Privacy Policy
Last updated: 14 June 2026
This Privacy Policy explains how WhiteBox (“WhiteBox”, “we”, “us” or “our”) collects, uses, discloses and protects personal data when you visit whitebox.sg, create an account, or use our inventory and retail-operations software and related services (the “Services”). We handle personal data in accordance with Singapore’s Personal Data Protection Act 2012 (“PDPA”) and other applicable laws.
By using the Services, you acknowledge that you have read and understood this Policy.
1. Who we are
WhiteBox is a software company based in Singapore providing inventory, order and multi-channel retail management software to brands, retailers and distributors. For the personal data we process about our own customers and website visitors, WhiteBox is the data controller. Where we process data on behalf of a customer (for example, the contacts contained in a customer’s orders), WhiteBox acts as a data intermediary/processor and processes that data under the customer’s instructions.
2. Information we collect
- Account and contact information — name, business name, email address, phone number, role, and login credentials.
- Billing information — billing address and transaction records. Card payments are processed by our third-party payment providers; we do not store full card numbers.
- Customer content — product, inventory, order, fulfilment and channel data you and your team upload or connect to the Services, which may include the personal data of your own customers (such as names and shipping addresses).
- Usage and device data — IP address, browser type, device identifiers, pages viewed, actions taken, and timestamps, collected automatically when you use the website or Services.
- Communications — messages, support requests, and feedback you send us.
3. How we use personal data
- To provide, operate, maintain and improve the Services;
- To create and manage your account and authenticate users;
- To process subscriptions, billing and payments;
- To provide customer support and respond to enquiries;
- To send service-related communications, and (where permitted) marketing about our products — you may opt out at any time;
- To monitor, secure and troubleshoot the Services, and prevent fraud and abuse;
- To comply with legal obligations and enforce our agreements.
4. Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, remember preferences, measure performance, and understand how the website and Services are used. You can control cookies through your browser settings; disabling some cookies may affect functionality. Where required, we will request your consent for non-essential cookies.
5. How we share personal data
We do not sell personal data. We may share it with:
- Service providers who support our operations (hosting, payment processing, analytics, email, and customer support), bound by confidentiality and data-protection obligations;
- Integration partners you choose to connect (such as sales channels, marketplaces, shipping carriers and accounting tools), to the extent needed to provide the integration you enable;
- Professional advisers, regulators or authorities where required by law, regulation or legal process;
- Successors in connection with a merger, acquisition or sale of assets, subject to this Policy.
6. International transfers
The Services may be hosted on, and personal data may be processed on, servers located outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure it is afforded a standard of protection comparable to that under the PDPA.
7. Data retention
We retain personal data for as long as your account is active and as needed to provide the Services, and thereafter only as required to comply with our legal obligations, resolve disputes and enforce our agreements. You may request deletion of your account data as described below; certain records may be retained where the law requires.
8. Security
We implement reasonable administrative, technical and physical safeguards designed to protect personal data against unauthorised access, use, disclosure, alteration or loss, including encryption in transit, access controls and regular backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
9. Your rights
Subject to applicable law, you may request to access, correct or update the personal data we hold about you, and withdraw consent to our collection, use or disclosure of your personal data. To exercise these rights, contact us using the details below. We may need to verify your identity before acting on a request, and some requests may be subject to limitations under the PDPA.
10. Third-party services
The Services may link to or integrate with third-party websites and services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies.
11. Children
The Services are intended for businesses and are not directed to individuals under 18. We do not knowingly collect personal data from children.
12. Changes to this Policy
We may update this Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. Material changes may be notified to you by email or through the Services.
13. Contact us
If you have questions about this Policy or our handling of personal data, or wish to make a request, please contact our Data Protection Officer:
WhiteBox
Attn: Data Protection Officer
Email: hello@whitebox.sg
Singapore