Privacy Policy

Giant Lockbox (“Giant Lockbox,” “we,” “us,” “our”) respects your privacy. This policy explains what information we collect when you visit giantlockbox.com or place a reservation with us, how we use it, who we share it with, and the choices you have. It applies to the website, our reservation/quote process, and any related phone or email interactions.

1. Who this policy covers

This policy applies to information collected by Giant Lockbox through:

• Our website at giantlockbox.com (forms, reservations, account areas)
• Phone calls and text messages with our placement experts
• Email correspondence about quotes, reservations, deliveries, or service
• Order processing and post-delivery follow-up

It does not apply to data practices of third-party websites we link to (e.g., a manufacturer or carrier site). Review the privacy policies of those sites separately.

2. Information we collect

Information you give us directly

• Contact info: name, phone number, email address.
• Delivery info: street address, city, state, ZIP, site access notes.
• Reservation/order details: container size, condition, modifications, quantity, requested delivery date.
• Payment info: credit card or ACH details if you complete a paid order. Card data is processed by our payment provider; we do not store full card numbers on our servers.
• Communications: the content of emails, phone notes, or chat messages you send us.

Information collected automatically when you visit the site

• Device & browser info: IP address, browser type and version, operating system, screen size, referring URL.
• Usage data: pages viewed, time on page, click paths, search terms used on our site.
• Cookies and similar technologies: see section 5 for details.

Information from third parties

• Ad/marketing platforms (Google Ads, Meta) may report aggregated data about clicks that brought you to our site.
• Map and address-validation services may return geographic or postal information used to estimate delivery feasibility.

3. How we use your information

We use the information we collect to:

• Respond to reservations, quote requests, and questions from you
• Schedule delivery, coordinate with carriers, and confirm site access
• Process payments and issue refunds
• Send order updates, delivery notifications, and post-delivery follow-up
• Improve the website, fix bugs, and analyze how the site is used
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations (tax, recordkeeping, lawful requests)
• Send marketing communications, only if you opt in — you can opt out at any time using the unsubscribe link in any marketing email

We do not sell your personal information, and we do not use it for automated decision-making that produces legal effects.

4. When we share information

We share information only with parties who need it to deliver your order or run our business:

• Trucking and delivery carriers — to schedule and execute container delivery. They receive your name, address, phone, and access notes.
• Container depots and manufacturers — to locate, stage, or modify the unit you ordered.
• Payment processor — to charge your card or process ACH transfers (we use a PCI-compliant processor; card data is tokenized and not stored on our servers).
• Hosting, email, analytics, and customer-support providers — under contracts that limit their use of your data to providing the service to us.
• Legal/regulatory authorities — when required by subpoena, court order, or applicable law.
• Successor entities — in the event of a merger, acquisition, or sale of business assets, your data may transfer to the successor under the same privacy obligations.

5. Cookies, analytics & tracking

Like most commercial sites, we use cookies and similar technologies to keep the site functional and to understand how it’s used.

Types of cookies we use

• Strictly necessary: session cookies, cart cookies, and security tokens required for the site to work. These can’t be turned off.
• Performance/analytics: first-party and third-party (e.g., Google Analytics) cookies that record aggregated usage stats. We use this data to improve the site.
• Marketing/advertising: third-party cookies (e.g., Google Ads, Meta Pixel) that measure ad performance and allow remarketing across other sites.

Managing cookies

You can disable or delete cookies in your browser settings. Most browsers also offer a “private browsing” mode that doesn’t retain cookies between sessions. Disabling strictly necessary cookies may break the cart and reservation flow.

6. Third-party services we use

Below are the categories of third-party services we currently use that may process visitor data. Specific vendors can change as we adjust our stack:

• Web hosting: Nexcess (managed WordPress hosting)
• CDN & security: Cloudflare
• Analytics: Google Analytics / Google Tag Manager
• Advertising: Google Ads, Microsoft Ads, Meta (Facebook/Instagram) pixel
• Payments: our PCI-compliant payment gateway
• Email/transactional messaging: our order-confirmation and CRM email provider
• Map & address services: Google Maps

Each provider has its own privacy policy. Where applicable, we have data-processing agreements in place limiting how they use the data they receive from us.

7. How long we keep your data

• Order & customer records: 7 years (tax and warranty support).
• Reservation requests that did not convert: up to 24 months, then deleted unless converted into an order.
• Marketing email subscribers: until you unsubscribe.
• Site usage / analytics logs: typically 14–26 months per the analytics provider’s default retention.
• Support emails / phone notes: 3 years after last contact.

You may request earlier deletion — see section 9.

8. How we protect your data

We use industry-standard safeguards to protect your information:

• HTTPS/TLS encryption on every page of the site, including all form submissions
• PCI-compliant payment processing — full card numbers are tokenized and never stored on our servers
• Access controls and audit logs on internal systems holding customer data
• Regular software, plugin, and dependency updates

No internet transmission or storage system is 100% secure. If we ever discover a breach affecting your data, we will notify you in accordance with applicable law.

9. Your rights (CCPA, GDPR, general)

Depending on where you live, you may have specific rights regarding your personal information. Regardless of jurisdiction, Giant Lockbox will honor the following requests for any individual:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we fix inaccurate information.
• Deletion: request that we delete your personal information, subject to records we must retain for legal or tax purposes (e.g., completed orders for 7 years).
• Opt-out of marketing: unsubscribe from marketing emails at any time via the link in each email.
• Opt-out of sale/sharing: we do not sell your data, so there is nothing to opt out of — but if our practices ever change, we will provide an opt-out method.

California residents (CCPA/CPRA): the rights above apply to you, plus the right to non-discrimination for exercising them. To submit a verifiable consumer request, email us using the contact information below.

EU/UK residents (GDPR): our lawful basis for processing your data is (a) the contract to fulfill your reservation/order, (b) our legitimate interest in operating and improving the site, and (c) your consent where required (e.g., non-essential cookies, marketing email). You may lodge a complaint with your local supervisory authority.

10. Do Not Track signals

Some browsers transmit a “Do Not Track” (DNT) signal. There is no agreed-upon industry standard for how sites should respond to DNT, and we do not currently change our behavior based on the signal. You can still manage cookies through your browser settings as described in section 5.

11. Children’s privacy

Our site and services are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent change. Material changes will be highlighted on this page or, where appropriate, communicated by email. Continued use of the site after a change indicates acceptance of the updated policy.

13. How to contact us

Questions about this policy, or about the data we hold on you, can be sent to:

Giant Lockbox
Attn: Privacy
71 Dolson Ave, Middletown, NY 10940
Phone: (845) 343-0700 — Mon–Sat, 7am–7pm ET

This policy is governed by the laws of the State of New York. Any dispute that cannot be resolved through direct discussion will be handled in the courts of Orange County, New York.