Privacy policy

Privacy Policy

Last updated: October 6, 2025

This Privacy Policy describes how boxflipz.com (the “Site,” “we,” or “us”) collects, uses, and discloses your personal information when you visit or make a purchase.

On this page

Collecting Personal Information

We collect information about your device, how you interact with the Site, and details needed to process orders. “Personal Information” means any data that can identify an individual.

Device information

  • Examples: browser version, IP address, time zone, cookie identifiers, pages/products viewed, search terms, and usage interactions.
  • Purpose: to load the Site accurately and perform analytics that optimize performance and experience.
  • Source: collected automatically via cookies, log files, web beacons, tags, and pixels.

Order information

  • Examples: name, billing and shipping address, payment information (e.g., credit card details), email address, and phone number.
  • Purpose: to fulfill our contract (process payment, arrange shipping, provide invoices/confirmations), communicate with you, screen for risk or fraud, and—per your preferences—send information about our products or services.
  • Source: collected directly from you.

Support communications

We may collect additional information you provide when you contact us for customer support or pre-sales questions.

Sharing Personal Information

We share Personal Information with service providers to help us provide our services and fulfill contracts with you, including:

  • Shopify: our store platform. Read Shopify’s privacy practices: shopify.com/legal/privacy.
  • Legal compliance and protection: we may disclose information to comply with laws, respond to lawful requests, or protect our rights.

Behavioural Advertising

We use Personal Information to provide targeted advertisements or marketing communications we believe may be of interest to you.

Opt-out of targeted ads

Broader opt-out: Digital Advertising Alliance.

Using Personal Information

We use Personal Information to provide our services: offer products for sale, process payments, ship and fulfill orders, and keep you up to date on products, services, and offers aligned with your preferences.

Lawful Basis (GDPR)

If you are in the European Economic Area (EEA), we process your Personal Information under these legal bases:

  • Your consent
  • Performance of a contract
  • Compliance with legal obligations
  • Protection of vital interests
  • Public interest tasks
  • Legitimate interests that do not override your rights and freedoms

Retention

When you place an order, we retain Personal Information for our records unless and until you request erasure. See “Your Rights” below to request deletion.

Automatic Decision-Making

If you are in the EEA, you may object to processing based solely on automated decision-making (including profiling) when it has legal or significant effects.

  • Our practice: we do not engage in fully automated decision-making that has legal or otherwise significant effects using customer data.
  • Shopify’s fraud prevention: Shopify may use limited automated decision-making to prevent fraud (e.g., temporary denylisting of IPs or cards after repeated failed transactions).

Your Rights (GDPR)

EEA residents can request access to the Personal Information we hold, portability, correction, updates, or erasure. To exercise these rights, contact us (see “Contact”).

Your Personal Information may be processed in Ireland and then transferred outside Europe (e.g., to Canada and the United States) for storage and further processing. Learn how Shopify supports GDPR compliance: Shopify GDPR Whitepaper.

Your Rights (CCPA/CPRA – California)

California residents can request access (Right to Know), correction, deletion, and portability of Personal Information. You may also designate an authorized agent to submit requests. To exercise rights, contact us (see “Contact”). If provided on our Site, you may use a “Do Not Sell or Share My Personal Information” link.

Cookies

Cookies are small files placed on your device. We use functional, performance, advertising, and social media/content cookies to improve your experience and analyze usage. Blocking cookies may affect Site functionality.

Cookies necessary for the store to function

Name Function
_ab Access to admin
_secure_session_id Storefront navigation
cart, cart_sig, cart_ts, checkout_token, secret Checkout and cart
secure_customer_sig, storefront_digest, _shopify_u Customer login & account updates

Reporting & analytics

Name Function
_tracking_consent Tracking preferences
_landing_page, _orig_referrer Track landing pages
_s, _shopify_fs, _shopify_s, _shopify_sa_p, _shopify_sa_t, _shopify_y, _y Shopify analytics & marketing/referrals

Session cookies expire when you stop browsing; most persistent cookies expire between ~30 minutes and 2 years unless deleted earlier in your browser.

Do Not Track

We do not alter our data collection and use practices when a browser sends a “Do Not Track” signal, due to the lack of consistent industry standards.

Changes

We may update this Privacy Policy periodically to reflect changes to our practices or for operational, legal, or regulatory reasons.

Contact

For questions, requests, or complaints about our privacy practices, contact us: