Effective date: 3 October 2026
This Privacy Policy explains what information Box Infotech ("Box Infotech", "we", "us", "our") collects when you visit https://boxinfotech.online/ (the "Website"), send us an enquiry, message or call us, or buy our services, and how we use, share and protect it. It is written in plain language so that you know exactly what happens to your details.
This policy is our notice under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and our privacy policy under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. You can ask us for this notice in English or in any language listed in the Eighth Schedule to the Constitution of India.
You can browse the Website without giving us any personal details. We ask for your consent only when you choose to share your details with us, for example by sending the enquiry form after reading the short notice next to its button, or by messaging or calling us.
1. Who we are
Box Infotech is a website development business based in Surat, Gujarat, India. We build business websites, e-commerce websites and Shopify stores. For the purposes of Indian data protection law, Box Infotech is the party that decides why and how your personal data is used. Our contact details are at the end of this policy.
2. Information we collect
2.1 Information you give us
- Enquiry and callback forms: Your name.
- Your mobile / WhatsApp number.
- Your email address and business name, if you enter them.
- What you need (for example business website, e-commerce website, Shopify store) and the plan you are interested in.
- Anything you write in the message box.
- WhatsApp and phone: Messages, photos or files you send us on WhatsApp, and the details you share when you call us.
- When you become a customer: Billing name and address, GST number if you have one, payment records, and the text, pictures, logo and product details you give us for your website.
2.2 Information collected automatically
- IP address, browser type and device information.
- The page you arrived on, the page that sent you to us, and the date and time of your visit.
- Advertising click identifiers and campaign details that come with a link from an advertisement, such as the Google click ID (gclid, gbraid, wbraid), the Facebook click ID (fbclid) and UTM campaign tags. These tell us which advertisement brought you to the Website.
- Which buttons you use on the Website (for example the call, WhatsApp or plan buttons), in a form that does not identify you by name.
2.3 Information we do not collect
We do not ask for or store your card number, net-banking password or UPI PIN on the Website. We do not knowingly collect sensitive personal information such as health, financial account or biometric data through the Website.
3. How we use your information
- To call or message you back about your enquiry and explain our plans.
- To prepare a proposal, build and deliver your website, and provide support.
- To raise invoices, record payments and keep the business records the law requires.
- To measure which advertisements and pages bring enquiries, so that we can improve the Website and our advertising.
- To keep the Website secure, stop spam and prevent misuse of our forms.
- To send you service messages about your project or renewal. We send offers or promotional messages only if you have agreed to receive them, and you can stop them at any time.
4. Your consent and the legal basis
We process your personal data on the basis of your consent, which you give by a clear action: sending the form, messaging us or calling us. Your consent is limited to the purposes in section 3; we do not use your details for anything else without asking you again. We may also process personal data for other lawful uses permitted by the Digital Personal Data Protection Act, 2023, such as complying with a law or a court order.
You may withdraw your consent at any time, as easily as you gave it: reply "STOP" on WhatsApp, or write to our Grievance Officer (section 13). After that we stop contacting you and stop using your details, except where the law requires us to keep records. Withdrawing consent does not affect anything we did before you withdrew it.
5. Cookies, analytics and advertising
The Website uses cookies and similar technologies. A cookie is a small file stored by your browser. Our Cookie Policy lists them in detail.
- Essential cookies: Needed for the Website to work, for example to keep a form secure and remember your cookie choice.
- Analytics cookies: Help us understand how visitors use the Website. We may use Google Analytics for this.
- Advertising cookies: Help us measure the results of our advertisements and show relevant advertisements. We use Google Ads (and may use Google Tag Manager to load its tags) and, for our Facebook and Instagram advertisements, the Meta Pixel.
Where a cookie banner is shown, analytics and advertising cookies are used according to the choice you make there. You can also block or delete cookies in your browser settings; the Website will still work, but some features may not remember your choices.
When you send an enquiry, we may report to Google Ads that an enquiry was made, so that we can measure our advertising. If the "enhanced conversions" feature is switched on, your email address or phone number may be sent to Google only in a scrambled (SHA-256 hashed) form and only where you have accepted advertising cookies.
Likewise, if you have accepted advertising cookies, the Meta Pixel tells Meta (Facebook / Instagram) that a page was viewed, that an enquiry was sent, or that the WhatsApp or call button was tapped. It does not send your name, phone number, email address or message to Meta.
You can manage how Google uses your information for advertising at adssettings.google.com, and your Facebook / Instagram ad preferences in your Meta account under Ad preferences.
6. Who we share your information with
We do not sell, rent or trade your personal information. We share it only where needed:
- Service providers: Hosting, email and technical service providers who store or process data on our instructions.
- Technology platforms: Google (advertising and analytics), Meta (Facebook and Instagram advertising, and WhatsApp when you message us there), under their own privacy policies.
- Partners needed for your project: Payment gateway providers, domain registrars, hosting companies and shipping partners, to the extent needed to set up the services included in your plan.
- Legal authorities: Government, courts or law-enforcement authorities when the law requires us to.
We use these service providers only under arrangements that require them to process your data on our instructions and to protect it. Some of them may store or process data on servers outside India; where that happens, it is done in line with Indian law and never in a country to which the Government of India has restricted transfers.
7. How long we keep your information
- Enquiries: Kept for as long as needed to respond to you and follow up, and then deleted or anonymised when no longer needed.
- Customer and billing records: Kept for the period of our relationship and for as long as tax, accounting and other laws require.
- Technical logs and advertising data: Kept only as long as needed for security and measurement.
- Processing records: Records of how personal data was processed are kept for at least one year, as the Digital Personal Data Protection Rules, 2025 require.
You may ask us to delete your enquiry details earlier; see "Your rights" below.
8. How we protect your information
The Website is served over a secure (HTTPS) connection. Access to enquiry records is limited to authorised persons who need it for their work, and we use reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse. These are reasonable security practices as required under the Information Technology Act, 2000. No website or method of transmission can be guaranteed to be completely secure. If a personal data breach happens, we will act promptly to contain it and will inform the affected persons and the Data Protection Board of India as the law requires.
9. Your rights
Subject to applicable law, you have the right to:
- ask what personal data we hold about you and how it is used;
- ask us to correct or update information that is wrong or incomplete;
- ask us to delete your personal data when it is no longer needed;
- withdraw your consent, including for promotional messages;
- raise a grievance with us, and if it is not resolved, with the Data Protection Board of India;
- nominate another person to exercise your rights if you are unable to.
To use any of these rights, write to our Grievance Officer (section 13). We may need to confirm your identity before acting on a request. We acknowledge every request within 48 hours and respond within one month, or sooner where the law requires.
10. Children
Our services are meant for businesses and adults. The Website is not intended for anyone under 18 years of age, we do not knowingly collect personal data of children, and we do not track or target advertising at children. If you believe a child has given us personal data, please contact us and we will delete it.
11. Links to other websites
The Website may link to other websites and services, for example WhatsApp, social media pages, payment gateways or websites we have built for our customers. We are not responsible for the content or privacy practices of those websites. Please read their privacy policies.
12. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be published on this page with a new effective date. Please check this page from time to time.
13. Grievance Officer and contact
If you have a question, a request about your personal data, or a complaint, please contact our Grievance Officer, who also answers questions about how we process personal data. We acknowledge every complaint within 48 hours and resolve it within one month of receiving it.
Grievance Officer: Box Infotech
Email: support@boxinfotech.in Phone: +91 95103 63326
Vesu, Surat, Gujarat 395007, India
If your grievance is not resolved, you may complain to the Data Protection Board of India.