Privacy Policy

1. Scope of this policy

This policy covers personal information processed through this website, through email and telephone enquiries, through the contact form, and through the delivery of our computer integrated systems design services. Those services include custom transit case engineering, fleet tracking integration, cargo sensor networks, warehouse control systems, route telemetry pipelines and field service support. The policy also describes the limited personal information that may be processed when equipment is tracked, when a case is handed over, when a driver signs for a shipment or when a field technician inspects a case.

This policy does not cover the practices of any other organisation. If you reach our website through a link from another site, or if a freight partner handles your shipment under its own conditions, that organisation is responsible for its own privacy practices and you should review its notices separately. Where we act as a processor for a business customer, the terms of the relevant service agreement and the instructions of that customer govern the processing, and this policy applies only to the extent it does not conflict with those instructions.

The policy applies to all visitors, prospective customers, current customers, suppliers, contractors, field crews and other individuals whose information reaches us in connection with the case works. By using the website or contacting us, you acknowledge that you have read this policy.

2. Who we are

BOXAVIATION LLC is a limited liability company organised in the United States, with its case works and principal contact point at 2915 E Amaranth Dr, St George - 84790-5018, United States (US). The company designs and integrates systems that protect equipment in transit, that record where equipment has been and that support the crews who receive it. For the purposes of applicable data protection law, BOXAVIATION LLC is the controller of the personal information described in this policy, except where it acts as a processor on behalf of a business customer.

Our contact email address is orders@boxaviation.buzz and our contact telephone number is +13257329559. Enquiries about this policy, requests to exercise a privacy right, and questions about a specific program may be sent to that email address or made by telephone during business hours. We ask that written requests be marked clearly as a privacy request so that they are routed to the responsible person without delay.

3. Information we collect

The information we collect depends on how you interact with us. We limit collection to what is reasonably necessary for the purpose at hand, and we do not ask for information that we cannot explain a use for.

Contact and identity information includes your name, organisation, job title, email address, telephone number, postal address and any details you include in a message. When you use the contact form, the information you type is used to prepare an email in your own mail application, and the content is then transmitted through your email provider and ours.

Enquiry and project information includes the equipment you want protected, the routes it travels, the handovers involved, previous damage events, photographs you choose to send and the requirements you describe. This information often contains commercial details about your operations, and we treat it with the same care as personal information.

Transactional information includes quotations, purchase orders, invoices, delivery notes, insurance references and records of payments. It may contain the name and contact details of the person who authorised a purchase and the shipping address for a case.

Operational and telemetry information includes location points, vehicle identifiers, device serial numbers, sensor readings such as shock, tilt, temperature, humidity and door state, custody scan events and route annotations. Where a tracking device is fitted to a vehicle, this information may relate to an identifiable driver or field technician.

Technical information includes the internet protocol address used to reach the website, the browser and operating system in use, the pages requested, the referring page and the time of the request. We receive this information in ordinary server logs, which help us keep the site available and diagnose faults.

Communication records include emails, telephone notes, meeting minutes and support tickets. We keep a record of the advice we give so that later questions can be answered consistently and so that field teams receive the same instructions as the office.

4. How we collect information

Most information is collected directly from you. You may send it by email, provide it in the contact form, dictate it during a telephone call, or hand it to an engineer during a site visit. When a business customer engages us, the customer may provide information about its own employees, drivers or contractors so that we can configure a tracking or support program.

Some information is generated automatically. Server logs are created whenever a page is requested. Tracking devices, beacons and sensors generate records as they operate, and warehouse scan points create custody events when a case moves. Route telemetry pipelines combine these sources and associate them with case and vehicle identifiers.

We may also receive information from third parties. A freight partner may report a delivery exception, an insurance adjuster may share a damage report, a supplier may confirm an order or a public register may provide a business address. Where we receive personal information from a third party, we use it for the purpose for which it was provided and handle it in accordance with this policy.

5. Why we use information

We use personal information to respond to enquiries and to prepare quotations, proposals and engineering briefs. We use it to design, build, test and deliver transit cases, to configure tracking and sensing hardware, to integrate warehouse control systems and to operate telemetry pipelines. We use it to coordinate shipments, to confirm handovers, to investigate damage and to support the crews who receive equipment in the field.

We use information to maintain and improve the website, to diagnose faults, to understand which pages are useful and to protect the site against misuse. We use contract and transaction records to fulfil our obligations to customers and suppliers, to keep accurate accounts, to meet tax and insurance requirements and to defend or pursue legal claims where necessary.

We use communication records to provide consistent support, to train our engineers and to improve our procedures. We may use aggregated and de identified telemetry to understand how equipment behaves in transit and to improve case designs, sensor thresholds and route planning. Aggregated information is prepared so that it no longer identifies a person.

Where we have a lawful basis to do so, we use business contact details to send occasional updates about our services. Every marketing message includes a way to opt out, and opting out never affects the delivery of a service you have already purchased.

6. Legal bases for processing

Where data protection law requires a legal basis for processing, we rely on one or more of the following. Performance of a contract applies when we process information in order to provide services you or your organisation have requested, including case engineering, tracking, telemetry and support. Legitimate interests applies when we process information to run and secure our business, to improve our services, to respond to enquiries and to prevent fraud, provided that those interests are not overridden by your rights.

Consent applies where we ask for it specifically, for example before sending marketing email to an individual who has not previously done business with us, or before using a non essential cookie. You may withdraw consent at any time, and withdrawal does not affect processing that took place before the withdrawal.

Legal obligation applies when we must retain or disclose information to comply with tax, accounting, safety, transport or other applicable law. Vital interests may apply in the rare case where processing is necessary to protect someone from serious harm. Where we act as a processor for a business customer, that customer is responsible for identifying the legal basis and for providing notices to the individuals concerned.

7. Cookies and similar technologies

This website is built as a set of static pages and does not set advertising cookies or use cross site tracking pixels. The site may use a small amount of local browser storage to remember a preference, such as whether the navigation menu is open, or to support the behaviour of the page while you are viewing it. This storage does not identify you by name and is not shared with advertising networks.

Our hosting provider and any content delivery service used to serve the site may keep technical logs and may set strictly necessary cookies for security, load balancing and abuse prevention. These are not used to build a profile of your interests. If we introduce analytics or any optional cookie in the future, we will describe it in this section and, where required, ask for your consent before it is set.

You can control cookies and storage through your browser settings. Blocking strictly necessary cookies may affect the way some pages work, but the main content of this site remains readable without JavaScript and without cookies.

8. Telemetry and sensor data

Telemetry is central to our service, and it deserves a clear explanation. Devices fitted to vehicles, trailers or cases may record location, motion, shock, tilt, temperature, humidity, door state and similar environmental measurements. Custody events are recorded when a case is scanned at a warehouse, loaded onto a vehicle or signed for at a delivery point. Route telemetry pipelines combine these records and attach them to case, device and shipment identifiers.

Some of this information can relate to an identifiable individual, for example when a vehicle is assigned to a named driver or when a scan captures the name of the person who signed. We process that information to provide the tracking and custody service, to investigate damage and exceptions, to support the field crew and to improve the reliability of the system. We minimise the personal element where we can, for example by using vehicle and case identifiers rather than driver names wherever the operational purpose can be met without a name.

Tracking programs are configured with the business customer, and access to the resulting data is limited to the people who need it to perform their roles. Field crews are informed about the tracking and sensing that applies to the vehicles and equipment they handle. Where local law requires consultation with worker representatives or a specific notice, the business customer is responsible for arranging it, and we provide the technical information needed to support that process.

Telemetry is retained according to the retention schedule described later in this policy, which is set with reference to the operational, contractual and legal needs of each program. Sensor data may be kept longer in aggregated or de identified form for engineering analysis.

9. How we share information

We do not sell personal information. We do not rent contact lists. We share information only where there is a clear operational or legal reason and only to the extent needed for that reason.

We share information with service providers who perform functions on our behalf, such as hosting, email delivery, accounting, payment processing, freight and installation. Those providers are bound by contract to use the information only for the services they provide and to protect it appropriately. We share information with a business customer when we act as its processor, and with its authorised users of a tracking or warehouse control system.

We may share information with professional advisers such as lawyers, insurers and auditors when necessary. We may disclose information to a public authority where the law requires it, where a valid legal request is received, or where disclosure is necessary to protect the safety of people, the integrity of equipment or the rights of the company.

If the business is reorganised, merged or sold, information may be transferred as part of the transaction. In that case the recipient will be bound by this policy or by a policy that provides equivalent protection, and we will take reasonable steps to inform affected individuals where required.

10. Service providers and processors

We select service providers with care and review them periodically. Our hosting provider stores the website files and server logs. Our email provider handles correspondence and the messages prepared through the contact form. Our accounting and invoicing providers process the contact and transaction details needed to issue and record invoices. Freight partners receive the shipping details needed to move equipment and to confirm delivery.

Where a provider processes personal information on our behalf, we put a written agreement in place that sets out the scope of the processing, the security measures required, the conditions for using sub processors and the obligations on the return or deletion of information at the end of the arrangement. We do not permit a provider to use our information for its own marketing.

Some providers operate from countries other than the United States. Where information is transferred across borders, we take steps to ensure that the transfer is permitted by applicable law and that appropriate safeguards are in place, as described in the international transfers section below.

11. How long we keep information

We keep information only for as long as it is needed for the purpose for which it was collected, or for as long as the law requires. Enquiries that do not result in a project are usually deleted within twenty four months. Project files, including drawings, acceptance records and correspondence, are kept for the life of the equipment and for a reasonable period afterwards so that repairs and questions can be handled consistently.

Transaction and accounting records are kept for the period required by tax and company law, which in the United States is generally seven years. Contract records are kept for the duration of the agreement and for the period during which claims could be brought. Telemetry is kept according to the retention setting agreed with each customer, typically between ninety days and twenty four months for detailed records, with longer retention available in aggregated form.

Support records are kept for three years after the last interaction so that a recurring fault can be recognised. Marketing preferences are kept until you unsubscribe or object, after which we retain a minimal suppression record so that you are not contacted again in error. When information is no longer needed, it is deleted or de identified in a secure manner.

12. How we protect information

We use technical and organisational measures to protect personal information against loss, misuse and unauthorised access. These measures include encrypted connections to the website and to email where the provider supports them, access controls that limit data to the people who need it, separate accounts for administrative work, routine software updates and backups that are tested for restoration.

Our offices and case works are access controlled, paper records are stored in locked furniture and devices are protected with passwords and full disk encryption. Staff and contractors receive privacy and security guidance, and access to customer systems is removed promptly when a role ends. We review our arrangements periodically and adjust them as our services and the risk landscape change.

No system is perfectly secure. If a security incident affects personal information, we will investigate promptly, take steps to contain the incident and notify affected individuals and authorities where the law requires it. We ask that you help by using a secure email account for sensitive information and by telling us immediately if you suspect that a message claiming to be from us is not genuine.

13. International transfers

BOXAVIATION LLC is based in the United States, and the information described in this policy is primarily processed there. Some of our service providers and some of our customers operate in other countries, so information may be transferred across borders in the course of providing a service or responding to an enquiry.

Where we transfer personal information from a country with strict data protection rules to another country, we rely on an appropriate safeguard. Depending on the circumstances, this may be a contractual arrangement using approved standard clauses, an adequacy decision covering the destination, or a specific derogation permitted by law. We assess the destination and the provider before a transfer and review the arrangement when the provider or the scope of processing changes.

You may ask for more information about the safeguards that apply to a particular transfer by writing to orders@boxaviation.buzz. Where a business customer instructs us to transfer information to a particular location, the customer is responsible for ensuring that the transfer is lawful, and we will cooperate in putting the necessary terms in place.

14. Your rights and choices

Depending on where you live, you may have the right to know whether we hold personal information about you and to receive a copy of it. You may ask us to correct information that is inaccurate or incomplete, and you may ask us to delete information that we no longer have a lawful reason to keep. You may object to processing based on legitimate interests and ask us to restrict processing while a request is considered.

Where processing is based on consent, you may withdraw that consent at any time. You may opt out of marketing email using the link in the message or by writing to us. If you believe that our processing does not comply with applicable law, you may complain to a supervisory authority in your country or state, and you may also contact us first so that we can try to resolve the matter directly.

To make a request, write to orders@boxaviation.buzz with enough detail for us to identify you and the information concerned. We may ask for reasonable verification before acting, particularly where the request concerns sensitive information or an account you do not directly control. We will respond within the period required by applicable law, which is generally thirty days, and we will explain any extension where a request is complex. There is no charge for the first copy of your information.

If you are a driver, technician or employee of a business customer, some requests may need to be directed to that customer, because the customer decides the purpose and scope of the processing. Where that is the case, we will tell you and, if the customer agrees, provide the assistance needed to answer your request.

15. Privacy for children

Our website and services are intended for businesses and professionals. We do not knowingly collect personal information from children under the age of thirteen, and we do not direct advertising or marketing to children. If you believe that a child has provided personal information to us, please contact orders@boxaviation.buzz and we will delete the information promptly.

Where a customer provides information about a minor in connection with a training program or a site visit, that customer is responsible for obtaining any consent required by law. We will handle the information only for the purpose for which it was provided and will delete it when the purpose is complete.

16. Marketing communications

We send marketing email only where we have a lawful basis to do so. Existing business contacts may receive occasional updates about services that are closely related to work already carried out, unless they have opted out. New contacts receive marketing only with consent where consent is required. Every marketing message identifies the sender, includes a working unsubscribe link and provides a postal address.

You may opt out at any time. We will act on the request promptly and will keep a minimal suppression record so that the same address is not added again by mistake. Opting out of marketing does not affect service messages, such as a quotation, an invoice, a shipping notice or a support reply, which are needed to deliver what you have asked for.

We do not sell contact details to list brokers, and we do not permit a partner to send marketing on our behalf without a written agreement that requires compliance with applicable marketing law.

17. Third party websites and links

This website may link to external sites, for example a mapping service, a freight partner or a professional body. Those sites are not operated by BOXAVIATION LLC, and this policy does not apply to them. We do not control their content, their cookies or their privacy practices, and we are not responsible for the way they handle information.

We encourage you to read the privacy notice of any external site before providing personal information there. A link from our site does not imply that we endorse the practices of the destination. If you believe that a link from our site points to something harmful or misleading, please tell us and we will review it.

18. Automated decision making

We do not make decisions with legal or similarly significant effects about individuals solely by automated means. Our telemetry systems generate alerts and exception flags, but those alerts are reviewed by people before they lead to a decision about a shipment, a claim or a service outcome. A sensor alert may prompt a call to a driver or a technician, and a human decides what to do next.

Data from tracking and sensing systems is used to improve thresholds and routing, and some routine classification, such as identifying a missed handover or a route deviation, is performed automatically. Where an automated alert affects you, you may ask for an explanation and for human review by contacting orders@boxaviation.buzz.

19. Changes to this policy

We review this policy regularly and update it when our services, our providers or the law change. The effective date at the top of the page shows when the current version took effect. If a change materially affects how we use personal information, we will take reasonable steps to inform affected customers and will, where required, ask for consent before the change applies to them.

The current version is always available on this page. We recommend that you check it before starting a new program or returning to the site after a long absence. Continuing to use the website or our services after an update means that you accept the revised policy, to the extent permitted by law.

20. How to contact us

Questions about this policy, requests to exercise a right and concerns about the handling of information should be sent to the contact point below. We aim to acknowledge every privacy request within two business days and to resolve it within the period required by law.