Privacy Policy

Last updated: June 2026

This is a template for guidance. Have it reviewed by a qualified lawyer before you rely on it — especially the grievance-officer details required under India's DPDP Act.

BeachBox ("we", "us") runs a monthly prize draw for beachwear. This policy explains what personal data we collect when you enter, why we collect it, who we share it with, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

1. What we collect

Identity & contact: name, email address, WhatsApp/phone number, Instagram handle.
Profile & preferences: city, clothing size, style preference, and your next beach destination.
Entry activity: the actions you take to earn extra entries (follow, tag, share), your entry count, and which monthly draw you entered.
Technical: IP address and the date/time of your entry, plus cookies and advertising identifiers (see section 6).

2. Why we use it

To run the draw — register your entry, verify eligibility, select and contact winners, and ship prizes.
To send you offers, updates and marketing from BeachBox and our partners (only where you have consented).
To understand our audience in aggregate (e.g. cities, regions, style trends) and improve the service.
To measure and run advertising campaigns (see section 6).

3. Your consent

We process your data on the basis of the consent you give when you tick the box and submit your entry. You can withdraw consent at any time (section 7); withdrawing won't affect processing already carried out, but may mean you can no longer take part in the draw.

4. Sharing with sponsors & partners

BeachBox is funded by brand sponsors (for example swimwear, sunscreen, resort and travel partners). Where you have consented, we may share your contact details and preferences with these partners so they can send you relevant offers. We may also share aggregated, non-identifying statistics (such as "38% of entrants are travelling to Goa") with sponsors and advertisers. We do not sell your data.

5. Content you create

If you tag BeachBox or share posts/stories as part of an entry or after winning, you grant us permission to re-share that content on our own channels and in marketing, with credit to your handle.

6. Cookies & advertising

We use cookies and pixels — including Google Analytics and the Meta (Facebook/Instagram) Pixel — to measure traffic, understand how entries are completed, and run and optimise advertising. These tools may set identifiers that let us and the platforms show you relevant ads. You can control cookies through your browser settings and opt out of personalised ads via the Google and Meta ad-settings pages.

7. Your rights

Under the DPDP Act you may, subject to conditions, ask us to:

access a summary of the personal data we hold about you;
correct or update inaccurate data;
erase your data when it's no longer needed; and
withdraw your consent.

To exercise any right, email us at privacy@beachbox.in.

8. Retention

We keep entry data for as long as needed to run the draws and our marketing, and for as long as required by law. You can ask us to delete it sooner.

9. Children

The draw is open only to individuals aged 18 and over. We do not knowingly collect data from children.

10. Grievance officer

As required by the DPDP Act, our Grievance Officer can be reached at privacy@beachbox.in. We aim to respond to all requests within the timeframes prescribed by law.

11. Changes

We may update this policy from time to time. The "last updated" date above shows when it last changed.