Privacy Policy
Last updated: June 24, 2026
This Privacy Policy explains how Subbox(“we”, “us”) collects, uses, and shares information when you use the Platform. Subbox is a platform that hosts subscription clubs run by independent Sellers. When you subscribe to a club, you also share information with that Seller, who acts as an independent controller of your data for their own purposes.
1. Information we collect
- Account information— your email address and a securely hashed password (managed by our authentication provider; we never see your plaintext password).
- Shipping and profile information— the name and mailing address you provide so Sellers can ship your subscription.
- Subscription information— which clubs and plans you subscribe to, status, and renewal dates.
- Payment information— card payments are processed by a third-party, PCI-compliant payment processor. We do not collect or store your full card number; the payment processor handles it under its own privacy policy.
- Communications and marketing preferences— whether you opted in to a club’s newsletter, and messages you send us.
- Technical data— basic log and device data, and the essential cookies described in our Cookie Policy.
2. How we use information
- To create and operate your account and process your subscriptions;
- To share your shipping details with the Seller(s) you subscribe to, so they can fulfill orders;
- To send transactional messages (account, billing, and subscription notices);
- To send marketing email only where you have opted in, with an unsubscribe link in every message;
- To secure the Platform, prevent fraud, and comply with legal obligations.
3. How we share information
We share information only as needed to run the Platform:
- With Sellers you subscribe to (your name, shipping address, email, and subscription details), so they can ship to you and manage your membership.
- With service providers who process data on our behalf, such as payment processing, email delivery, hosting, and database providers.
- For legal reasons, if required by law or to protect rights, safety, and the integrity of the Platform.
- In a business transfer, if Subbox is involved in a merger, acquisition, or sale of assets.
We do not sell your personal information.
4. Marketing emails
We and Sellers will only send you marketing email if you have given consent (for example, by checking the newsletter box, which is never pre-checked). You can unsubscribe at any time using the link in any marketing email, and we will honor opt-out requests promptly.
5. Data retention
We keep your information for as long as your account is active or as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion as described below.
6. Your rights and choices
Depending on where you live (for example, under U.S. state privacy laws such as the California Consumer Privacy Act, or the EU/UK GDPR), you may have the right to:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Delete your information;
- Opt out of marketing communications;
- Request a copy of your information in a portable format.
To exercise these rights, email support@subbox.shop. We will not discriminate against you for exercising them. Because Sellers independently control the data you share with them, you may also need to contact a Seller directly for requests about that data.
7. Security
We use industry-standard measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Children
The Platform is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
9. International users
We operate in the United States, and your information may be processed there. By using the Platform, you understand that your information may be transferred to and processed in the United States.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate.
11. Contact
For privacy questions or requests, email support@subbox.shop. See also our Terms of Use and Cookie Policy.