Privacy Policy

Last updated: 15 July 2026

1. Who we are

This policy explains how Carton Boxes Singapore (CartonBoxes.Sg) collects, uses, discloses and protects personal data, in line with the Personal Data Protection Act 2012 of Singapore (PDPA). It applies to this website and to enquiries, quotations and orders you make with us by any channel. Please read it together with our Terms and Conditions and Return and Refund Policy.

2. What personal data we collect

We collect only the data needed to serve you, which may include:

• Your name and, where relevant, your company name.
• Your contact number and email address.
• Your delivery or collection address.
• Order and quotation details, such as the products, sizes and quantities you request.
• Records of your enquiries and our correspondence with you.

We do not ask for or store your card numbers or bank login details on this website. Please do not send us full payment card details by email or through our forms.

3. How we collect it

We collect personal data when you fill in our order form or custom box enquiry, call or email us, visit our showroom, or otherwise ask us for products, prices or support. Some limited technical information is collected automatically when you browse the site, as described in the cookies and analytics section.

4. How we use your data

We use your personal data to:

• Prepare quotations and respond to your enquiries.
• Process, fulfil and deliver your orders.
• Arrange self collection or delivery and issue invoices and receipts.
• Provide after-sales support, including returns and warranty claims.
• Keep proper business records and meet legal or tax obligations.

We only use your data for the purposes above, or for a purpose that would reasonably be expected, unless you give further consent or the law allows it.

5. Consent

By giving us your personal data to obtain a quotation, place an order or make an enquiry, you consent to us using it for the purposes described in this policy. You may withdraw your consent at any time by contacting our Data Protection Officer, and we will explain the likely effect, such as being unable to complete an order that is in progress.

6. Who we share data with

We do not sell or rent your personal data. We share it only where needed to serve you or to meet the law, for example with:

• Delivery drivers or logistics partners, to deliver your order.
• Service providers who support our website and communications, under confidentiality obligations.
• Government or regulatory authorities, where we are required by law.

7. Cookies and analytics

This website uses cookies and a website analytics tool, Microsoft Clarity, to understand how visitors use the site so we can improve it. This may capture usage information such as pages viewed, clicks, and general device and browser details. This information is used in aggregate to improve the website and is processed by Microsoft on our behalf, which may involve processing outside Singapore under appropriate safeguards. You can block or delete cookies in your browser settings, though some parts of the site may then work less smoothly.

8. How we protect your data

We make reasonable security arrangements to protect personal data against unauthorised access, use, disclosure or loss. These include restricting access to staff who need it, using secure connections on our website, and keeping order records in controlled systems. No method of transmission or storage is completely secure, but we work to keep your data safe and to correct any issue promptly.

9. How long we keep it

We keep personal data only for as long as needed to fulfil the purposes above and to meet legal, accounting or tax requirements. When data is no longer required, we take steps to delete it or to remove the details that identify you.

10. Your rights and choices

Under the PDPA you may:

• Ask what personal data we hold about you and how it has been used.
• Ask us to correct data that is inaccurate or out of date.
• Withdraw your consent to our use of your data.
• Ask us not to contact you with marketing messages.

To make a request, contact our Data Protection Officer below. We will respond within a reasonable time. A reasonable fee may apply to an access request, and we will tell you before proceeding.

11. Data Protection Officer

If you have any questions, requests or complaints about how we handle your personal data, please contact our Data Protection Officer:

12. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The latest version will always be shown on this page with the updated date at the top. Please check back for any changes.