Privacy Policy

Information We Collect

We collect information you provide directly to us when you:

• Fill out a contact or quote request form
• Place an order for products or services
• Communicate with us via email
• Subscribe to our newsletter or updates

This information may include your name, email address, phone number, postal address, city, state, ZIP code, company name, job title, and any message content you provide.

We also automatically collect certain information when you visit our website, including your IP address, browser type and version, operating system, referring URL, pages visited, time and date of your visit, and time spent on each page. This information is collected through cookies, server logs, and similar technologies. We use this data in aggregate to understand website traffic patterns and improve our user experience. We do not use this data to personally identify individual visitors.

How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders and requests
• Respond to your inquiries and provide customer support
• Send you relevant information about our services
• Improve our website and services
• Comply with legal obligations

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With service providers who assist in our business operations
• When required by law or legal process
• To protect our rights, privacy, safety, or property
• In connection with a merger, acquisition, or sale of assets

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption for data transmitted through our website, secure storage of any customer records, access controls limiting employee access to personal data on a need-to-know basis, and regular security reviews of our systems. We do not store credit card numbers on our servers; all payment processing is handled by PCI-compliant third-party payment processors. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. In the unlikely event of a data breach affecting your personal information, we will notify you and any applicable regulatory authorities as required by Oregon data breach notification laws (ORS 646A.604) within the legally mandated timeframe.

Cookies and Tracking

Our website may use cookies to enhance your browsing experience. Cookies are small text files stored on your device that help us understand how you use our website. We use the following types of cookies:

• Essential Cookies: Required for basic site functionality such as page navigation and form submissions. These cannot be disabled.
• Analytics Cookies: Help us understand how visitors interact with our website by collecting anonymous usage data. We may use tools such as Google Analytics to gather this information.
• Preference Cookies: Remember your settings and preferences (such as preferred contact method) to enhance your experience on return visits.

You can configure your browser to refuse all or some cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, some parts of the website may become inaccessible or not function properly. Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set, visit aboutcookies.org or allaboutcookies.org.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications
• Lodge a complaint with a supervisory authority

Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated effective date.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Specifically:

• Customer account information is retained for the duration of the business relationship and for seven (7) years thereafter to comply with Oregon tax and accounting regulations.
• Quote requests and inquiries that do not result in a transaction are retained for twelve (12) months and then deleted.
• Newsletter subscription data is retained until you unsubscribe, after which your email address is removed within 30 days.
• Website analytics data (anonymized) is retained for twenty-four (24) months.
• Transaction records including invoices, delivery receipts, and payment information are retained for seven (7) years as required by law.

When personal information is no longer needed, we securely delete or anonymize it. You may request earlier deletion of your data by contacting us, subject to our legal retention obligations.

California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information. Under the CCPA, you have the right to:

• Right to Know: Request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, our business purpose for collecting the information, and the categories of third parties with whom we share the information.
• Right to Delete: Request that we delete any personal information we have collected from you, subject to certain exceptions permitted by law.
• Right to Opt-Out: Opt out of the sale of your personal information. Portland Boxes does not sell personal information, but you may still exercise this right.
• Right to Non-Discrimination: Receive equal service and pricing from us regardless of whether you exercise your CCPA rights.

To exercise any of these rights, please contact us at info@portlandboxes.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days as required by law. You may designate an authorized agent to make a request on your behalf by providing written authorization.

International Data Transfers

Portland Boxes is based in Portland, Oregon, United States. If you are accessing our website or services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers and central database are operated. The data protection laws of the United States may differ from those of your country of residence. By using our services, you consent to the transfer of your information to the United States. We take reasonable steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is stored or processed.

Third-Party Links

Our website may contain links to third-party websites, including Google Maps, social media platforms, and partner websites. These third-party sites have their own privacy policies, and Portland Boxes is not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party site you visit. The inclusion of a link on our website does not imply endorsement of the linked site by Portland Boxes. We provide these links for your convenience only.

Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to the websites you visit. There is currently no universally accepted standard for how websites should respond to DNT signals. At this time, Portland Boxes does not respond to DNT signals. However, we limit our tracking practices to those described in this Privacy Policy, and we do not engage in cross-site tracking for advertising purposes. If an industry standard for responding to DNT signals is established in the future, we will update this policy to reflect our compliance with that standard.

Contact Us

If you have any questions about this privacy policy, our data practices, or wish to exercise any of your rights described above, please contact us:

Portland Boxes
8840 N Ramsey Blvd, Portland, OR 97203
info@portlandboxes.com

For privacy-specific inquiries, please use the subject line "Privacy Inquiry" in your email so we can route your request to the appropriate team member. We aim to respond to all privacy-related requests within five (5) business days.