Privacy and Data Protection Notice

Last updated: 19-10-2026

Multiboxx respects your privacy and is committed to handling personal information responsibly. This notice explains how we collect, use, share and protect personal data when you visit our website, contact us or conduct business with us.

1. Who is responsible for your personal data?

The controller responsible for the processing described in this notice is:

Multiboxx Limited and Multiboxx B.V.
Address: Multiboxx Ltd. Unit 701, 46 Tsun Yip Street, Kwun Tong, Kowloon, Hong Kong / Multiboxx B.V. A Smirnoffweg 32, 3088 HE Rotterdam, Netherlands
Privacy contact: info@multiboxx.com

In this notice, “Multiboxx”, “we”, “us” and “our” refer to the controller identified above.

Data Protection Officer; Sjouke Noordenbos

We process personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (“GDPR”) where it applies.

2. Personal data we collect

Depending on your interaction with us, we may collect:

  • Contact and professional details: your name, job title, company, business address, email address and telephone number.

  • Enquiry and correspondence details: information you provide through contact forms, emails, telephone calls or other communications.

  • Commercial information: details relating to quotations, orders, contracts, deliveries, invoices, payments and after-sales support, where these identify an individual.

  • Technical information: IP address, browser and device information, access times and website security logs.

  • Website usage and preferences: information collected through cookies and similar technologies, depending on your choices and the tools used on our website.

We collect information directly from you and, where relevant, from your employer, colleagues, business partners, publicly available professional sources and service providers involved in our business relationship.

Please avoid sending sensitive personal information unless we specifically request it for a lawful purpose.

3. Why we use your personal data

Where the GDPR applies, we rely on the following legal bases:

PurposeLegal basisResponding to enquiries and preparing quotationsOur legitimate interest in responding to business requests; or taking steps at your request before entering into a contract with you personally.Managing orders, deliveries, payments and supportPerformance of a contract with you personally; or our legitimate interest in administering a business relationship with the organisation you represent.Maintaining customer, supplier and partner relationshipsOur legitimate interest in communicating with business contacts and managing our operations.Meeting accounting, tax and other legal requirementsCompliance with applicable legal obligations.Protecting our website, preventing fraud and managing legal claimsOur legitimate interest in maintaining security and protecting our business and legal rights.Sending newsletters or promotional communicationsYour consent where required, or our legitimate interest where permitted by applicable marketing laws.Using optional analytics or advertising technologiesYour consent where required by applicable law.

When relying on legitimate interests, we assess those interests against your rights and reasonable expectations.

Providing information is generally voluntary. However, if you do not provide information needed to respond to an enquiry, fulfil an order or meet a legal requirement, we may be unable to provide the requested service. Required form fields will be identified.

4. Marketing communications

Where permitted by law, we may send information about relevant Multiboxx products, services and company developments.

You can unsubscribe using the link in a marketing email or by contacting our privacy contact. You may object to the use of your personal data for direct marketing at any time.

Withdrawing marketing consent does not affect necessary communications concerning an existing enquiry, order or contract.

5. Who we share information with

Where necessary for the purposes described above, we may share personal data with:

  • Relevant Multiboxx group companies and authorised personnel.

  • Website hosting, IT, communications and business software providers.

  • Manufacturers, depots, logistics providers, installation partners and other parties involved in fulfilling your request or order.

  • Banks, payment providers, insurers, accountants, legal advisers and auditors.

  • Authorities, regulators and courts where disclosure is legally required or necessary to establish, exercise or defend legal claims.

Service providers processing personal data on our behalf must act under appropriate contractual obligations, including confidentiality and security requirements. Some recipients act as independent controllers and are responsible for their own processing.

6. International transfers

Our international operations and service providers may require personal data to be accessed or processed outside your country, including outside the European Economic Area (“EEA”).

Where the GDPR applies, transfers outside the EEA are made using an applicable legal mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with additional safeguards where required.

You can contact us for information about the safeguards relevant to your data and how to obtain a copy.

7. How long we retain information

We retain personal data for the period necessary for the relevant purpose:

  • Enquiries and quotations: for the time needed to address your request and a reasonable follow-up period, taking account of whether a business relationship develops.

  • Customer and supplier records: for the duration of the relationship and afterwards where required for statutory recordkeeping, warranties or applicable legal claim periods.

  • Marketing records: until you unsubscribe or we determine that continued retention is no longer appropriate. We may retain limited suppression information to respect your objection.

  • Cookie data: for the periods specified in Cookie Notice.

When information is no longer needed, we delete or anonymise it, subject to lawful retention requirements.

8. Cookies and similar technologies

Our website may use cookies and similar technologies to provide essential functionality and, where enabled, understand website use or support marketing.

Where consent is required, optional technologies will only be activated after you consent. You can refuse optional cookies or change your choices through Cookie Settings.

Our Cookie Notice provides details of the technologies used, their providers, purposes and retention periods.

9. Keeping information secure

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure. Access is restricted according to business needs.

No method of electronic transmission or storage is completely secure.

10. Your rights

Depending on the applicable law and circumstances, you may have the right to:

  • Access your personal data and obtain a copy.

  • Correct inaccurate or incomplete information.

  • Request deletion or restriction of processing.

  • Receive certain data in a portable format.

  • Object to processing based on legitimate interests.

  • Object to direct marketing at any time.

  • Withdraw consent without affecting the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact info@multiboxx.com. We may request proportionate information to verify your identity.

Where the GDPR applies, we normally respond within one month. If a lawful extension is necessary, we will explain the reason within that period.

You may also complain to the relevant data protection authority, including the authority in the EEA country where you live or work, or where an alleged infringement occurred. For processing subject to Hong Kong law, you may contact the Office of the Privacy Commissioner for Personal Data.

11. Automated decisions

We do not use your personal data to make solely automated decisions that produce legal or similarly significant effects on you.

12. Changes to this notice

We may update this notice to reflect changes in our operations, website or legal requirements. The current version will be published on this page with its revision date. Where required, we will notify you of material changes.