You have no items in your shopping cart.

Subtotal: CA$0.00

Privacy Policy

At Boxapy, we know you're unique, and we know you trust us with your personal information when you visit or join our community. This Privacy Policy spells out our commitment to protect that trust. It explains our privacy practices for (the "Site") and services provided by Personalized Beauty Discovery, Inc. ("boxapy," "we," or "us").

We believe in full disclosure when it comes to our privacy practices. This Privacy Policy explains what information we collect from you, how we collect it, how we use it and how we protect it. We want you to feel safe in our community, so we use industry-standard safeguards and procedures. We also let you control how much personal information you share and how certain information is used.

By visiting this Site, you accept this Privacy Policy's terms. You're not authorized to use this Site unless you agree with this Privacy Policy.

This Privacy Policy applies only to this Site. We're not responsible for the practices employed by any third-party sites including ones to which we link or that link to us. Those sites will have rules and practices of their own.

If you have any questions or concerns about this Privacy Policy or our privacy practices, please email us at or




We collect information from you on this Site to provide a meaningful, safe, efficient, and customized experience. We use this information to:

  • make it easier for you to use this Site,

  • communicate with you about your orders, billing and payment,

  • verify your identity when you make a purchase on our Site,

  • help you more quickly find information on Boxapy's products and services,

  • provide targeted online marketing for the Site,

  • create content on this Site that's more relevant to you, and

  • alert you to new products, services and special offers that might specifically interest you.

  1. Information You Provide.
    1. When You Join Boxapy. In order to join Boxapy you must choose a username and password. You also must provide a valid email address and your date of birth. We use your email to communicate with you about our Site and your registration. We ask for your date of birth to make sure you're old enough to use our Site and services. 

      If you provide us your email address but choose not to become a member, then we will retain your email address for a period to invite you back to the Site.

    2. When You Order from Us. If youorder from us, you must provide your: name, shipping address, billing address, and credit card information.

      We use this information, along with your email, for billing purposes, to fulfill your orders, and to communicate with you about your orders.

      We collect your credit card information through our Site. The credit card information is encrypted, and transmitted for storage to a high security vault according to strict industry standards. Once the data reaches the vault it is "tokenized". No credit card information is retained in ipsy's own systems. Instead we retain a token associated with your account that has no intrinsic value. Your credit card information is not exposed anywhere in our own systems. Please do not send your credit card information to our team directly, for example by emailing this information to a representative. Please use our secure, online system to enter your credit card information.

    3. When You Request Information from Us. If you want us to notify you regarding particular products or special offers, including Giveaways, or if you sign up for our emails, you'll need to give us your email address. 

    4. Public information you post on the Site. You can reduce the risk of being personally identified by choosing a username and profile image that do not identify you and by taking care to exclude any personal information in your comments, reviews, looks, or videos. You can change your username and profile picture at any time by logging into your account.

      Public information you post on other sites. We also may collect information you post publicly on third-party sites, but only if you choose to follow instructions we provide. For example, we may collect pictures you post publicly on Instagram and re-post them on our Site, but only if you choose to use the hash tag "#boxapy" inside your Instagram post. 

    5. Information We Automatically Collect or Receive.

    1. Log Files. Like most sites, Boxapy automatically receives and stores in log files certain information from your browser when you visit the Site. This information includes your Internet protocol ("IP") address, browser type, Internet service provider, the referring/exit pages, your operating system, and the date/time stamp of your Site visit. We use this information, which doesn't identify individual Site visitors, to analyze and understand how the Site works for you so we can improve it, to administer the Site, and to gather demographic information about Site visitors for targeted online marketing purposes. We may link this automatically collected information to your personal information.

    2. Cookies and Other Tracking Technologies Policy.


      We use a variety of technologies to help us understand how you use (the "Site") and our services (collectively, "boxapy"). This guide explains the tracking technologies boxapy uses and is part of our commitment to a high standard of transparency in our privacy practices.

      Types of tracking technologies

      • Cookies. This is a small data file sent from a server to your web browser that is stored in your browser and sent back to the server each time the browser makes a request to the server. Cookies can improve a site user's experience by, for example, allowing the site to keep a user logged in while browsing, saving a user's site preferences, and allowing a user to add items to a shopping cart and preserve cart contents between site visits, even when the user is not logged in.

      • Clear gifs, web beacons, tracking pixels. These are tiny graphics with a unique identifier. They function similarly to cookies and are used to track the online movements of web users. Unlike cookies which are stored on a user's computer hard drive, clear gifs are embedded on web pages and are single pixel wide. Boxapy does not tie information gathered by clear gifs to your personally identifiable information.

      Tracking Technology Lifespans

      • Single-session tracking technology: lasts only as long as your site visit. Single-session cookies expire and delete themselves when you leave the site or close your browser. They are used for technical purposes such as enabling better navigation through a site or generating aggregated statistics about how a site is used. Single-session cookies do not publicly expose your personal information.

      • Multi-session or persistent tracking technology: remains on your browser or mobile device until you choose to delete it or the cookie expires. Persistent cookies are used to recognize a computer that has previously visited a site. This can improve the user's experience, for example by continuing preference settings from previous visits and by allowing users to login without entering a password with every site visit.

      Tracking Purposes

      We use tracking technologies for these general purposes:

      • Because it is strictly necessary. This tracking is needed to make Boxapy work properly.

      • For performance. This tracking helps ipsy understand how the Site is functioning so Boxapy can improve the Site.

      • For functionality. This tracking retains your personal preferences as you use the Site.

      • For advertising. This tracking gathers data to help deliver advertising to you that interests you.

      Cookies Boxapy currently uses

      • Single session cookies are used to ensure the Site displays correctly on your device.

      • Persistent cookies are used to measure Site metrics such as which pages are popular, how often people visit the Site, whether people are visiting the Site for the first time, and whether visitors make purchases on the Site. They also are used to enhance Site functionality, for example to allow returning users to use the Site without logging in.

      Cookies for email subscribers

      We may use cookies to measure the effectiveness of our email communications and to tailor email content. 

      Third Party Cookies

      Boxapy partners with third-party service providers who set cookies and tracking pixels for Site visitors and members on our behalf in order to deliver their services. These services include targeted online marketing and analysis of data collected through cookies. These technologies allow a partner to recognize your computer or mobile device each time you visit or other sites that also utilize the third party's services, but do not allow access to personally identifiable information from Boxapy.

      Third parties may choose to include Boxapy widgets on their sites. When you load a site that has chosen to include our widgets, we receive analytics information through a cookie that may be used to enhance our data or to improve our services.

      Boxapy does not have access to or control over these third-party technologies, and they are not covered by our Privacy Policy.

      Managing Cookies

      You can delete cookies stored in your browser at any time. You also can choose not to accept cookies from any site, including, by changing the settings of your browser. If you reject or block all cookies in your browser settings, then you will not be able to fully use Boxapy's services.

    3. Information collected automatically. We automatically collect information from your browser or device when you visit the Site. This information includes your IP address, device ID, your browser type and language, access times, the content of any undeleted cookies that your browser previously accepted from us, and the referring site address.This information also includes your operating system or application, your location, and your activities voluntarily have submitted to us (for example, your email address).

  2. Other Information We Receive About You.

    As you might expect, we usually collect or receive information through our Site. But we also may collect information offline, and it's important to us that we preserve the privacy of your personal information both online and off. For example, if you call us to place an order, we ask for the shipping address needed to place that order. There are other ways we could learn of personal information offline, but this Privacy Policy doesn't try to predict all those methods. We just want you to know that we try to treat offline information collection, uses, and disclosures consistently with our online privacy practices.


  1. Information we collect from you may be either personal or aggregate. Personal information is identifiable to you, like your name, email address, shipping and billing addresses, credit card information, and phone number. Aggregate information is summary data of the behaviors and interests of groups or categories, so it won't identify you.

    1. Aggregate Information. We use aggregate information for the purposes of internal business research, sales and business development and reporting back to our brand partners. We may share aggregated information about our visitor and user base with third parties such as our advertising partners. This information may include the number of daily visitors to our Site and the number of orders placed on a certain date. 

    2. Personal Information. We do not sell, rent, trade, license, or otherwise disclose your personal information to third parties, except in these limited circumstances:

      1. Disclosures Required by Law or Otherwise. We may disclose your personal information if we believe, in good faith, that it's necessary to: (1) comply with a legal obligation such as in response to a court order or subpoena; (2) protect the safety of fellow ipsters or the public; (3) protect against legal liability; or (4) protect and defend ipsy's rights or property.

      2. Disclosures for a Business Transaction or Insolvency. We also may disclose your personal information in connection with an actual or proposed corporate transaction or insolvency proceeding involving all or part of Boxapy's business or assets. For example, if we merge with another company, we may disclose your personal information to that company, but the disclosure would be subject to our Privacy Policy.

      3. Disclosures of Giveaway Winners. We post the boxapy user names or social media handles of our lucky Giveaway winners on our Facebook page.




  1. Log Into Your Account. You can change the personal information you provide to us and remove any content you post publicly on our Site.

  2. Contact Us. You can request that we take down any of your personal content on the Site by emailing us at We will remove your public posts from view, but we may retain personal information about you solely for the purposes authorized under this Privacy Policy. For example, we may retain information to prevent, investigate, or identify possible wrongdoing in connection with the Site or to comply with legal obligations.

  3. Opt-Out. You can always "opt-out" of having your personal information used for certain purposes. At your request, we will stop sending you certain emails or even deactivate your account to prevent any future purchases through it. You can submit these requests at any time by emailing us at or




At Boxapy, we take data security seriously. We use technical, physical and administrative safeguards. Online, we encrypt your personal information using Secure Sockets Layer ("SSL"). SSL allows for a private, reliable Site connection where your identity is authenticated with cryptography. Offline, we restrict access to your personal information to only those boxapy employees who need it to perform a specific job function. And we require all boxapy employees with access to your personal information to follow specific practices concerning its proper handling. We also hold our vendors who need access to your personal information to strict confidentiality requirements. Third-party service providers assist us with the physical security of some of our computer hardware. When you visit our Site, you access servers that we backup constantly. Our servers are hosted at locations which are private and secure data center facilities, behind physical and virtual firewalls.

But please remember, while we use industry-standard precautions to safeguard your personal information, we can't guarantee absolute security. We wish we could, but 100% security just doesn't exist anywhere online or off.




We respect children's privacy. This Site is not intended for persons under the age of 13. If you're under 18 years old, please do not submit any personal information to us without the consent and supervision of a responsible parent or legal guardian.


We will post any changes and updates to this Privacy Policy on this Site so you can always be aware of what information we collect, use and disclose. We encourage you to review this Privacy Policy periodically so you'll know if it has been changed or updated.

Created: May 2, 2016
Last Updated: May 2, 2016