Privacy Policy

Effective: 18 June 2026

At Box of India, your privacy is important to us. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the rights you have over your information.

Box of India is operated by Liv247 The Grocer NZ Limited, a New Zealand company. This policy is governed by the New Zealand Privacy Act 2020 and its 13 Information Privacy Principles.

1. Information We Collect

Information you provide

  • Account & orders: Name, email address, phone number, delivery address, and billing details when you register or place an order.
  • Payment information: Payment details are processed securely by our third-party payment providers (such as Stripe and PayPal). We do not store full credit card numbers on our systems.
  • Customer support: Any information you share with us when contacting our customer service team.
  • Marketing preferences: Your subscription status for our marketing emails and SMS communications.

Information collected automatically

  • Cookies and tracking technologies: We use cookies, pixels, and similar technologies to remember your preferences, keep you logged in, and personalise your experience.
  • Usage data: Pages visited, products viewed, time on site, device type, browser, and IP address.
  • Analytics: We use tools like Google Analytics and Meta Pixel to understand how customers use our services and to improve them.

2. How We Use Your Information

  • To process and deliver your orders, including providing them to delivery and courier partners
  • To manage your account, store credits, and order history
  • To provide customer support and respond to your enquiries
  • To send transactional communications (order confirmations, tracking updates, delivery notifications)
  • To send marketing communications about products, deals, and updates — only where you have opted in
  • To detect, prevent, and respond to fraud, abuse, or security incidents
  • To improve our website, app, products, and services
  • To comply with our legal obligations

3. Who We Share Your Information With

We share personal information only when necessary to operate our services, comply with the law, or with your consent. Categories of recipients include:

  • Service providers: Payment processors (Stripe, PayPal), delivery partners (NZ Post, Aramex, our van delivery network), email and SMS providers, cloud hosting providers, analytics providers
  • Professional advisors: Accountants, auditors, and lawyers where reasonably required
  • Legal & regulatory: Where required by law, court order, or to respond to lawful requests from authorities
  • Business transfers: In connection with a merger, acquisition, or sale of business assets, information may be transferred — subject to confidentiality protections

We do not sell your personal information to third parties.

4. Cross-Border Data Transfers

Some of our service providers (including cloud hosting, analytics, and email infrastructure) are based outside New Zealand — primarily in Australia, the United States, and the European Union.

Where we transfer your personal information overseas, we take reasonable steps to ensure your information remains protected to a standard comparable with the New Zealand Privacy Act 2020. This may include relying on the recipient’s own privacy framework or contractual safeguards.

5. Cookies & Tracking

You can control cookies through your browser settings. Disabling cookies may limit some features of our website or app. We may also use cookies for advertising on platforms like Meta and Google — you can opt out of personalised advertising through those platforms’ settings.

6. Data Security

We implement administrative, technical, and physical safeguards designed to protect your information from unauthorised access, loss, or misuse. However, no system is completely secure, and we cannot guarantee absolute security of information transmitted over the internet.

If a notifiable privacy breach occurs that is likely to cause serious harm, we will notify affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

7. Data Retention

We retain your personal information only for as long as necessary to provide our services, meet our legal and tax obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we will securely delete or anonymise it.

8. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access the personal information we hold about you
  • Correct information that is inaccurate, incomplete, or out of date
  • Delete your account and request deletion of personal information (subject to legal retention requirements)
  • Opt out of marketing communications at any time, via the unsubscribe link in emails or by contacting us
  • Complain to the Office of the Privacy Commissioner if you believe we have not handled your information appropriately

To exercise any of these rights, please contact us at support@boxofindia.app. We may need to verify your identity before processing your request.

9. Children’s Privacy

Our services are not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be posted on our website with an updated effective date. We encourage you to review it periodically.

11. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact us:

Email: support@boxofindia.app
WhatsApp: +64 27 416 5242

You can also contact the Office of the Privacy Commissioner at privacy.org.nz.