Rebox Privacy Policy 

Effective Date: February 10, 2026

Rebox Corporation (“Rebox”, “we”, “us”, or “our”) is committed to protecting the privacy of individuals and the security of sensitive information. This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, substantially similar provincial laws.

Personal Information We Collect

We collect personal information that you provide directly to us and information collected automatically when you use the Site.

  • Information you provide: When you contact us, request information, subscribe to communications, or otherwise interact with the Site, we may collect your name, email address, phone number, company, role or job title, and any other information you choose to provide in your communications with us.
  • Business relationships: If you are a customer, supplier, or business partner, we may collect additional information necessary to manage the relationship, such as billing and payment details, shipping addresses, contract records, and customer support history.
  • Automatically collected information: When you visit or use the Site, we may automatically collect device and usage information such as IP address, device identifiers, browser type and settings, operating system, referring/exit pages, date/time stamps, pages viewed, links clicked, approximate location derived from IP, and similar technical data necessary for website functionality, security, analytics, and performance.
  • Cookies and similar technologies: We use cookies, web beacons, and similar technologies to operate the Site, remember your preferences, analyze usage, and personalize content. See “Cookies and Similar Technologies” below for more detail.

We do not seek to collect sensitive personal information through the Site unless necessary for a specific purpose you have requested and consented to. Please avoid transmitting sensitive information through unsecured channels.

Purposes for Collection and Use

We collect and use personal information for the following purposes:

  • To operate, maintain, and improve the Site and our services;
  • To respond to inquiries, provide customer service and technical support, and manage our relationship with you;
  • To communicate with you about our products, services, events, promotions, and updates, in accordance with your communication preferences and applicable laws;
  • To conduct analytics, measure performance, and understand how the Site is used to improve functionality and user experience;
  • To manage billing, payments, accounting, and other administrative functions;
  • To protect the security and integrity of our systems, prevent fraud, and conduct risk management and troubleshooting;
  • To comply with legal and regulatory obligations and enforce our rights;
  • For any other purpose for which we obtained your consent or that is otherwise permitted or required by law.

We limit collection to what is necessary for identified purposes and will not use personal information for new, materially different purposes without informing you and, where required, obtaining your consent.

Where personal information is collected or processed on our behalf by service providers, we require those service providers by contract to protect personal information and use it only for the purposes we specify.

Consent and Your Choices

We obtain your consent to collect, use, or disclose your personal information, except where inappropriate or permitted by law. Consent may be express (e.g., ticking a box, submitting a form) or implied (e.g., when the purpose is obvious from the context and you voluntarily provide information), depending on the sensitivity of the information and your reasonable expectations.

  • Marketing communications: We may send you marketing communications where allowed by law and in accordance with your preferences. You can withdraw consent or unsubscribe at any time by following the instructions in the message or contacting us.
  • Cookies and analytics: Where required, we will request your consent for non-essential cookies and tracking technologies. You can manage your preferences through our cookie banner and browser settings. See “Cookies and Similar Technologies.”
  • Withdrawal of consent: You may withdraw your consent to our processing of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawal of consent may affect our ability to provide certain services to you.

Limiting Use, Disclosure, and Retention

We use and disclose personal information only as necessary for the purposes identified in this Policy, with your consent, or as permitted or required by law.

  • Service providers and business partners: We may disclose personal information to third-party service providers who perform services for us, such as hosting, analytics, advertising, communications, payment processing, cybersecurity, and customer support. These providers are required to protect personal information and use it only to provide services to Rebox.
  • Business transactions: We may disclose personal information in connection with a prospective or completed business transaction (e.g., merger, acquisition, financing, sale of assets), subject to contractual confidentiality protections and applicable legal requirements.
  • Legal requirements: We may disclose personal information when necessary to comply with a law, regulation, legal process, or governmental request; to protect the safety, rights, property, or security of Rebox, our users, or others; or to enforce our terms.
  • Retention: We retain personal information only for as long as necessary to fulfill the identified purposes, to comply with legal and regulatory obligations (including record-keeping requirements), to resolve disputes, and to enforce our agreements. When personal information is no longer required, we will destroy, anonymize, or securely delete it in accordance with applicable laws.

Cross-Border Transfers

Personal information may be stored and processed in Canada and in other jurisdictions where we or our service providers operate, including the United States. When personal information is transferred to another jurisdiction, it may be subject to the laws of that jurisdiction and may be accessible to courts, law enforcement, and regulatory authorities. We take steps to ensure that any international transfers comply with applicable laws and are subject to appropriate safeguards and contractual protections. If required by law, we will conduct privacy impact assessments before certain cross-border disclosures.

Security Safeguards

We implement administrative, technical, and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, disclosure, copying, use, or modification. These safeguards include access controls, encryption in transit and at rest where appropriate, secure configurations, logging and monitoring, employee training, and vendor due diligence. Despite these measures, no security system is impenetrable, and we cannot guarantee absolute security.

Accuracy

We strive to keep personal information accurate, complete, and up to date for the purposes for which it is used. Please notify us if your information changes or if you believe information we hold is inaccurate.

Individual Access and Correction Rights

You have the right to request access to personal information we hold about you and information about how that personal information has been used and disclosed. You also have the right to request corrections to inaccurate or incomplete personal information. We will respond to access and correction requests within a reasonable time and in accordance with applicable law. We may need to verify your identity before processing your request and may charge a reasonable fee where permitted by law.

To make an access or correction request, please contact our Privacy Officer using the contact details below.

Challenging Compliance and Complaints

If you have questions, concerns, or complaints about our privacy practices or how we handle personal information, please contact our Privacy Officer. We will investigate and respond to complaints in a timely manner. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada or, where applicable, your provincial privacy commissioner.

Cookies and Similar Technologies

We use the following categories of cookies and similar technologies:

  • Essential cookies: Necessary for the Site to function (e.g., to enable page navigation, secure access, and basic features). These cannot be disabled.
  • Performance and analytics cookies: Help us understand how the Site is used, diagnose issues, and improve performance.
  • Functionality cookies: Remember your preferences and settings to provide a more personalized experience.
  • Advertising and targeting cookies: May be used to deliver relevant ads and measure the effectiveness of marketing campaigns.

You can manage your preferences through our cookie banner and by adjusting your browser settings to block or delete cookies. If you block certain cookies, parts of the Site may not function properly. We will seek consent where required for non-essential cookies and for technologies used for profiling or targeted advertising.

We may use third-party analytics and advertising providers. These providers may collect or receive information about your use of the Site to provide analytics and ad measurement services. We require such providers to limit their use of personal information to the provision of services to Rebox and to protect personal information in accordance with applicable laws.

Children’s Privacy

The Site is not directed to children. We do not knowingly collect personal information from children who lack capacity to provide meaningful consent under applicable law. If you believe we have collected personal information from a child without appropriate consent, please contact us, and we will take steps to delete such information.

Automated Decision-Making and Profiling

If we use automated decision-making systems or profiling that produce legal or similarly significant effects, we will provide meaningful information about the logic involved and the consequences of such processing, and we will obtain consent where required. You may contact us for more information and to exercise any rights related to such processing, subject to applicable law.

Do Not Track and Preference Signals

Some browsers and devices allow you to send signals to indicate your tracking preferences. The Site may not respond to all such signals. You can manage your preferences using our cookie banner and your browser settings.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the Effective Date at the top of the Policy and, where appropriate, provide additional notice (such as a banner or email). Your continued use of the Site after an update constitutes acceptance of the revised Policy.

Contact Us

Our Privacy Officer is responsible for our compliance with this Policy and applicable privacy laws. If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

Shouvik Roy, Privacy Officer
Rebox Corporation

For further information about privacy rights and obligations in Quebec, you may contact the Commission d’accès à l’information: www.cai.gouv.qc.ca.

You may also contact the Office of the Privacy Commissioner of Canada: Office of the Privacy Commissioner of Canada, 30 Victoria Street, Gatineau, Quebec K1A 1H3.