How we handle your data.

Plain words about what we collect, why, who we share it with, and how to ask for changes. Message us on WhatsApp anytime if something isn't clear.

Who we are

Boxee is operated by Boxee Limited (Hong Kong company no. 80536546). For data-protection purposes, Boxee is the data controller for the information described below.

What we collect

• Your contact details: the WhatsApp number you message us from, your name, and an email address if you give us one.
• Your messages: the conversation you have with us on WhatsApp, including photos you send (e.g., a snap of your packed box).
• Recipient details: the name, full address, and phone number of the person in the Philippines who will receive the box.
• Package contents:the short list you give us of what's in the box and its declared value (we need both for customs).
• Photos of your box: at drop-off, sealing, on the ship, through customs, and at the door. These prove the chain of custody.
• Payment data: processed by Airwallex. We see the last 4 digits of your card and the amount; we never see your full card number.

Why we collect it

• To arrange pickup, shipping, customs, and delivery.
• To prove your box reached your family and to handle any disputes.
• To comply with Philippine customs requirements (a packing list is mandatory under BB-IS-001).
• To message you with status updates and confirm delivery.

Who we share it with

We share the minimum needed with the partners who handle each leg of the journey:

• Hong Kong export broker: the recipient address and packing list (required for the customs filing).
• Ocean freight forwarder: the consolidated shipment manifest.
• Philippine customs deconsolidator (BOC-accredited): the recipient details and packing list.
• Philippine last-mile carrier: the recipient address, phone, and a tracking reference.
• Payment processor (Airwallex): billing details only.
• Hosting (Vercel) and message routing (Twilio): they process data on our behalf under contract.

We never sell your data. We do not run ads against it. We do not share it with anyone else without your consent or a legal obligation.

How long we keep it

• Active shipment data: while the shipment is in progress, plus one year afterwards (in case of a customs query or a delivery dispute).
• Photos: six months after delivery, then deleted.
• WhatsApp messages: kept while your account is active. You can ask us to delete the chat at any time.
• Payment records: seven years, as required for tax purposes in Hong Kong.

Your rights

You can ask us to:

• Show you what data we hold about you.
• Correct anything that's wrong.
• Delete your data (subject to the retention rules above).
• Stop sending you status messages.

The easiest way is to message us on WhatsApp. We reply in a few minutes during HK office hours.

Where this data lives

Servers are in Singapore (Vercel and our database). Photos are stored in Cloudflare R2 in Singapore. Payment processing is via Airwallex (regulated under Hong Kong Monetary Authority oversight).

Changes to this policy

If we change how we handle data, we'll update this page and message active customers on WhatsApp.

Page last updated · 2026-06-07 · See also About