privacy policy

Thank you for visiting eu.bbox.com, uk.bbox.com, fr.bbox.com, it.bbox.com, nl.bbox.com, and be.bbox.com (hereinafter referred to as the “Website”). The Website is operated by b.box for kids Europe B.V. (hereafter referred to as "b.box", "we", "us", or "our")

This privacy policy outlines our privacy practices as required by the EU and the UK General Data Protection Regulation (“(UK-)GDPR”) and explains how we use the personal data we collect from you when you use the Website. By using the Website, you agree that we may use your information as described in this privacy policy.

Topics:

  • What data do we collect?
  • How do we collect your data?
  • Why do we collect your data?
  • Purposes and legal grounds for processing
  • Data Sharing and Disclosure
  • Security
  • Marketing
  • What are your data protection rights under (UK-)GDPR?
  • What are cookies?
  • How do we use cookies?
  • What types of cookies do we use?
  • How to manage your cookies
  • Privacy policies of other websites
  • Changes to our privacy policy
  • Children's Privacy
  • Transfer of Data Abroad
  • Unsubscribe
  • How to contact us
  • How to contact the appropriate authorities

 

what data do we collect?

b.box collects the following data:

  • Personal identification information: Name, email address, phone number, your IP address and your other data that can be used to identify your online activities etc.;
  • The date of birth of you or your child;
  • Commercial information: information about your purchases.
    Examples: order history, products you considered;
  • Online Activities: limited information about how you found and use our Website.
    Examples: how you found our Website (e.g., advertisements, search engines, bookmarks); how you interact with our Website (e.g., pages you viewed on our Website, items you searched for, or added to your shopping cart while on our Website); the type of equipment and browser you use. For specific information, please refer to the section below about ‘cookies’.
  • Geolocation data: information about where you are and when you use the Website;
  • Financial information, such as credit card details;
  • Billing information, such as name, address, phone number;
  • Shipping information, such as name, address, phone number; and
  • User Generated Content: information that you post to our Website.

 

how do we collect your data?

You directly provide b.box with most of the data we collect. We collect data and process data when you:

  • Opt-in to receive communications and promotional materials from us
  • Register on the Website  
  • Participate in our sweepstakes, contests, or promotions
  • Purchase products via the Website
  • Provide comments or feedback to us by email
  • Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.
  • Use or view the Website via your browser’s cookies.

 

why do we collect your data?

We collect, use and disclose your personal data for several reasons, including:

  • to carry out our obligations as a result of any contract entered into between you and us and to provide you with the information and services that you request from us, including to set up, manage and administer your account and to make, settle and pay payments;
  • to notify you about changes to the products and services that we offer and (where you have indicated your consent) to directly market these products and services to you;
  • to administer our Website for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
  • to allow you to participate in interactive features of our products and services;
  • as part of our efforts to keep our products and services safe and secure;
  • to measure or understand the effectiveness of our advertising and marketing;
  • for statistical and research purposes (including market research, marketing and data analysis purposes);
  • to identify your consumer behaviour, habits and preferences;
  • to analyse your credit risk (if applicable);
  • to handle payment and collection processes to and from customers;
  • to ensure the effective operation of software and IT services procured by us (including disaster recovery);
  • for anti-money laundering, prevention of terrorist financing, and identity verification purposes;
  • to comply with licensing and regulatory requirements that are applicable to us; and
  • for other reasons with your consent.

 

purposes and legal grounds for processing

We process your personal data for the purposes outlined above, relying on the following lawful bases, for example:

  • Consent: For direct marketing activities targeting website users who are not yet customers.
  • Performance of a Contract: To fulfil our contractual obligations, including delivering agreed-upon services, managing payments and collections, and assessing credit risk.
  • Legal Obligations: To ensure the safety and security of our products and services, conduct know-your-customer (KYC) checks, and comply with applicable licensing and regulatory requirements, including those related to anti-money laundering and counter-terrorism financing.
  • Legitimate Interests: To operate and maintain our website, send service-related messages and direct marketing communications to existing customers, advertising, and support activities such as market research, marketing and data analysis, and IT service management.

You have the right to object to the processing of your personal data where it is based on our legitimate interests. If you do so, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where the processing is necessary for the establishment, exercise, or defence of legal claims.

 

data sharing and disclosure

We share the information we collect with various third parties for a range of purposes. We share identification information, commercial information, and online activities with the following third parties: 

  • Advertising Partners.  To deliver relevant advertising to you, we may share your personal data – as well as aggregated or anonymous information that doesn’t identify you – with selected advertising partners and social media platforms.  This helps tailor the ads you see or reduce the number of ads shown to you across other websites and apps.  Social media platforms we work with include Facebook and Instagram. b.box also collaborates with Google, Bing, Pinterest, Tiktok, YouTube and others to show you relevant advertising.
  • Storage providers. We store some of the information we collect from you with third-party storage providers. For example, b.box uses Shopify to host its European Website.

We share identification data and financial information with the following companies:

  • Payment processors.  To process your payments. For example, b.box partners with Shopify and PayPal to facilitate the payment process on the Website.
  • Related companies.  To process orders with our related companies. For example, we may share your information with b.box for kids Pty Ltd our corporate headquarters in Australia.  For more information about the transfer of information to Australia, please see “Transferring Information Abroad.”
  • Storage providers.  We store some of the financial information we collect from you with external storage providers. For example, we use Microsoft for cloud hosting purposes.

Other ways we may share your information include:

  • Business negotiations and transfers. We may share your information with another company if we decide to sell, buy, or otherwise reorganise our business.
  • User Generated Content. When you post user generated content, other users may see that information. If you have given permission, we may also use the user generated content you post on or through our Website for advertising campaigns and other promotional purposes.
  • Government agencies. We may also share your information with law enforcement agencies, government officials or other public authorities if this is necessary to comply with legal requirements or to share your information in connection with an investigation of fraud, administration of justice, intellectual property infringements or other activity that is unlawful or that may expose us or you to legal liability.
  • Other third parties. We may also share your information with other third parties when you have given permission for this (for example when we collaborate with them on promotional offers).

All third-party providers are contractually bound to ensure the protection of your personal data.

 

security

We take reasonable security measures to protect the confidentiality of personal information. Our Website uses Secure Sockets Layer (SSL) technology to protect your information as it is transmitted to us.  If we share information with third parties, we will use reasonable efforts to ensure that these third parties keep the information secure and use it only in the manner described in this Privacy Policy.

 

marketing

We (and permitted third parties) may contact you for direct marketing purposes via social and direct messages, post, telephone, email and SMS/MMS. We will obtain your consent before contacting you where required by relevant laws. This marketing may relate to:

  • information about other goods and services we offer that are similar to those that you have already used or enquired about;
  • products and services we (or permitted third parties) feel may interest you;
  • upcoming events, promotions and new products/services or other opportunities as well as those of selected third parties.

If you no longer wish to receive marketing communications from us, you may:

    • Contact b.box;
    • Contact b.box customer service via the live chat function; or
    • Click on the unsubscribe link on any marketing communication that you receive from us. 


 

what are your data protection rights?

b.box would like to make sure you are fully aware of all your data protection rights. Every user is entitled to the following:

  • The right to access – You have the right to request b.box for copies of your personal data. We may charge you a small fee for this service.
  • The right to rectification – You have the right to request that b.box correct any information you believe is inaccurate. You also have the right to request b.box to complete the information you believe is incomplete.
  • The right to erasure – You have the right to request that b.box erase your personal data, under certain conditions.
  • The right to restrict processing – You have the right to request that b.box restrict the processing of your personal data, under certain conditions.
  • The right to object to processing – You have the right to object to b.box’s processing of your personal data, under certain conditions.
  • The right to data portability – You have the right to request that b.box transfer the data that we have collected to another organisation, or directly to you, under certain conditions.

We should respond to your request within one month of receiving it. This period may be extended by a further two months if necessary, depending on the complexity and number of requests. If this is the case, we will inform you of the extension and the reasons for it.

If you would like to exercise any of these rights, please contact us at:

Email: customerserviceemea@bbox.com

Mail: b.box for kids Europe B.V, Koninginneweg 152H, 1075 EE Amsterdam, Netherlands

 

cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our Website, we may collect information from you automatically through cookies or similar technology.

For further information, visit allaboutcookies.org.

How do we use cookies?

b.box uses cookies in a range of ways to improve your experience on our Website, including:

  • Keeping you signed in;
  • Understanding how you use our Website; and
  • Marketing.

What types of cookies do we use?

There are a number of different types of cookies, however, our Website uses:

  • Necessary – Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
  • Preferences - Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
  • Statistics - Statistic cookies help us to understand how visitors interact with websites by collecting and reporting information anonymously.
  • Marketing – Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third-party advertisers.

 

how to manage cookies

You can set and change you cookie preferences though our cookie manager on the Website , or set your browser not to accept cookies. However, in a few cases, some of our Website features may not function as a result.

 

privacy policies of other websites

b.box Website contain links to other websites. Our privacy policy applies only to our Website, so if you click on a link to another website, you should read their privacy policy.

 

changes to our privacy policy

We reserve the right, at our discretion, to modify or remove portions of this privacy policy at any time. This policy is in addition to any other terms and conditions applicable to the Website. b.box keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 10 June 2025.

 

children's privacy

You must be at least 16 years of age to use the Website, and at least 18 years of age to register on our Website or make purchases in our online store. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information of a child under 16, we will take steps to delete the information as soon as possible.

 

transfer of data abroad

As part of our operations, your personal data may be transferred to, and processed in, countries outside the European Economic Area (“EEA”), or the UK, including Australia.  These transfers are necessary for the provision of our services and for the purposes described in this privacy policy.

Australia has not been granted an adequacy decision by the European Commission, which means that its data protection laws may not provide the same level of protection as those in the EEA.  However, we ensure that any such transfers are conducted in accordance with applicable data protection laws, including the (UK-)GDPR.

Where personal data is transferred to Australia, we implement appropriate safeguards to protect your information. These may include standard contractual clauses approved by the European Commission, or other legally recognised mechanisms, to ensure your personal data remains protected to the standard required by the (UK-)GDPR.

 

unsubscribe

You may unsubscribe from our promotional emails at any time by following the unsubscribe link included in each email.

 

how to contact us

If you have any questions about b.box’s privacy policy, the data we hold on you or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email: customerserviceemea@bbox.com

Mail: b.box for kids Europe B.V, Koninginneweg 152H, 1075 EE Amsterdam, Netherlands.

 

how to contact the appropriate authority

Should you wish to report a complaint or if you feel that b.box has not addressed your concern in a satisfactory manner, you may contact the competent supervisory authority. For the EU, and particularly The Netherlands, this is the Autoriteit Persoonsgegevens, Hoge Nieuwstraat 8, 2514 EL Den Haag. For the UK this is the Information Commissioner's Office, Wycliffe House Water Lane, Wilmslow, Cheshire SK9 5AF.