Industries

  • Information and Communications Technology
  • Cloud Computing
  • SaaS Providers

Participation

UK Extension to the EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 8/22/2023
Next Certification Due Date: 10/1/2024
Data Collected: NON-HR

Swiss-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 8/8/2017
Next Certification Due Date: 10/1/2024
Data Collected: NON-HR

EU-U.S. Data Privacy Framework Framework: Active

Original Certification Date: 10/5/2016
Next Certification Due Date: 10/1/2024
Data Collected: NON-HR

Purpose of Data Collection

Box processes personal data on behalf of our business customers (data controllers) in order to provide the Box Services, including uploading, downloading, collaborating on and sharing Content. For more information about the types of information collected and the applicable uses of information, please see the Box Privacy Notice: https://www.box.com/legal/privacypolicy and the Box Subprocessor Page: https://www.box.com/legal/subprocessors.

Privacy Policy

Non-HR Data

Description:

The Box Privacy Notice explains how information (including personal data as defined under GDPR) is collected, retained, used, disclosed, and transferred by Box and the available choices individuals have with regard to their personal information.

Effective Date: 7/1/2023

Dispute Resolution

Questions or Complaints?

If you have a question or complaint regarding the covered data, please contact Box, Inc. at:

Leah Perry
Chief Privacy Officer
Box, Inc.
900 Jefferson Ave., Redwood City, CA 94063
900 Jefferson Ave
Redwood City, California 94063-1837

Privacy Shield organizations must respond within 45 days of receiving a complaint.

If you have not received a timely or satisfactory response from Box, Inc. to your question or complaint, please contact the independent recourse mechanism listed below


NON-HR RECOURSE MECHANISM



Appropriate statutory body with jurisdiction to investigate any claims against Box, Inc. regarding possible unfair or deceptive practices and violations of laws or regulations covering privacy Federal Trade Commission