At The Open Box Management (TOBM) we treat your data the way we would want ours treated. This page explains, plainly, what information we collect on theopenboxm.com, what we use it for, and what you can ask us to do with it.
What we collect
What you give us. Only what you type into the forms on this site:
- Contact form: name, email, the service you are interested in, and your message.
- Consultation booking: name, email, phone, and any notes you leave. We ask for the phone for one specific reason: if Google Meet fails on the day of the call, we call you.
- Newsletter: your email address.
- Blog comments: name, email, your comment, and your IP address.
What is collected automatically. As on almost any website: your IP address, the browser and device you use, the page you arrived from, and the pages you viewed. We use it to understand which content is useful and which is not.
What we use it for
- Replying to your messages and running the consultation you booked.
- Sending the newsletter, if you subscribed. You can unsubscribe at any time.
- Publishing your comment on the relevant article.
- Understanding how the site is used, so we can improve it.
What we do not do: we do not sell your information to anyone. We do not add you to the newsletter because you filled in the contact form or booked a call. And we do not use your data for anything other than what you gave it to us for.
Who we share it with
Only the services that keep the site running, and only what each one needs:
- SiteGround — website hosting.
- Brevo — sending the site’s email.
- Google Calendar and Google Meet — creating the appointment and its video link.
- Google Analytics — site usage statistics.
- Meta (Facebook and Instagram) — measuring our advertising campaigns. Explained separately below, because it is the case where we share the most information.
- Gravatar (Automattic) — showing profile pictures on comments, if you have one linked to your email.
Each of those services has its own privacy policy. We may also share information if the law requires it.
How we measure our ads
When you book a consultation from one of our campaign pages, we send Meta (Facebook and Instagram) your name, email and phone number in encrypted form. Your browser applies one-way encryption (SHA-256) before anything leaves your device: Meta does not receive those details in the clear, and we do not send anything readable. Meta uses them to recognise whether that booking came from one of our ads.
Part of this measurement also happens from our server, not only from your browser (this is Meta’s Conversions API).
If your browser tells us no, we don’t push. Some browsers — Brave, Firefox and DuckDuckGo among others — can send a signal called Global Privacy Control, meaning "do not sell or share my data". When that signal arrives, we do not load the Meta pixel or Google Analytics during your visit. You don’t need to do anything else or accept any dialog: it is honoured automatically.
Why we do it: to know which ad brings real clients and stop paying for the ones that do not. Without it, we are paying blind.
If you would rather we did not, you can:
- book from our scheduling page, which does not send your contact details to Meta;
- message us on WhatsApp or call us, and we will book it by hand;
- adjust in your own Facebook account, under "Off-Facebook activity", what Meta does with information it receives from other sites;
- ask us to delete your data, as in any other case.
Separately, the Meta pixel and Google Analytics measure visits in aggregate across the site. That is explained in our cookie policy.
How long we keep it
Messages and bookings, for as long as there is an open conversation or business relationship. Blog comments, for as long as the article is published. Newsletter subscriptions, until you unsubscribe.
If you want something deleted sooner, ask and we will delete it.
Your rights
You can ask us at any time to:
- tell you what information of yours we hold;
- correct anything that is wrong;
- delete your data;
- unsubscribe you from the newsletter;
- stop sending your details to Meta for ad measurement.
Write to us and we will respond. You do not need to explain why you are asking.
Children
This site is aimed at businesses and adults. We do not knowingly collect information from children under 13. If you believe a child has given us their data, write to us and we will remove it.
Security
The site runs over HTTPS and the forms are protected against automated submissions. No website can promise absolute security, but we can commit to not asking for more data than we need: the less we store, the less there is to protect.
Changes to this policy
If it changes, we update this page and the date shown above. Significant changes are announced on the site.
How to reach us
Write to info@theopenboxm.com or use the Contact page. We are The Open Box Management, based in Miami, Florida.