Privacy Policy

It covers visitors to this website, school staff who contact us about a supply program, and — once ordering opens — families whose supply box orders we process. That includes families who order and pay us directly through their school's program, and families in programs the school administers and covers, where we process the order without charging the family for the required supplies.

• School inquiries. When a school contacts us through the For Schools form, we collect the school name, your name, role or title, work email, city and state, and optionally a phone number, approximate enrollment, grades served and your message.
• Family and order information (when ordering opens). Contact name, email address and an optional phone number, along with the order and its contents.
• Student information (when ordering opens). The details a school's program needs in order to prepare and label a box — typically the student's name, grade, and where a school requires it, teacher or homeroom, section, or a school-assigned student identifier.
• School, grade and course selections. The school, grade and any course or option choices made for a box.
• Payment-related information (when payments are enabled, and only where a family pays us directly). In some programs the school administers and covers the required supplies, so no payment is taken from the family for them. Where a family does pay us, payment will be processed by a payment provider. We expect to receive confirmation and limited transaction details; we do not intend to receive or store full card numbers.
• Technical and security information. IP address, request timing and similar information used to apply rate limits, detect automated abuse and keep the service available.
• Cookies and similar technologies. We use cookies and browser storage that are necessary for the website to function, such as keeping a cart during a visit and identifying an order receipt.
• Bot protection. Forms are protected by Cloudflare Turnstile, which receives information from your browser in order to distinguish people from automated submissions.

• To respond to a school's inquiry and discuss a possible supply program.
• To build and operate a school's supply program.
• To prepare, label, pack and deliver supply boxes correctly once ordering opens.
• To process and confirm orders — whether a family orders and pays us directly through its school's program, or the school administers and covers the required supplies — and to process payments once payments are enabled.
• To provide customer support and handle questions about an order.
• To protect the website and our systems from abuse, fraud and security incidents.
• To meet record-keeping, accounting and other legal obligations.

Student information is collected for one purpose: identifying and preparing the correct supply box for that student and delivering it to the right school, grade and classroom. We do not use student information for advertising, and we do not build student profiles. Where a school directs how student information should be handled, we work to that direction.

We share information only where it is needed to run the service:

• Participating schools. A school receives the information it needs to distribute boxes to its students.
• Service providers. We use providers for website hosting, database and application infrastructure, email delivery, bot protection, and — once enabled — payment processing. They may handle information on our behalf in order to provide those services.
• Legal reasons. Where required by law, or to protect our rights, safety, or the integrity of the service.

We do not sell personal information.

We apply technical and organisational safeguards, including access controls that restrict internal data to authorised staff, encryption of traffic to this website, database-level access rules, rate limiting and bot protection on public forms. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We keep information for as long as needed for the purpose it was collected, and afterwards where a business or legal record is required — for example order and accounting records. Specific retention periods for school inquiries and order records have not been finalised; when they are, they will be described here.

You may contact us to ask what information we hold about you, to correct it, or to ask us to delete information we are not required to keep. Where a school holds the relationship — for example student records a school provides — we will work with the school on the request. If you contacted us by mistake, tell us and we will remove your details.

We may update this policy as the service develops, particularly when ordering and payments open. The current version is always the one published on this page.

Questions about this policy or about information we hold can be sent to info@allsuppliesbox.com.