Privacy Policy 
Last updated: 1st May 2026  

Introduction 

Welcome to the Boxed privacy policy. 

Boxed. (“Boxed.”, “we”, “us” or “our”) is a frozen food business operating in the Cayman Islands. 

We respect your privacy and are committed to protecting your personal data. This privacy policy explains how your personal data is collected, used, disclosed and protected when you visit our website or interact with any of our brands online. 

This policy is issued in accordance with the Cayman Islands Data Protection Act (2021 Revision). 

This website is not intended for children, and we do not knowingly collect personal data relating to children. 

1. Important Information and Who We Are 

Purpose of this Privacy Policy 

This privacy policy explains how personal data is collected and processed through: 

  • The Boxed website 

  • Online forms, enquiries and subscriptions 

  • Purchases, bookings and customer interactions across our brands 

Contact Details 

If you have questions about this privacy policy or wish to exercise your legal rights, please contact us: 

Data Protection Contact 
Justyna Hachulska 
Managing Director  
justyna@catering.ky 

You have the right to make a complaint at any time to the Ombudsman’s Office, the Cayman Islands supervisory authority for data protection issues: 
https://ombudsman.ky/ 

We would, however, appreciate the opportunity to address your concerns first. 

2. The Personal Data We Collect 

“Personal data” means any information that identifies or can be used to identify an individual. 

We may collect, use, store and transfer the following categories of personal data: 

  • Identity Data – name, title, date of birth, gender 

  • Contact Data – billing address, delivery address, email address, telephone numbers 

  • Financial Data – payment card or bank details (processed securely via third-party providers) 

  • Transaction Data – details of products or services purchased 

  • Technical Data – IP address, browser type, device data, operating system, time zone 

  • Profile Data – account details, preferences, feedback, survey responses 

  • Usage Data – how you use our website and services 

  • Marketing & Communications Data – marketing preferences and communication history 

We may also collect Aggregated Data (such as statistical or demographic data), which does not identify you. 

 

 

Special Categories of Data 

We do not intentionally collect special categories of personal data (such as health data, biometric data, religious beliefs, or criminal records). 

3. How We Collect Your Personal Data 

We collect personal data through: 

Direct Interactions 

When you: 

  • Make a purchase or booking 

  • Create an account 

  • Subscribe to mailing lists 

  • Enter competitions or surveys 

  • Contact us by phone, email or online forms 

Automated Technologies 

When you interact with our website, we automatically collect technical and usage data through cookies, server logs and similar technologies. 

Third Parties 

We may receive data from: 

  • Analytics providers 

  • Payment processors 

  • Delivery and logistics partners 

  • Advertising and marketing platforms 

  • Publicly available sources 

4. How We Use Your Personal Data 

We will only use your personal data where permitted by law, including: 

  • To perform a contract with you 

  • Where necessary for our legitimate business interests 

  • To comply with legal obligations 

Common Purposes 

We use personal data to: 

  • Provide products and services 

  • Process payments and manage accounts 

  • Communicate with customers 

  • Improve our websites and services 

  • Administer promotions, competitions and surveys 

  • Send marketing communications (where permitted) 

  • Ensure website security and prevent fraud 

5. Marketing and Communications 

You will only receive marketing communications from us if: 

  • You have requested information, or 

  • You have purchased goods or services and have not opted out 

We will obtain express consent before sharing your data with third parties for marketing. 

You may opt out at any time by: 

  • Using unsubscribe links 

  • Updating your preferences 

  • Contacting us directly 

6. Cookies 

Our website uses cookies to improve functionality and user experience. 

You may disable cookies via your browser settings. Please note that some features may not function correctly if cookies are disabled. 

7. Disclosures of Your Personal Data 

We may share your personal data with: 

  • Service providers (IT, payment processing, delivery, marketing) 

  • Professional advisers (lawyers, accountants, insurers) 

  • Regulators or authorities where legally required 

All third parties are required to respect data confidentiality and security. 

8. International Transfers 

We do not routinely transfer personal data outside the Cayman Islands. 
If international transfers become necessary, appropriate safeguards will be implemented. 

9. Data Security 

We implement appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access or disclosure. 

Access to personal data is limited to those with a legitimate business need. 

10. Data Retention 

We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including legal, regulatory and accounting requirements. 

In some cases, data may be anonymised and retained for research or statistical purposes. 

11. Your Legal Rights 

Under Cayman Islands data protection law, you may have the right to: 

  • Access your personal data 

  • Correct inaccurate data 

  • Request erasure 

  • Object to processing 

  • Restrict processing 

  • Withdraw consent 

  • Request data portability 

Requests may be made by contacting us using the details above. 

12. Changes to This Policy 

We may update this privacy policy from time to time. The latest version will always be available on our website.