Privacy policy.
What we collect, why, how long we keep it, and how to ask us to delete it. Plain English — no dark patterns.
Last updated: May 27, 2026.
We collect three categories of data: (1) the contact + order details you give us in quotes, samples, and contact forms; (2) basic analytics (page views, anonymized IP, country) via Plausible, which we load only after you accept the cookie banner; (3) error traces via Sentry, scrubbed of PII before storage.
We do not sell, rent, or share your data with advertisers. We share order data only with the production partners and shipping carriers required to fulfill the order.
Quote and order data is retained for seven years to satisfy tax and accounting requirements. Analytics data is anonymized at ingestion and retained for two years. Error traces are retained for 90 days.
You may request a copy or deletion of your data at any time by emailing privacy@customboxarena.com. We respond within 30 days and verify identity before any deletion runs.
We use industry-standard security controls — TLS in transit, encryption at rest, principle-of-least-privilege access. We have not had a reportable breach to date and will disclose any future breach within 72 hours per the GDPR standard.
Questions: privacy@customboxarena.com.