Carton | Legal | Privacy Policy

Introduction

Carton is a marketplace of vetted manufacturers for customers to purchase custom packaging and print materials. Successful marketplaces are built on trust and reliability. In that spirit, it is important that we are clear about how we use your information and protecting your human right to privacy.

This Privacy Policy describes how Carton Packaging & Print, Inc. and its affiliates (“we,” “us,” or “Carton”), process personal information in relation to your use of the Carton Platform.

1. Definitions

Undefined terms in this Privacy Policy have the same definition as in our Terms of Service (“Terms”).

2. Personal Information We Collect

2.1 Information Needed To Use The Carton Platform

We collect personal information about you when you use the Carton Platform. Without it, we may not be able to provide all services requested. This information includes:

Personal Information: Such as first name, last name, phone number, postal address, email address.
Company Information: Such as legal entity name, phone number, postal address, personal information of executive members, payment information, reseller licenses.

2.2 Information Automatically Collected by using the Carton Platform and our Payment Services.

When you use the Carton Platform and Payment Services, we automatically collect personal information. This information may include:

Geo-location Information: Such as precise or approximate location determined from your IP address.
Usage Information: Such as the pages or content you view, searches for products and suppliers, orders you have made, and other actions on the Carton Platform.
Payment Transaction Information: Such as payment instrument used, date and time, payment amount, payment instrument expiration date and billing postal code, IBAN information, your address, and other related transaction details.

2.3 Personal Information We Collect from Third Parties

We collect personal information from other sources, such as:

Background Information: For Members in the United States, to the extent permitted by applicable laws, we may obtain, for example, reports of criminal records, sex offender registrations, and other information about you and/or your background. For Members outside of the United States, to the extent permitted by applicable laws and with your consent where required, we may obtain the local version of police, background, or registered sex offender checks. We may use your information, including your full name and date of birth, to obtain such reports.
Product Invitations and Account Management: Organizations may submit personal information to facilitate account management and invitations to use the Carton Platform.

3. How We Use Information We Collect

3.1 Provide, Improve, and Develop the Carton Platform

Such as to:

enable you to access the Carton Platform and make and receive payments,
process your quotes and orders
perform analytics, debug and conduct research
provide customer service and training
send you messages, updates, security alerts, and account notifications,
personalize and customize your experience based on your interactions with the Carton Platform

3.2 Create and Maintain a Trusted and Safer Environment

Including to:

detect and prevent fraud, spam, abuse, security and safety incidents, and other harmful activity,
conduct security investigations and risk assessments,
verify or authenticate information provided by you,
comply with our legal obligations and with the law, respond to legal requests, prevent harm, and protect our rights
resolve disputes with our Merchants, and
enforce our agreements with third parties.

3.3 Provide Payment Services

Personal information is used to enable, or authorize third parties to use, Payment Services such as to:

detect and prevent money laundering, fraud, abuse, and security incidents,
conduct security investigations and risk assessments,
comply with legal obligations (such as anti-money laundering regulations), and
provide and improve Payment Services.

To help facilitate bookings or other interactions between Merchants and Suppliers, we may need to share certain information such as:

When a quote and order request is made, or a dispute is submitted, certain information may be shared between Merchant(s) and Supplier(s), including profile, name, cancellation history, review information, legal entity name, dispute outcome (when applicable), and other information you choose to share and submit. When an order is confirmed, additional information is shared to assist with coordinating the shipping, like warehouse address and recieving information. When you as a Supplier have a confirmed an order, certain information is shared with the Metchant to coordinate the order, such as your profile, entity name, phone number, and listing address.

4.2 Information You Publish in Profiles, Listings, and other Public Information

By using the Carton Platform, Supplier makes certain information publicly visible to others, such as:

Your public profile page, which includes entity name, addresses, products, materials, processes, factory images, and company history.

Information you share publicly on the Carton Platform may be indexed through third-party search engines.

4.3 Complying with Law, Responding to Legal Requests, Preventing Harm and Protecting our Rights

We may disclose your information to courts, law enforcement, governmental or public authorities, tax authorities, or authorized third parties, if and to the extent we are required or permitted to do so by law or where disclosure is reasonably necessary to: (i) comply with our legal obligations, (ii) comply with a valid legal request (such as a subpoena or court order) or to respond to claims asserted against Carton, (iii) respond to a valid legal request relating to a criminal investigation to address alleged or suspected illegal activity, or to respond to or address any other activity that may expose us, you, or any other of our users to legal or regulatory liability, or (iv) protect the rights, property or personal safety of Carton, its employees, its Merchants, its Suppliers, or members of the public. For example, if permitted due to the foregoing circumstances, tax information may be shared with tax authorities or other governmental agencies.

Where legally required or permissible according to applicable law, we may disclose Merchants’ and/or Suppliers’ information to tax authorities for the purpose of the tax authorities’ determination of proper compliance with relevant tax obligations.

4.4 Service Providers

We share personal information with affiliated and unaffiliated service providers to help us run our business and for their compliance purposes, including service providers that help us: (i) verify your identity or authenticate your identification documents, (ii) check information against public databases, (iii) conduct background or police checks, fraud prevention and risk assessment, (iv) perform product development, maintenance and debugging, (v) allow the provision of the Carton Services through third-party platforms and software tools (e.g. through the integration with our APIs), (vi) provide customer service, advertising, or payments services, or (vii) process, handle or assess insurance claims or similar claims. These providers are contractually bound to protect your personal information and have access to your personal information to perform these tasks.

5. Analyzing your Communications

We may review, scan, or analyze your communications on the Carton Platform for reasons outlined in the “How We Use Information We Collect” section of this policy, including fraud prevention, risk assessment, regulatory compliance, investigation, product development, research, analytics, enforcing our Terms of Service, and customer support purposes. In some cases, we may also scan, review, or analyze messages to debug, improve, and expand product offerings. We use automated methods where reasonably possible. Occasionally we may need to manually review communications, such as for fraud investigations and customer support, or to assess and improve the functionality of these automated tools. We will not review, scan, or analyze your messaging communications to send third-party marketing messages to you and we will not sell reviews or analyses of these communications.

6. Your Rights

You can exercise any of the rights described in this section consistent with applicable law. We may ask you to verify your identity and request before taking further action on your request.

6.1 Managing Your Information

You can access and update some of your personal information through your account settings or email your account manager.

6.2 Data Access and Portability

In some jurisdictions, applicable law may entitle you to request certain copies of your personal information or information about how we handle your personal information, request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format, and/or request that we transmit this information to another service provider (where technically feasible).

6.3 Data Erasure

In some jurisdictions, you can request that your personal information be deleted. Please note that if you request deletion of your personal information, or if your account is suspended, terminated, or voluntarily closed:

We may retain your personal information as necessary for our legitimate business interests, such as prevention of money laundering, fraud detection and prevention, and enhancing safety.
We may retain and use your personal information to the extent necessary to comply with our legal obligations.
Because we take measures to protect data from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.

7. Security

While no organization can guarantee perfect security, we are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration.

8. Changes To This Privacy Policy

We reserve the right to modify this Privacy Policy at any time in accordance with applicable law. If we do so, we will post the revised Privacy Policy and update the “Last Updated” date at the top. In case of material changes, we will also provide you with notice of the modification by email at least thirty (30) days before the effective date. If you disagree with the revised Privacy Policy, you can cancel your Account. If you do not cancel your Account before the date the revised Privacy Policy becomes effective, your continued access to or use of the Carton Platform will be subject to the revised Privacy Policy.

9. Contact Information

For questions or complaints about this Privacy Policy or Carton's handling of personal information contact Carton Packaging & Print, Inc at 1160 Arizona St. Redlands, CA 92374 USA.