Privacy and Cookie Policy

PRIVACY POLICY www.buythebox.co

This Privacy Policy explains how Buy The Box (“we”, “us”, “our”) collects, uses, discloses and protects your personal information when you visit or purchase from www.buythebox.co and any related pages, emails or services (together, the “Website”). Buy The Box is operated by Mullholland Pty Ltd, trading as Buy The Box.

By using the Website, you agree to this Privacy Policy. Where required by law, we will seek your consent separately (for example, to send you marketing emails).

1. What we collect

1.1 Information you provide directly:

• Identification and contact details: name, email address, phone number, billing and delivery addresses.

• Account details (if you create an account): email, password (encrypted), preferences.

• Order information: products purchased, order value, gift messages, special delivery instructions.

• Communications: enquiries to customer support, survey responses, product reviews.

• Marketing choices: newsletter subscriptions, opt-in/opt-out preferences.

1.2 Information we collect automatically:

• Device and usage data: IP address, browser type/version, device identifiers, pages viewed, time on page, referring URLs.

• Cookies and similar technologies: please see “Cookies & analytics” below.

1.3 Information from third parties:

• Payment providers, fraud prevention partners, logistics partners and marketing platforms may provide information required to process orders, prevent fraud and deliver services.

2. How we use your information

2.1 We use personal information to:

(a) fulfil and deliver your orders, including customer support and returns;

(b) provide and improve the Website, products and services;

(c) verify identity, prevent fraud and enforce our terms;

(d) send transactional emails (order confirmations, invoices, shipping updates, account notices);

(e) send marketing communications where permitted or with your consent (you can unsubscribe anytime);

(f) personalise your experience (e.g., saved details, recently viewed products, recommendations);

(g) meet legal, regulatory and tax obligations.

3. Legal bases (EU/UK users)

3.1 We process personal data under the following legal bases:

• Performance of a contract (to take and fulfil your order, manage your account);

• Legitimate interests (to run our business, improve our Website and communicate with you about our services in ways that do not override your rights);

• Consent (for certain marketing, cookies where required);

• Legal obligation (record keeping, tax, consumer protection).

4. Sharing your information

4.1 We share personal information with trusted service providers who help us operate the Website and fulfil your orders, such as:

• Payment gateways and processors;

• Fraud prevention and security providers;

• Warehouse, producers/suppliers and logistics/shipping partners;

• Email/SMS and marketing platforms;

• Analytics providers and website hosting;

• Professional advisers (legal, accounting) and authorities where required by law.

4.2 We require these parties to protect your information and use it only for the services they provide to us.

5. International transfers

5.1 Your data may be stored and processed outside your country (including Australia, the EU/UK, the United States and other locations where our providers operate). Where applicable, we use appropriate safeguards (such as standard contractual clauses) to protect personal data transferred internationally.

6. Data retention

6.1 We keep personal information only as long as necessary for the purposes described in this policy, including to fulfil orders, meet legal obligations, resolve disputes and enforce agreements. Retention periods vary by data type and jurisdiction.

7. Cookies & analytics

7.1 Cookies are small files placed on your device that help the Website function and improve your experience. We use:

• Strictly necessary cookies (site operation, checkout, security);

• Performance cookies (traffic statistics, page performance);

• Functional cookies (remember settings and preferences);

• Marketing/advertising cookies (where permitted) to deliver relevant promotions.

7.2 You can control cookies through your browser settings. Blocking some cookies may affect site functionality. For analytics, we may use tools such as Google Analytics. These tools collect usage data to help us improve the Website. You can learn more or opt out via the provider’s settings where available.

8. Marketing communications

8.1 Where permitted or with your consent, we may send you news, offers and recommendations. You can unsubscribe at any time using the link in our emails or by contacting us. We will still send essential transactional messages (e.g., order updates).

9. Your rights

9.1 Depending on your location, you may have rights to:

• Access a copy of your personal information;

• Correct inaccurate or incomplete information;

• Delete your information, in certain circumstances;

• Restrict or object to processing, in certain circumstances;

• Port your data to another provider, where technically feasible;

• Withdraw consent where processing is based on consent;

• Lodge a complaint with your local data protection authority.

9.2 To exercise your rights, please contact us using the details below. We may need to verify your identity before responding.

10. Children

10.1 The Website is not intended for children. We do not knowingly collect personal information from individuals under the legal age for purchasing alcohol in their jurisdiction. If you believe a child has provided us information, please contact us so we can delete it.

11. Security

11.1 We implement technical and organisational measures designed to protect your personal information against unauthorised access, alteration, disclosure or destruction. No method of transmission or storage is 100% secure; we encourage you to use unique, strong passwords and keep your account details confidential.

12. Third-party links

12.1 The Website may contain links to third-party sites. We are not responsible for the privacy practices of those sites. Please review their privacy policies before providing any personal information.

13. Changes to this policy

13.1 We may update this Privacy Policy from time to time to reflect legal, technical or business changes. The “Updated” date below indicates the latest version. Significant changes will be highlighted on the Website where appropriate.

14. Contact us

14.1 If you have questions, requests or complaints about this Privacy Policy or how we handle your personal information, please contact:

Buy The Box – Privacy

Email: [email protected] (or the email listed on our Contact page)

Postal: Mullholland Pty Ltd (t/a Buy The Box), L2/100 Cubitt St, Cremorne, VIC 3121, Australia

Updated: 10 September 2025