Effective date: August 23, 2026
Last updated: August 23, 2026
MyBox Productions (“MyBox Productions,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit myboxproductions.com (the “Site”) or engage us for web design, development, or website maintenance services (the “Services”), how we use that information, who we share it with, and the choices you have.
If you have questions about this policy, contact us using the details in the Contact Us section below.
1. Who We Are
MyBox Productions is a web design and development studio based in South Florida. We build, optimize, and maintain websites for businesses across a range of industries.
- Address: 15800 Pines Blvd, Pembroke Pines, FL 33027
- Phone: 954.302.3181
- Contact form: myboxproductions.com/contact-us
For visitors in the European Economic Area (EEA) or the United Kingdom, MyBox Productions is the “controller” of the personal data described in this policy.
2. Scope of This Policy
This policy applies to information we collect:
- Through the Site;
- Through our contact forms, email, and phone calls;
- In the course of providing Services to our clients and prospective clients.
This policy does not apply to:
- Websites we build or maintain for our clients. Those sites are operated by our clients under their own privacy policies. Where we handle data on a client’s behalf, we act as a service provider or “processor” and use that data only as the client instructs (see Section 3.C).
- Third-party websites or services we link to (see Section 14).
3. Information We Collect
A. Information You Provide to Us
We collect information you choose to give us, including:
| What | When you give it | Typical fields |
|---|---|---|
| Contact form submissions | You use a contact or quote form on the Site | Name, email address, subject, message |
| Direct correspondence | You email or call us | Name, email, phone number, and anything you include in your message |
| Client and project information | You engage us for Services | Business name, billing contact, billing address, project requirements, brand assets, and content you supply |
| Credentials and access | You hand off a project or maintenance work | Hosting, domain registrar, CMS, plugin, and analytics logins you provide so we can perform the work |
We do not sell products through the Site and we do not collect or store payment card numbers on the Site. Invoicing and payment are handled outside the Site through our accounting and payment providers, which process payment details under their own privacy policies.
B. Information Collected Automatically
When you visit the Site, certain information is collected automatically by our servers and by the third-party tools we use:
- Log data. Your IP address, browser type and version, operating system, device type, referring URL, pages requested, and date and time of each request. Our web host records this as part of normal server operation and for security.
- Usage and analytics data. How you arrived at the Site, which pages you view, how long you stay, what you click, approximate geographic location (derived from IP address, typically city-level), and screen and device characteristics. Collected via Google Tag Manager and Google Analytics.
- Anti-spam data. When you submit a form, our spam-filtering service receives your IP address, browser user agent, the time of submission, and the contents of the submitted fields in order to determine whether the submission is automated spam.
- Cookies and similar technologies. See Section 4.
C. Information We Handle on Behalf of Clients
When we build or maintain a website for a client, we may be able to access personal data that belongs to that client — for example, their customers’ names, email addresses, form submissions, order records, or site user accounts.
We treat that data as the client’s, not ours. We access it only as needed to perform the Services, we do not use it for our own purposes, we do not sell it, and we do not disclose it except as the client directs or as the law requires. If you are an end user of a client’s website and want to exercise privacy rights over your data, please contact that website’s operator directly.
D. Information We Do Not Intentionally Collect
We do not ask for and do not want sensitive personal information such as Social Security numbers, government ID numbers, financial account numbers, precise geolocation, biometric data, health information, or information about your race, religion, political opinions, sexual orientation, or union membership. Please do not send this information to us through the Site’s contact forms.
4. Cookies and Similar Technologies
A cookie is a small text file stored on your device by your browser. The Site uses cookies and similar technologies for the purposes described below.
| Category | Purpose | Examples |
|---|---|---|
| Strictly necessary | Keep the Site functioning and secure — session handling, spam prevention, and remembering your preferences | WordPress session cookies, anti-spam cookies |
| Functional | Remember preferences so the Site behaves consistently across visits | Theme and display preference cookies |
| Analytics and performance | Understand how visitors find and use the Site so we can improve it | Google Analytics cookies |
| E-commerce framework | Our WordPress installation includes e-commerce plugin components that set cookies for cart state and referral attribution, even though we do not currently sell products online | Cart, session, and source-attribution cookies |
Managing cookies. Most browsers let you view, delete, and block cookies through their settings. Blocking cookies may cause parts of the Site to work incorrectly. Instructions are published by the makers of Chrome, Safari, Firefox, and Edge.
You can also opt out of Google Analytics specifically by installing the Google Analytics Opt-out Browser Add-on.
5. How We Use Information
We use the information described above to:
- Respond to you — answer questions, prepare quotes and proposals, and follow up on inquiries.
- Provide the Services — design, build, launch, and maintain websites we are engaged to work on.
- Administer our business — invoice clients, keep records, and manage our client relationships.
- Operate and secure the Site — monitor for errors, prevent fraud and abuse, filter spam submissions, and protect against unauthorized access.
- Improve the Site and our Services — understand which pages and services get attention, diagnose usability problems, and inform future work.
- Send business communications — for example, project updates, service notices, renewal reminders, or occasional information about our services. If we send marketing email, every message includes an unsubscribe link.
- Comply with law — meet legal, tax, accounting, and regulatory obligations, and establish or defend legal claims.
We Do Not Sell Your Personal Information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. We have not done so in the preceding twelve months.
6. Legal Bases for Processing (EEA and UK Visitors)
If you are in the EEA or the UK, we process your personal data on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Responding to your inquiry; providing Services under a contract | Performance of a contract, or steps taken at your request before entering a contract |
| Site security, spam prevention, analytics, service improvement, business administration | Our legitimate interests in running a secure, functional, and effective business — balanced against your rights |
| Marketing email where required | Your consent, which you may withdraw at any time |
| Tax, accounting, and legal record-keeping | Compliance with a legal obligation |
7. How We Share Information
We share personal information only in these circumstances:
- Service providers. With vendors who perform functions on our behalf — web hosting, email delivery, analytics, spam filtering, accounting, and payment processing. They receive only what they need to perform their function and are obligated to protect it.
- Clients. If you submitted an inquiry through a website we maintain for a client, that inquiry goes to the client.
- Professional advisors. With our accountants, attorneys, and insurers where reasonably necessary.
- Legal requirements. When we believe disclosure is required by law, subpoena, court order, or other legal process, or is necessary to protect the rights, property, or safety of MyBox Productions, our clients, or others.
- Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business, subject to the acquirer honoring this policy.
- With your direction. When you ask us to share it.
We do not disclose personal information to third parties for their own independent marketing purposes.
8. Third-Party Services We Use
The Site and our business currently rely on the following third parties, each of which handles data under its own privacy policy:
| Provider | Function | Privacy policy |
|---|---|---|
| Google (Tag Manager, Analytics) | Tag management and website analytics | policies.google.com/privacy |
| CleanTalk | Anti-spam filtering of form submissions | cleantalk.org/publicoffer |
| Our web hosting provider | Site hosting, server logs, backups | Available on request |
| Our email and accounting providers | Business correspondence and invoicing | Available on request |
This list may change as we update the Site. We will keep this section reasonably current.
9. Data Retention
We keep personal information only as long as we need it for the purposes described in this policy, and then delete it or de-identify it. In practice:
| Data | Typical retention |
|---|---|
| Contact form submissions and inquiry emails | Up to 24 months after the last contact, unless the inquiry becomes a project |
| Client project files, contracts, and correspondence | Duration of the engagement plus 7 years, to meet contract, tax, and record-keeping needs |
| Server and security logs | Typically 30 to 90 days |
| Analytics data | Per our Google Analytics retention setting, up to 14 months |
| Client credentials we hold for maintenance | Duration of the maintenance engagement; we ask clients to rotate credentials when an engagement ends |
We may retain information longer where a longer period is required by law or where the information is needed to establish or defend a legal claim.
10. Data Security
We take reasonable administrative, technical, and physical measures to protect personal information, including encrypted connections (HTTPS/TLS) across the Site, access controls and multi-factor authentication on the systems we administer, keeping software and plugins patched, and limiting credential access to the people who need it.
No method of transmission or storage over the internet is completely secure. We cannot guarantee absolute security, and you send information to us at your own risk. If you believe your interaction with us is no longer secure, contact us immediately.
11. Your Privacy Rights
Depending on where you live, you may have some or all of the rights below. We extend the core rights to all Site visitors as a matter of practice, regardless of location.
- Access. Ask what personal information we hold about you and get a copy.
- Correction. Ask us to fix information that is inaccurate or incomplete.
- Deletion. Ask us to delete information we hold about you.
- Portability. Receive certain information in a portable, machine-readable format.
- Opt out. Opt out of marketing email at any time, and opt out of analytics as described in Section 4.
- Withdraw consent. Where we rely on consent, withdraw it at any time without affecting processing already carried out.
- Non-discrimination. We will not deny you services, charge you a different price, or give you a lesser quality of service for exercising your privacy rights.
- Objection and restriction (EEA/UK). Object to processing based on legitimate interests, or ask us to restrict processing in certain circumstances.
How to exercise your rights. Submit a request through our contact form, selecting or writing “Privacy Request” as the subject. You may also call us or write to us at the postal address in Section 17. Tell us what right you want to exercise and give us enough information to locate your records. We will respond within 45 days where required by California law, or within one month where required by the GDPR, and will tell you if we need more time.
Verification. To protect your information, we will take reasonable steps to verify your identity before acting on a request. We may ask you to confirm details we already hold. We will not use verification information for any other purpose.
Authorized agents. You may use an authorized agent to submit a request. We may ask the agent for proof of authorization and may still ask you to verify your identity directly.
Appeals. If we decline your request, you may appeal by replying to our decision with the word “Appeal” and your reasons. We will respond in writing with the outcome and, if we again decline, tell you how to contact your state attorney general.
EEA/UK complaints. You have the right to lodge a complaint with your local supervisory authority. In the UK, that is the Information Commissioner’s Office. We would appreciate the chance to address your concern first.
12. Do Not Track and Global Privacy Control
Some browsers transmit a “Do Not Track” (DNT) signal. There is no industry-accepted standard for how to respond to DNT, and the Site does not currently respond to DNT signals.
We do honor Global Privacy Control (GPC) signals where our systems detect them, treating a GPC signal as a request to opt out of any sale or sharing of personal information. As noted in Section 5, we do not sell or share personal information in the first place.
13. Children’s Privacy
The Site and Services are intended for businesses and adults. We do not knowingly collect personal information from children under 13, and the Site is not directed to children. If you believe a child has given us personal information, contact us through our contact form or by phone and we will delete it promptly.
14. Third-Party Links
The Site links to third-party websites and social media profiles, including our profiles on X (Twitter), Facebook, and Instagram. We do not control those sites and are not responsible for their content or privacy practices. Once you leave the Site, this policy no longer applies. Review the privacy policy of any site you visit.
15. International Visitors
We operate in the United States, and our servers and service providers are located primarily in the United States. If you access the Site from outside the United States, the information we collect will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country. Where required for transfers from the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. By using the Site, you understand that your information will be processed in the United States.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes to our practices, technology, or legal requirements. When we do, we will revise the “Last updated” date at the top of this page. If the changes are material, we will provide more prominent notice, such as a notice on the Site’s homepage or an email to affected clients. We encourage you to review this page periodically.
17. Contact Us
Questions, requests, or complaints about this Privacy Policy or our handling of your information:
MyBox Productions
15800 Pines Blvd
Pembroke Pines, FL 33027
United States
Phone: 954.302.3181
Contact form: myboxproductions.com/contact-us
Our contact form is the fastest way to reach us, including for privacy requests. If you would rather not use the form, call us or write to the postal address above and we will respond by whichever method you prefer.
