Online Privacy Statement

At Box of Crayons, we take protecting your privacy seriously. We conduct business and serve clients in countries across the globe and operate under the requirements of numerous privacy laws in the countries we serve. These laws assure you are properly informed and know your rights and that you are given the choices you are allowed by law and where the law provides, opportunities to consent. These rights and choices may vary based on the laws of the country in which you live, or where the services or products were provided. We will respect the provisions of all data protection laws as we are required.

The purpose of this Privacy Notice is to inform you about Box of Crayons’ practices relating to the collection, use and disclosure of personal or business information which may be collected by us through your filling out Box of Crayons forms or otherwise providing information in order to participate in Box of Crayons events, downloads or through our website. By filling out the forms, by participating in our events, or by using our website, you consent to the collection, use and disclosure of your personal or business information in accordance with the following terms and conditions.

INFORMATION WE AUTOMATICALLY COLLECT

When you access our website, whether by computer, mobile phone or other device, we automatically collect certain information about your use of our website (this information may include without limitation: geographical location and IDs of your computer, mobile or other device; bandwidth used; system and connection performance; browser type and version, operating system; length of visit; page views; referral source; IP address or other unique identifier for your computer, mobile phone or other device; your mobile carrier) using technologies, such as Cookies and web beacons.

INFORMATION YOU PROVIDE TO US

In some situations, you may provide us with your Personal Information including your name, email address, mailing address, phone number, fax number, job title/position, Skype name, information about your company or business, and any other information we collect about you.

You may provide us with Personal Information when you:

Download a report or white paper;
Submit a contact form on our website;
Submit a meeting request on our website;
Request more information via our website;
Comment on a blog post;
Subscribe to our email notifications and/or newsletters;
Register for certain services and/or email notification, or register and/or set up an account/profile to access, visit and/or use certain portions of our Website;
And any other transactions between you and us.

We use a third party companies to handle the sale of books, for some physical products featured on our Online Systems, event planning as well as for booking meetings on our websites. If you wish to purchase a physical product, you may be directed to a webpage that is hosted by the third party (or its service providers) and not by Box of Crayons.

Any Personal Information that you provide through those pages to the third party will be subject to the third party’s privacy policy, rather than this Policy. Box of Crayons does not control, and is not responsible for, the third party’s use of information collected through those pages. Please note that this Policy does not address the collection and use of information through the third party’s page or the privacy or information practices of the third party.

In accordance with applicable laws and regulations in certain jurisdictions we may be obligated to provide to you all PII which is attributable to you.

COOKIES AND OTHER TRACKING TECHNOLOGIES

A “Cookie” is a small file stored on your hard drive that contains information about your computer. We may use Cookies to enable us to track and target your interests for the purpose of enhancing your experience on our website. By showing how and when visitors use the site, cookies help us identify how many unique users visit us, save user preferences and track user trends and patterns.

Without cookies, websites and their servers have no memory. A cookie, like a key, enables swift passage from one place to the next. Without a cookie every time you open a new web page the server where that page is stored will treat you like a completely new visitor.

The use of Cookies is industry standard so your browser may be set to accept cookies. If you would prefer not to accept cookies, you can alter the configuration of your browser to reject all Cookies or some Cookies. Note, if you reject certain Cookies, you may not be able to access all of our Website features.

HOW WE USE YOUR PERSONAL INFORMATION

Box of Crayons will use information we collect to:

Improve your experience on our website(s);
Count users who visit our website(s) or open our HTML-formatted email messages;
Improve the delivery of any ads and web pages to you; and
Help us better manage content on our website by informing us what content is effective and by helping to measure traffic on our website.

We may use IP addresses to help diagnose problems with our server, administer our website, analyze trends, track users’ movement, gather broad demographic information for aggregate use in order for us to improve the website, and deliver customized content.

We use your Personal Information to:

Respond to your inquiries, and/or other requests or questions;
Enable your use of the services available on our website;
Contact you regarding a service/program;
Collect payments from you;
Provide you goods or services purchased through our website;
Send you information and updates related to your purchase;
Send you invoices;
Send you email notifications which you have specifically requested;
Send you email marketing communications relating to our business which we think may be of interest to you; and
Send you email messages containing company news, product or service information.

HOW LONG DO WE RETAIN YOUR INFORMATION?

Box of Crayons will retain your Personal Information as long as necessary to fulfill the purposes outlined in this Notice, unless a longer retention period is required or not prohibited by applicable law.

DATA SHARING

We will only share your Personal Information with third parties where required by law or where we have another legitimate interest in doing so. The categories of third party with whom we share information include: Third party service providers who support us in providing services to you.

All our third-party service providers are required to take appropriate security measures to protect your Personal Information in line with our policies. We do not allow our third-party service providers to use your Personal Information for their own purposes. We only permit them to process your information for specified purposes and in accordance with our instructions.

THIRD PARTIES WEBSITES

Our websites and social media pages may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website or social media pages, we encourage you to read the privacy notice of every website you visit.

CHANGING OR UPDATING YOUR INFORMATION

You can access, change, delete or update Personal Information you have provided and your subscriptions or preferences regarding information you receive from us by emailing privacy@boxofcrayons.com. We will respond to your request within 30 working days.

OPTING OUT

You may opt-out of having your Personal Information shared with third parties for reasons other than for the express purpose of delivering the purchased product or service requested and except as required by law and you may also request updates or changes to your information or your preferences regarding receiving future promotional messages from us. To do this you may contact our Privacy Officer by emailing privacy@boxofcrayons.com

Please note that if you opt-out of promotional/marketing emails, you may continue to receive certain communications from us, such as administrative and services announcements and/or messages about your account/profile. We may continue to retain Personal Information for up to one year after you opt-out or terminate your relationship with us.

CHILD PRIVACY

Our website is not directed at, or intended for use by, children under the age of 13. We do not knowingly allow anyone under 18 to provide any Personal Information on our website. Children should always get permission from a parent or guardian before sending Personal Information over the Internet. If you believe your child may have provided us with Personal Information, you can contact our Privacy Officer using the information in the Contact Us section of this Notice and we will immediately delete the information.

SAFEGUARDS

Box of Crayons makes all reasonable efforts to ensure that Personal Information collected from you is protected against loss and unauthorized access by maintaining physical, electronic and procedural safeguards in compliance with applicable global privacy regulations. This protection applies in relation to information stored in both electronic and hard copy form. Access to your Personal Information is restricted to selected members and employees. In addition, Box of Crayons employs generally accepted information security techniques to protect Personal Information against loss and unauthorized access.

FOR EU RESIDENTS:

What are your data protection rights under the EU General Data Protection Regulation?

Box of Crayons would like to make sure you are fully aware of all of your GDPR data protection rights. Every user is entitled to the following:

The right to access – You have the right to request our company for copies of your Personal Information We may charge you a small fee for this service.
The right to rectification – You have the right to request that our company correct any information you believe is inaccurate. You also have the right to request our company to complete the information you believe is incomplete.
The right to erasure – You have the right to request that cur company erase your Personal Information, under certain conditions.
The right to restrict processing – You have the right to request that our company restrict the processing of your Personal Information, under certain conditions.
The right to object to processing – You have the right to object to our company’s processing of your Personal Information, under certain conditions.
The right to data portability – You have the right to request that our company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: privacy@boxofcrayons.com

In some circumstances there may be specific legal reasons why we are not able to comply with your request to exercise your rights. Where this is the case, we will inform you of this.

RIGHT TO APPEAL
In compliance with the Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the European Union’s the General Data Protection Regulation (GDPR), each individual, who believes their right to data protection has been violated, may file a complaint with the Privacy Commissioner of Canada or applicable European Union Supervisory Authority.

FOR CALIFORNIA RESIDENTS
Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), Box of Crayons is providing the following details regarding the categories of Personal Information that we collect, use and disclose about California residents and California residents’ rights.
We collect, and have collected within the preceding 12 months, the following categories of Personal Information, as listed in the CCPA:

Category A. Identifiers, such as name, contact information, IP address, and other online identifiers;
Category B. Personal information, as defined in the California customer records law, such as name, contact information, education information and employment information;
Category C. Characteristics of protected classifications under California or federal law, such as age, sex, disability status, primary language, race and, citizenship, to the extent required or permitted by applicable law;
Category D. Commercial information, such as transaction information and purchase history;
Category E. Internet or network activity information, such as browsing history and interactions with our website;
Category F. Audio, electronic, visual, and similar information, such as photographs or audio and video recordings created in connection with our business activities;
Category G. Professional or employment-related information, such as work history and prior employer, information relating to references, details of qualifications, skills and experience, human resources data, and data necessary for benefits and related administration services; and
Category H. Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and abilities.

For information on the sources of these categories of Personal Information, please refer to the “How we Collect Personal Information” section in this Policy.

In certain cases, we may qualify as “selling” (as defined by the CCPA) Category G Personal Information. Selling, under CCPA, broadly includes any disclosure of Personal Information to a third party that is not a service provider or is not directed by the individual. Also, sharing information which was gathered from public government records does not qualify as “selling” Personal Information under CCPA. For limited services, Box of Crayons may share your Personal Information (specifically your name, title, and employer) with our vendors and contractors, and in most cases this information is found in public sources. With your prior consent, we may disclose your Personal Information (specifically your name, title, and employer) in testimonials and/or reviews.

For information on our purpose for collecting and selling the above categories of Personal Information, please refer to the “How We Use the Personal Information We Collect” section of this Policy.

We have disclosed the following categories of Personal Information, as listed in the CCPA, to third parties for our operational business purposes within the preceding 12 months:

Category A. Identifiers, such as name, contact information, IP address, and other online identifiers;
Category B. Personal information, as defined in the California customer records law, such as name, contact information, education information, medical information, insurance information, employment information, and government-issued ID numbers
Category C. Characteristics of protected classifications under California or federal law, such as age, sex, disability status, primary language, race, citizenship, and marital status, to the extent required or permitted by applicable law;
Category D. Commercial information, such as transaction information and purchase history;
Category E. Internet or network activity information, such as browsing history and interactions with our website;
Category F. Audio, electronic, visual and similar information, such as call and video recordings;
Category G. Professional or employment-related information, such as work history and prior employer, information relating to references, details of qualifications, skills and experience, human resources data, and data necessary for benefits and related administration services; and
Category H. Inferences drawn from any of the Personal Information listed above to create a profile about, for example, an individual’s preferences and abilities.

For information on the third parties to whom these categories of Personal Information are shared, please refer to the “Who Has Access to Your Personal Information” section of this Policy.

If you are a California, Virginia, Colorado, Connecticut, and Utah you may request that we: you may request that we:

Disclose to you the following information covering the 12 months preceding your request:
- The categories of Personal Information we collected about you and the categories of sources from which we collected such Personal Information;
- The specific pieces of Personal Information we collected about you;
- The business or commercial purpose for collecting (if applicable) Personal Information about you; and
- The categories of Personal Information about you that we otherwise shared or disclosed, and the categories of third parties with whom we shared or to whom we disclosed such Personal Information (if applicable).
Delete Personal Information we collected from you.
Stop the sharing of your personal information.
California offers the right to limit the use and disclosure of sensitive personal information, which if collected, would only be used for legitimate purposes as permitted by law.
Stop the sale of your personal information. To make a request for the disclosures, deletion, or opt-out of sale described above, please email to Privacy@boxofcrayons.com.
Residents of California, Virginia, Colorado and Connecticut have the right to opt out of solely automated decisions or profiling which produces legal or similarly significant effects for individuals.
- We do not undertake solely automated decisions or profiling which produces legal or similarly significant effects for individuals, therefore, no opt-out is currently offered.

We do not sell or share personal information and we do not have actual knowledge that we sell, share or use for personalized/targeted advertising purposes personal information of minors under 16 years of age.

In most cases, Box of Crayons will verify your request by: (1) confirming that you control the email address associated with your Personal Information; and (2) confirming that your description of your interactions with Box of Crayons matches our records. If necessary, we may require additional information to verify your request. If you are making a request on someone else’s behalf, you must also submit signed proof of authorization and, if necessary, we may ask for additional information. We will respond to your request consistent with applicable law.

You have the right to be free from unlawful discrimination for exercising your rights under the CCPA.

OTHER UNITED STATES ("US") STATES

Certain US state regulations provide additional rights for their residents. Below is a non-exhaustive list of some of these rights.

Virginia

If a business refuses to act on a data request within a reasonable period, the Virginia Consumer Data Protection Act (“VCDPA”) provides consumers with a right to appeal. A response is required within forty-five (45) days after receiving a request from a consumer, with the business retaining the right to extend the response time.

If the request is denied, or the request has not been responded to within the appropriate timeframe, Virginia residents have a right to appeal the denial or refusal to take action on a data request within a reasonable time after the resident’s receipt of the decision. If the appeal is denied by BoC, we will provide you with information on presenting the attorney general with a complaint.

QUESTIONS OR CONCERNS, CONTACT US
If you have a complaint, dispute or questions regarding this Privacy Notice or our treatment of your Personal Information, please write to our Privacy Officer by email at Privacy@boxofcrayons.com or postal mail to:

Attn: Privacy Officer, Box of Crayons
163 Sterling Rd,
Toronto, ON, M6R 2B6
Canada

CONTACT US - FOR INDIVIDUALS IN THE EUROPEAN ECONOMIC AREA(EEA)/EUROPEAN UNION (EU), UNITED KINGDOM (UK) AND SWITZERLAND

Box of Crayons Inc., which processes the personal data of individuals in the European Union. European Economic Area and UK, in either the role of 'data controller' or 'data processor', has appointed DataRep as its Data Protection Representative for the purposes of The General GDPR in the EU/EEA and The Data Protection Rct 2018 / UK GDPR (as amended) in the UK, and Federal Act of Data Protection, TS 2022 491 (FADP) in Switzerland.

If Box of Crayons Inc. has processed or is processing your personal data, you may be entitled to exercise your rights under GDPR/FRDP in respect of that personal data. For more details on the rights you have in respect of your personal data, please refer to the national Data Protection Authority in your country, the European Commission in the EU (https://ec.europa.eu/info/law/law-topic/data-protection/data protection-eu_en) or the Federal Data Protection and Information Commission in Switzerland (https://www.edoeb.admin.ch/edoeb/en/home.html).

Box of Crayons Inc. takes the protection of personal data seriously, and has appointed DataRep as their Data Protection Representative in the European Union and Switzerland so that you can contact them directly in your home country. DataRep has locations in each of the 27 EU countries. the UK. and Norway & Iceland in the European Economic Area (EEA) and Switzerland. so that Box of Crayons lnc.'s customers can always raise the questions they want with them.

If you want to raise a question to Box of Crayons Inc., or otherwise exercise your rights in respect of your personal data. you may do so by:

sending an email to DataRep at datarequest@datarep.com quoting <Box of Crayons Inc.> in the subject line.
contacting us on our online webform at www.datarep.com/data-request. or
mailing your inquiry to DataRep at the most convenient of the addresses in the subsequent pages.

PLEASE NOTE: when mailing inquiries. it is ESSENTIAL that you mark your letters for 'DataRep' and not 'Box of Crayons Inc.', or your inquiry may not reach us. Please refer clearly to Box of Crayons Inc. in your correspondence. On receiving your correspondence. Box of Crayons Inc. is likely to request evidence of your identity, to ensure your personal data and information connected with it is not provided to anyone other than you.
If you have any concerns over how DataRep will handle the personal data we will require to undertake our services, please refer to our privacy notice at www.datarep.com/privacy-policy.

Please ensure request is addressed to 'DataRep' and not Box of Crayons Inc.

Country	Address
Austria	DataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
Belgium	DataRep, Place de L'Université 16, Louvain-La-Neuve, Waals Brabant, 1348, Belgium
Bulgaria	DataRep, 132 Mimi Balkanska Str., Sofia, 1540, Bulgaria
Croatia	DataRep, Ground & 9th Floor, Hoto Tower, Savska cesta 32, Zagreb, 10000, Croatia
Cyprus	DataRep, Victory House, 205 Archbishop Makarios Avenue, Limassol, 3030, Cyprus
Czech Republic	DataRep, IQ Ostrava Ground floor, 28. rijna 3346/91, Ostrava-mesto, Moravska, Ostrava, Czech Republic
Denmark	DataRep, Lautruphøj 1-3, Ballerup, 2750, Denmark
Estonia	DataRep, 2nd Floor, Tornimae 5, Tallinn, 10145, Estonia
Finland	DataRep, Luna House, 5.krs, Mannerheimintie 12 B, Helsinki, 00100, Finland
France	DataRep, 72 rue de Lessard, Rouen, 76100, France
Germany	DataRep, 3rd and 4th floor, Altmarkt 10 B/D, Dresden, 01067, Germany
Greece	DataRep, 24 Lagoumitzi str, Athens, 17671, Greece
Hungary	DataRep, President Centre, Kálmán Imre utca 1, Budapest, 1054, Hungary
Iceland	DataRep, Kalkofnsvegur 2, 3rd Floor, 101 Reykjavík, Iceland
Ireland	DataRep, The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland
Italy	DataRep, Viale Giorgio Ribotta 11, Piano 1, Rome, Lazio, 00144, Italy
Latvia	DataRep, 4th & 5th floors, 14 Terbatas Street, Riga, LV-1011, Latvia
Liechtenstein	DataRep, City Tower, Brückenkopfgasse 1/6. Stock, Graz, 8020, Austria
Lithuania	DataRep, 44A Gedimino Avenue, 01110 Vilnius, Lithuania
Luxembourg	DataRep, BPM 335368, Banzelt 4 A, 6921, Roodt-sur-Syre, Luxembourg
Malta	DataRep, Tower Business Centre, 2nd floor, Tower Street, Swatar, BKR4013, Malta
Netherlands	DataRep, Cuserstraat 93, Floor 2 and 3, Amsterdam, 1081 CN, Netherlands
Norway	DataRep, C.J. Hambros Plass 2c, Oslo, 0164, Norway
Poland	DataRep, Budynek Fronton ul Kamienna 21, Krakow, 31-403, Poland
Portugal	DataRep, Torre de Monsanto, Rua Afonso Praça 30, 7th floor, Algès, Lisbon, 1495-061, Portugal
Romania	DataRep, 15 Piaţa Charles de Gaulle, nr. 1-T, Bucureşti, Sectorul 1, 011857, Romania
Slovakia	DataRep, Apollo Business Centre II, Block E / 9th floor, 4D Prievozska, Bratislava, 821 09, Slovakia
Slovenia	DataRep, Trg. Republike 3, Floor 3, Ljubljana, 1000, Slovenia
Spain	DataRep, Calle de Manzanares 4, Madrid, 28005, Spain
Sweden	DataRep, S:t Johannesgatan 2, 4th floor, Malmo, SE - 211 46, Sweden
United Kingdom	DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom

COOKIE POLICY

What are cookies? This Cookie Policy explains what cookies are and how we use them, the types of cookies we use i.e, the information we collect using cookies and how that information is used, and how to manage the cookie settings.

Cookies are small text files that are used to store small pieces of information. They are stored on your device when the website is loaded on your browser. These cookies help us make the website function properly, make it more secure, provide better user experience, and understand how the website performs and to analyze what works and where it needs improvement.

How do we use cookies? As most of the online services, our website uses first-party and third-party cookies for several purposes. First-party cookies are mostly necessary for the website to function the right way, and they do not collect any of your personally identifiable data.

The third-party cookies used on our website are mainly for understanding how the website performs, how you interact with our website, keeping our services secure, providing advertisements that are relevant to you, and all in all providing you with a better and improved user experience and help speed up your future interactions with our website.

Types of Cookies we use:

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.
Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.
Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.
Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.
Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

Manage Cookie Preferences

You can change your cookie preferences any time by clicking on the icon in the lower left corner of the page. This will let you revisit the cookie consent banner and change your preferences or withdraw your consent right away.

In addition to this, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers.

Chrome: https://support.google.com/accounts/answer/32050
Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac
Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox?redirectslug=delete-cookies-remove-info-websites-stored&redirectlocale=en-US
Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc

If you are using any other web browser, please visit your browser’s official support documents.

LEGAL REPRESENTATIVE - DIGITAL SERVICES ACT

Box of Crayons Inc., which delivers, or targets the delivery of, a digital service in European Union and European Economic Area, has appointed DataRep as its Legal Representative for the purposes of the Digital Services Act* in the EU/EER.

Box of Crayons Inc. takes their obligations to deliver a safe and legal service seriously, and has appointed DataRep as their Legal Representative in the European Union so that you can contact them directly about concerns you may have, and to report illegal content which you identify.

If you want to raise a question to Box of Crayons Inc. regarding these issues, you may do so by:

sending an email to DataRep at datarequest@datarep.com quoting <Box of Crayons Inc.> in the subject line,
contacting us on our online webform at www.datarep.com/data-request,
mailing your inquiry to DataRep at DataRep, The Cube, Monahan Road, Cork, T12 H lXY, Republic of Ireland,
phone call to +353 (1) 919 8899 (we will ask you to follow up by email to ensure our understanding of your request).

If you have any concerns over how DataRep will handle the personal data we will require to undertake our services, please refer to our privacy notice at www.datarep.com/privacy-policy.

CHANGES TO THIS PRIVACY NOTICE

Box of Crayons reserves the right to make changes to this privacy notice at any time. Last reviewed and updated: May 16, 2024.