Privacy Policy

GetBox sh.p.k. is the controller of your personal data.

• Registered office: [registered address], Tirana, Albania
• Company registration / NUIS: [NUIS placeholder]
• Email for general questions: hello@getbox.al
• Email for privacy questions: privacy@getbox.al
• Phone: +355 XX XXX XXXX

We collect only what we need to deliver the service and meet our legal obligations:

Identification and contact data

• Full name
• Address (pickup and delivery)
• Phone number
• Email address
• Identification document (ID card or passport) where required by Albanian law for collection or delivery

Booking and order data

• Plan selected (Box, Room, or Custom bundle) and items collected
• Pickup and delivery dates
• Pricing and invoices
• Optional inventory photos taken at pickup (with your consent)

Payment data

• Bank account details for transfers, or
• Tokenized payment-card data via our payment provider — we do not store full card numbers on our own systems

Website data

• IP address and approximate location, browser, device, and operating system
• Pages viewed, referring URL, language preference
• One strictly necessary cookie (“getbox-lang”) and one local-storage entry (“getbox.lang”) to remember your preferred language

Under GDPR Article 6(1), each processing activity has a legal basis:

• To perform the contract with you — bookings, payments, deliveries, customer communication (Art. 6(1)(b))
• To comply with legal obligations — tax invoicing, accounting, anti-money-laundering checks, identity verification (Art. 6(1)(c))
• For our legitimate interests — fraud prevention, securing the warehouse, improving the service (Art. 6(1)(f))
• With your consent — inventory photos, marketing emails, any analytics or marketing cookies introduced in the future (Art. 6(1)(a)) — you can withdraw consent at any time

• Booking and contract data: ten (10) years, as required by Albanian tax and commercial law
• Communication records (email, WhatsApp): three (3) years from your last interaction
• Inventory photos: deleted within ninety (90) days after delivery, or kept longer only with your consent
• Marketing consent records: until you withdraw consent
• Website cookies: persistent cookies expire after one (1) year

We do not sell your personal data. We only share it with the categories of recipient strictly necessary to deliver our service or meet legal obligations:

• Our drivers, warehouse staff, and authorized contractors (bound by confidentiality)
• Payment processors and banks (to execute transactions)
• Accountants, auditors, and the Albanian tax authority (for legal obligations)
• Hosting and email service providers (with appropriate safeguards)
• Insurance providers (only if you take optional extended insurance)
• Lawyers, public authorities, or courts (where legally required)

Some of our service providers (hosting, email, analytics) may process data outside Albania, including in the European Economic Area or other jurisdictions.

Where data is transferred outside the EU/EEA to a country not recognized as providing adequate protection, we rely on Standard Contractual Clauses approved by the European Commission, or other safeguards under GDPR Articles 46–47. You may request a copy of the safeguards from privacy@getbox.al.

Under GDPR (and the equivalent Albanian law), you have the right to:

• Be informed about how we use your data — this policy
• Access the data we hold about you
• Have inaccurate data corrected
• Have your data erased (right to be forgotten), subject to legal retention obligations
• Restrict our processing in certain circumstances
• Receive your data in a structured, machine-readable format (data portability)
• Object to processing based on legitimate interests
• Withdraw consent at any time, where consent is the legal basis

To exercise any of these rights, email privacy@getbox.al. We will respond within thirty (30) days. The service is free unless your request is manifestly unfounded or excessive.

Our website currently uses only one strictly necessary cookie and one local-storage entry, both for the same purpose: remembering your preferred language (Albanian or English).

• Cookie name: getbox-lang — lifetime: 1 year — purpose: language preference
• Local-storage key: getbox.lang — lifetime: until cleared by the user — purpose: language preference

We do not currently use analytics, advertising, or third-party tracking cookies. If we add any in the future, we will request your consent through a cookie banner before they are set, in line with the EU ePrivacy Directive and applicable Albanian law.

Our service is intended for adults (18+) and is not directed at children. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact privacy@getbox.al and we will delete it.

We use reasonable technical and organizational measures to protect your data, including:

• Encrypted transmission of website traffic (HTTPS/TLS)
• Access controls and authentication for our internal systems
• Monitored physical facility with restricted access
• Staff confidentiality agreements and ongoing training
• Regular review and improvement of our security practices

No system can be guaranteed 100% secure. If a personal data breach occurs that is likely to result in a high risk to your rights, we will notify you without undue delay, in line with GDPR Article 34.

We may update this policy from time to time. The latest version is always available at /privacy with the update date shown at the top. We will notify active customers of material changes by email at least thirty (30) days before they take effect.

If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Albanian Commissioner for the Right to Information and Personal Data Protection (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale): https://www.idp.al.

EU residents may also lodge a complaint with their local supervisory authority.

Email: privacy@getbox.al

Postal address: GetBox sh.p.k., [registered address], Tirana, Albania

Phone: +355 XX XXX XXXX