GDPR

Last Updated: March 11, 2026

At Cardoo Packaging, we are committed to maintaining the highest standards of data privacy and security. This page outlines how we comply with the General Data Protection Regulation (GDPR) and what this means for our customers, partners, and visitors worldwide who interact with our mill-direct packaging platform.

1. Our Commitment to Data Protection

Whether you are ordering custom corrugated boxes from Europe or seeking wholesale packaging solutions from our headquarters in Fairfield, NJ, your privacy is our priority. Cardoo Packaging ensures that all personal data is collected, processed, and stored legally, fairly, and transparently.

2. Data Collection and Usage

We collect only the minimum amount of data necessary to provide you with high-performance packaging services. This includes:

Contact Information: Name, email, and phone number for processing quotes and orders.
Business Details: Industry type and shipping address to optimize your factory-direct shipping.
Technical Data: IP addresses and cookies to improve your user experience on our site.

We use this data solely to fulfill our contractual obligations, improve our sustainable paper solutions, and communicate important updates regarding your orders.

3. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can ask us to correct any inaccurate or incomplete information.
Right to Erasure (“Right to be Forgotten”): You can request that we delete your data when it is no longer necessary for the purposes it was collected.
Right to Data Portability: You can request that we transfer your data to another provider in a machine-readable format.
Right to Object: You can object to the processing of your data for direct marketing purposes.

4. Data Security and Storage

Cardoo Packaging employs robust technical and organizational measures to protect your data against unauthorized access, loss, or theft. Our systems are regularly audited to ensure that your industrial and commercial data remains secure within our global manufacturing network.

5. International Data Transfers

As a global provider with a main hub in Fairfield, NJ, we ensure that any data transferred between the EU and the US is protected by appropriate legal safeguards, such as Standard Contractual Clauses (SCCs), to ensure a level of protection equivalent to that of the GDPR.

6. Third-Party Disclosures

We do not sell, rent, or trade your personal data. We only share information with trusted third-party service providers (e.g., logistics partners for mill-direct delivery) who are also committed to strict data protection standards.