Privacy Policy

Last modified January 1, 2023


Carton is a marketplace of vetted manufacturers for customers to purchase custom packaging and print materials. Successful marketplaces are built on trust and reliability. In that spirit, it is important that we are clear about how we use your information and protecting your human right to privacy.

This Privacy Policy describes how Carton Packaging & Print, Inc. and its affiliates (“we,” “us,” or “Carton”), process personal information in relation to your use of the Carton Platform.

1. Definitions

Undefined terms in this Privacy Policy have the same definition as in our Terms of Service (“Terms”).

2. Personal Information We Collect

2.1 Information Needed To Use The Carton Platform

We collect personal information about you when you use the Carton Platform. Without it, we may not be able to provide all services requested. This information includes:

2.2 Information Automatically Collected by using the Carton Platform and our Payment Services.

When you use the Carton Platform and Payment Services, we automatically collect personal information. This information may include:

2.3 Personal Information We Collect from Third Parties

We collect personal information from other sources, such as:

3. How We Use Information We Collect

3.1 Provide, Improve, and Develop the Carton Platform

Such as to:

3.2 Create and Maintain a Trusted and Safer Environment

Including to:

3.3 Provide Payment Services

Personal information is used to enable, or authorize third parties to use, Payment Services such as to:

4. Sharing & Disclosure

4.1 Sharing Between Merchants & Suppliers

To help facilitate bookings or other interactions between Merchants and Suppliers, we may need to share certain information such as:

4.2 Information You Publish in Profiles, Listings, and other Public Information

By using the Carton Platform, Supplier makes certain information publicly visible to others, such as:

Information you share publicly on the Carton Platform may be indexed through third-party search engines.

We may disclose your information to courts, law enforcement, governmental or public authorities, tax authorities, or authorized third parties, if and to the extent we are required or permitted to do so by law or where disclosure is reasonably necessary to: (i) comply with our legal obligations, (ii) comply with a valid legal request (such as a subpoena or court order) or to respond to claims asserted against Carton, (iii) respond to a valid legal request relating to a criminal investigation to address alleged or suspected illegal activity, or to respond to or address any other activity that may expose us, you, or any other of our users to legal or regulatory liability, or (iv) protect the rights, property or personal safety of Carton, its employees, its Merchants, its Suppliers, or members of the public. For example, if permitted due to the foregoing circumstances, tax information may be shared with tax authorities or other governmental agencies.

Where legally required or permissible according to applicable law, we may disclose Merchants’ and/or Suppliers’ information to tax authorities for the purpose of the tax authorities’ determination of proper compliance with relevant tax obligations.

4.4 Service Providers

We share personal information with affiliated and unaffiliated service providers to help us run our business and for their compliance purposes, including service providers that help us: (i) verify your identity or authenticate your identification documents, (ii) check information against public databases, (iii) conduct background or police checks, fraud prevention and risk assessment, (iv) perform product development, maintenance and debugging, (v) allow the provision of the Carton Services through third-party platforms and software tools (e.g. through the integration with our APIs), (vi) provide customer service, advertising, or payments services, or (vii) process, handle or assess insurance claims or similar claims. These providers are contractually bound to protect your personal information and have access to your personal information to perform these tasks.

5. Analyzing your Communications

We may review, scan, or analyze your communications on the Carton Platform for reasons outlined in the “How We Use Information We Collect” section of this policy, including fraud prevention, risk assessment, regulatory compliance, investigation, product development, research, analytics, enforcing our Terms of Service, and customer support purposes. In some cases, we may also scan, review, or analyze messages to debug, improve, and expand product offerings. We use automated methods where reasonably possible. Occasionally we may need to manually review communications, such as for fraud investigations and customer support, or to assess and improve the functionality of these automated tools. We will not review, scan, or analyze your messaging communications to send third-party marketing messages to you and we will not sell reviews or analyses of these communications.

6. Your Rights

You can exercise any of the rights described in this section consistent with applicable law. We may ask you to verify your identity and request before taking further action on your request.

6.1 Managing Your Information

You can access and update some of your personal information through your account settings or email your account manager.

6.2 Data Access and Portability

In some jurisdictions, applicable law may entitle you to request certain copies of your personal information or information about how we handle your personal information, request copies of personal information that you have provided to us in a structured, commonly used, and machine-readable format, and/or request that we transmit this information to another service provider (where technically feasible).

6.3 Data Erasure

In some jurisdictions, you can request that your personal information be deleted. Please note that if you request deletion of your personal information, or if your account is suspended, terminated, or voluntarily closed:

7. Security

While no organization can guarantee perfect security, we are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration.

8. Changes To This Privacy Policy

We reserve the right to modify this Privacy Policy at any time in accordance with applicable law. If we do so, we will post the revised Privacy Policy and update the “Last Updated” date at the top. In case of material changes, we will also provide you with notice of the modification by email at least thirty (30) days before the effective date. If you disagree with the revised Privacy Policy, you can cancel your Account. If you do not cancel your Account before the date the revised Privacy Policy becomes effective, your continued access to or use of the Carton Platform will be subject to the revised Privacy Policy.

9. Contact Information

For questions or complaints about this Privacy Policy or Carton's handling of personal information contact Carton Packaging & Print, Inc at 1160 Arizona St. Redlands, CA 92374 USA.