox may rely upon:
(a)recognition that the recipient jurisdiction provides an adequate level of protection;
(b)contractual safeguards or contractual requirements approved or permitted under applicable law;
(c)your express consent where legally permissible and appropriate;
(d)a transfer that is necessary for the performance of a contract or implementation of measures requested by you, where permitted by law; or
(e)another transfer mechanism permitted under applicable law.
9.1.5BoxBox will also seek to implement appropriate technical and organisational measures having regard to the nature of the Personal Data and the risks associated with the processing.
9.1.6Further information regarding material categories of international service providers or applicable safeguards may be obtained by contacting privacy@boxbox.ae.
BoxBox retains Personal Data only for as long as is reasonably necessary to fulfil the purposes described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.
The period for which we retain Personal Data depends upon the nature of the information, the purpose for which it was collected, and applicable legal or regulatory requirements.
10.1.1In determining appropriate retention periods, BoxBox considers:
(a)the purpose for which the information was collected;
(b)the sensitivity of the information;
(c)the volume of information collected;
(d)legal and regulatory obligations;
(e)contractual obligations;
(f)applicable limitation periods for legal claims;
(g)fraud prevention requirements; and
(h)business continuity requirements.
10.2.1BoxBox does not apply a single retention period to all Personal Data.
10.2.2Retention periods are determined having regard to the purpose for which information was collected, the nature and sensitivity of the information, applicable legal requirements, contractual requirements, relevant limitation periods and whether continued retention is reasonably necessary to establish, exercise or defend legal rights.
10.2.3Subject to these considerations, BoxBox generally expects to apply the following approach:
(a)Account information
For the duration of the Account and for a reasonable period following closure where necessary for legal, fraud-prevention, dispute-resolution or record-keeping purposes.
(b)Booking, transaction and payment records
For the period required under applicable accounting, tax and commercial laws and for any additional period reasonably necessary to resolve disputes or legal claims.
(c)Quotations and service records
For so long as reasonably necessary to maintain the User's vehicle and service history, administer warranties, resolve disputes and provide requested Platform functionality.
(d)Mulkiya and vehicle registration documents
For so long as reasonably necessary to facilitate the relevant booking, verify the vehicle, maintain necessary transaction records or resolve a dispute. BoxBox may delete the document itself while retaining limited information extracted from it where continued retention of the full document is unnecessary.
(e)Government-issued identification documents
For no longer than reasonably necessary to complete the verification, investigation, dispute or legal purpose for which the document was requested, unless continued retention is required by law.
(f)Garage communications
For a reasonable period following the relevant booking or transaction where necessary for customer support, dispute resolution, quality assurance, fraud prevention or legal claims.
(g)Location information
Precise location information will be retained only for so long as reasonably necessary to provide the relevant location-based, recovery or booking service, unless a longer period is required for a dispute, fraud investigation or legal obligation.
(h)AI inputs and outputs
For so long as reasonably necessary to provide the relevant AI-enabled feature, maintain appropriate service and security records, investigate problems or disputes, and improve the Platform where permitted by law.
(i)Customer support records
Generally for up to three years after the relevant enquiry is resolved, unless a longer period is reasonably necessary in connection with a dispute or legal claim.
(j)Marketing preferences
For so long as necessary to administer your marketing preferences. BoxBox may retain a suppression record after you opt out so that your preference not to receive marketing can continue to be respected.
(k)Security and technical logs
For a period proportionate to the relevant security, operational and fraud-prevention purpose.
10.3.1When Personal Data is no longer required, BoxBox will take reasonable steps to:
(a)permanently delete it;
(b)securely destroy physical records;
(c)anonymise the information so that it can no longer identify an individual; or
(d)archive the information where legally required.
Protecting Personal Data is a core priority for BoxBox.
We implement appropriate technical, organisational and administrative measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.
No online service can guarantee absolute security. While BoxBox seeks to maintain appropriate safeguards, we cannot guarantee that information transmitted over the internet or stored electronically will never be accessed, disclosed, altered or destroyed.
11.1.1Depending upon the circumstances, our security measures may include:
(a)encryption of data in transit using industry-standard protocols;
(b)encryption of sensitive data at rest;
(c)secure password hashing;
(d)multi-factor authentication for administrative accounts;
(e)role-based access controls;
(f)security monitoring;
(g)intrusion detection systems;
(h)vulnerability management;
(i)regular software updates;
(j)disaster recovery procedures;
(k)backup and restoration processes;
(l)secure development practices;
(m)employee confidentiality obligations; and
(n)periodic security reviews.
11.2.1Users also play an important role in protecting their information. You should:
(a)choose a strong password;
(b)keep your login credentials confidential;
(c)avoid sharing your account;
(d)log out from shared devices;
(e)promptly notify BoxBox of suspected unauthorised access; and
(f)keep your device software up to date.
11.3.1If BoxBox becomes aware of a Personal Data breach, BoxBox will take reasonable steps to investigate, contain and remediate the incident.
11.3.2Where required under applicable law, BoxBox will notify the competent data protection authority and affected individuals of the breach and provide information required by applicable law.
11.3.3BoxBox maintains internal procedures intended to enable suspected security incidents and Personal Data breaches to be identified, assessed, escalated and addressed appropriately.
Subject to applicable law and any permitted exceptions, you may have rights regarding Personal Data processed by BoxBox.
These may include the rights described below.
12.1.1You may request information concerning BoxBox's processing of your Personal Data and, where applicable, obtain access to or a copy of Personal Data relating to you.
12.1.2This may include information regarding:
(a)the categories of Personal Data being processed;
(b)the purposes of processing;
(c)relevant recipients or categories of recipients;
(d)applicable safeguards for cross-border transfers; and
(e)other information required under applicable law.
Where applicable, you may request that certain Personal Data be provided to you, or transferred to another Controller where technically feasible and legally required, in a machine-readable format.
You may request correction or updating of inaccurate or incomplete Personal Data. Certain information may also be updated directly through your Account.
12.4.1You may request deletion of Personal Data in circumstances provided by applicable law.
12.4.2BoxBox may continue to retain certain information where retention is required or permitted by applicable law, including where necessary to comply with legal obligations or establish, exercise or defend legal claims.
Where permitted by applicable law, you may request that processing of particular Personal Data be restricted.
You may object to and request that BoxBox stop processing your Personal Data for direct marketing purposes, including profiling connected with direct marketing. You may also use the unsubscribe and preference-management mechanisms described in Section 15.
12.7.1Where applicable, you may object to certain decisions based on automated processing, including profiling, particularly where such decisions have legal consequences or materially affect you.
12.7.2Where required by applicable law, you may also request human review or intervention in relation to such a decision.
Where BoxBox relies upon your consent, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing undertaken before consent was withdrawn.
12.9.1If you believe that BoxBox has processed your Personal Data in breach of applicable data protection law, you may:
(a)contact BoxBox using the details set out in Section 19; and
(b)submit a complaint to the competent UAE data protection authority where you are entitled to do so.
12.9.2BoxBox encourages Users to contact us so that we have an opportunity to investigate and respond to the concern.
12.10.1Requests may be submitted to privacy@boxbox.ae.
12.10.2BoxBox may request information reasonably necessary to verify your identity before responding to a request.
12.10.3BoxBox will respond to valid requests within the period required by applicable law and may decline or limit a request where permitted by law.
14.1.1BoxBox may use analytics services to better understand how users interact with the Platform. Analytics information may include:
(a)page views;
(b)click behaviour;
(c)session duration;
(d)navigation patterns;
(e)crash reports;
(f)performance metrics; and
(g)feature adoption.
14.1.2Analytics information is generally used in aggregated or pseudonymised form wherever reasonably practicable.
15.1.1BoxBox may send you information about promotions, discounts, referral programmes, new Platform features, automotive content and other promotional matters where you have consented to receive such communications or where otherwise expressly permitted by applicable law.
15.1.2Where consent is required, marketing consent will be requested separately and will not be a condition of using core Platform services unless the relevant communication is necessary to provide those services.
15.1.3Where BoxBox conducts telephone marketing, BoxBox will do so in accordance with applicable UAE telemarketing requirements, including applicable consent, registration, permitted-contact and Do Not Call requirements.
15.2.1You may withdraw your consent to marketing or opt out of marketing communications at any time by:
(a)using the unsubscribe mechanism included in the communication;
(b)changing your Account or notification preferences, where available; or
(c)contacting BoxBox at privacy@boxbox.ae.
15.2.2BoxBox will honour valid requests to stop direct marketing in accordance with applicable law.
15.2.3Withdrawing from marketing communications will not prevent BoxBox from sending non-promotional communications that are reasonably necessary to administer your Account or provide services you have requested. These may include booking confirmations, quotation notifications, security alerts, payment information, service updates and other operational communications.
The Platform may contain links to third-party websites, applications or services operated independently of BoxBox. BoxBox is not responsible for the privacy practices, content or security of third-party services. Users should review the applicable privacy policies of those third parties before providing Personal Data.
The Platform is intended for individuals aged 18 years or older. BoxBox does not knowingly collect Personal Data from children without appropriate legal authorisation. If BoxBox becomes aware that Personal Data relating to a child has been collected in circumstances where such collection is not permitted by applicable law, we will take reasonable steps to delete that information. Parents or guardians who believe that a child has provided Personal Data to BoxBox may contact us using the details set out below.
18.1.1BoxBox may amend this Privacy Policy from time to time to reflect changes in:
(a)applicable law or regulation;
(b)the Platform;
(c)BoxBox's services or business model;
(d)technology or security practices;
(e)service providers; or
(f)the manner in which Personal Data is processed.
18.1.2Where BoxBox makes a material change, we may notify Users through the Platform, by email or by another appropriate means.
18.1.3The “Last Updated” date at the beginning of this Privacy Policy indicates when the most recent version took effect.
18.2.1Your continued use of the Platform after an updated Privacy Policy takes effect may constitute acknowledgement of the updated Privacy Policy.
18.2.2Where an amendment introduces processing for which applicable law requires consent, BoxBox will obtain that consent separately. Continued use of the Platform will not, by itself, constitute consent where affirmative consent is legally required.
Questions, requests or concerns relating to this Privacy Policy or BoxBox's processing of Personal Data may be directed to:
Operations
BoxBox LLC-FZ
Meydan Free Zone
Dubai
United Arab Emirates
Email: privacy@boxbox.ae
19.2.1If BoxBox appoints a Data Protection Officer or another person whose contact details are required to be published under applicable law, the relevant details will be made available through this Privacy Policy or the Platform.
19.2.2BoxBox will respond to privacy enquiries and valid data-subject requests within the periods required by applicable law.
This Privacy Policy shall be governed by and construed in accordance with the laws of the United Arab Emirates, except where mandatory data protection laws of another jurisdiction apply. Nothing in this Privacy Policy limits any statutory rights that cannot lawfully be excluded.