Privacy Policy

Last updated: September 1, 2026

This Privacy Policy describes how www.toysntreatsbox.com (the “Site,” “we,” “us,” or “our”) collects, uses, and discloses your Personal Information when you visit, interact with, or make a purchase from the Site.

Contact

After reviewing this Privacy Policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us:

Email: Info@toysntreatsbox.com

Collecting Personal Information

When you visit or interact with the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information when you contact us, communicate with us through our online chat, or otherwise request customer support.

In this Privacy Policy, “Personal Information” means information that identifies, relates to, describes, or could reasonably be associated with an identifiable individual.

Device Information

Purpose of collection: To load the Site accurately for you, provide and improve the Site, perform analytics, maintain security, and understand how visitors use our Site.

Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, pixels, and similar technologies.

Disclosure for a business purpose: May be shared with Shopify and other service providers that help us operate, secure, analyze, and improve the Site.

Personal Information collected: Web browser type and version, IP address, time zone, cookie information, pages and products viewed, search terms, referring websites, and information about how you interact with the Site.

Order Information

Purpose of collection: To provide products or services to you, fulfill orders, process payments, arrange shipping, provide invoices and order confirmations, communicate with you, screen orders for potential risk or fraud, and, where permitted and consistent with your preferences, provide information about our products, services, promotions, or offers.

Source of collection: Collected from you.

Disclosure for a business purpose: May be shared with Shopify, payment processors, shipping and fulfillment providers, and other service providers necessary to fulfill your order and operate our business.

Personal Information collected: Name, billing address, shipping address, payment information, email address, telephone number, and information relating to your order.

Customer Support and Chat Information

Purpose of collection: To provide customer service and support, respond to questions, communicate with you, assist with products and orders, address problems or requests, and improve our customer service.

Source of collection: Collected directly from you when you contact us by email, online chat, or other customer-support channels.

Disclosure for a business purpose: May be shared with Shopify and service providers that help us provide customer support, operate our online store, and process customer communications.

Personal Information collected: Information you choose to provide during a customer-support interaction, which may include your name, email address, telephone number, order information, messages, questions, and other information contained in your communications.

Shopify-Powered AI-Assisted Chat

We use Shopify to power AI-assisted chat on our online store through Shopify Inbox and its Inbox agent.

When you interact with our AI-assisted chat, Shopify may process information associated with your interaction, including your chat communications and information made available to the Inbox agent through our store. This information may be processed to generate responses to your questions and provide customer assistance.

Shopify may also process customer data, including chat communications, to improve the quality of the Inbox agent over time, subject to Shopify’s applicable privacy practices and agreements with us.

The Inbox agent may use information from our product catalog, store policies, knowledge-base information, and published storefront content to answer questions. Depending on Shopify features and your interaction with our store, the Inbox agent may also use information associated with your Shopify or Shop account when applicable.

You should not provide sensitive personal information, passwords, full payment-card information, Social Security numbers, or other information that you do not want processed through the chat.

AI-generated responses may contain errors or may not always accurately reflect our products, policies, inventory, shipping information, or other information. AI-assisted chat is provided for general customer assistance and does not replace your responsibility to review important information before relying upon it.

Shopify’s processing of information is also subject to Shopify’s own privacy practices. You can review Shopify’s current Privacy Policy here:

Shopify Privacy Policy

For information about Shopify Inbox, including how the Inbox agent operates, please see:

Shopify Inbox information

Minors

The Site is not intended for individuals under the age of 18. We do not knowingly collect Personal Information directly from children under 18.

If you are a parent or legal guardian and believe that a child has provided us with Personal Information, please contact us using the contact information above and request that the information be deleted.

Sharing Personal Information

We share Personal Information with service providers that help us provide our services, operate our Site, process transactions, fulfill orders, provide customer support, prevent fraud, and otherwise operate our business.

For example:

• We use Shopify to power our online store, including Shopify Inbox and AI-assisted chat.
• We may share information with payment processors and financial service providers necessary to process transactions.
• We may share information with shipping and fulfillment providers necessary to deliver orders.
• We may share information with analytics, advertising, technology, customer-support, and other service providers that assist us in operating our business.
• We may disclose Personal Information when reasonably necessary to comply with applicable laws and regulations, respond to subpoenas, court orders, search warrants, or other lawful requests, or protect our rights, property, customers, or others.

You can review Shopify’s current privacy practices here:

Shopify Privacy Policy

Behavioural Advertising

As described above, we may use Personal Information to provide targeted advertising or marketing communications that we believe may be of interest to you.

We may use Shopify Audiences and other advertising or marketing technologies where enabled on our store. These services may involve sharing certain information relating to purchases, Site activity, or other information with advertising partners or platforms, subject to applicable privacy laws and the settings available to you.

Where required by applicable law, we provide mechanisms that allow you to opt out of certain forms of targeted advertising or the sale or sharing of Personal Information.

You may also use available privacy controls provided by advertising platforms and applicable industry opt-out programs.

Using Personal Information

We may use your Personal Information to:

• Provide and improve our products and services.
• Process and fulfill orders.
• Process payments.
• Arrange shipping and delivery.
• Provide invoices and order confirmations.
• Communicate with you about orders, products, services, questions, and customer support.
• Provide AI-assisted customer service through Shopify Inbox.
• Prevent, investigate, and address fraud, security incidents, and other unlawful activity.
• Maintain, secure, troubleshoot, and improve our Site.
• Perform analytics and understand how customers use our Site.
• Provide marketing and advertising where permitted by law and consistent with your preferences.
• Comply with legal and regulatory obligations.
• Protect our rights, property, customers, and business.

Lawful Basis for Processing

If you are a resident of the European Economic Area, United Kingdom, or another jurisdiction where a lawful basis is required, we may process your Personal Information based on one or more of the following lawful bases:

• Your consent.
• Performance of a contract with you.
• Compliance with our legal obligations.
• Our legitimate interests, where those interests are not overridden by your fundamental rights and freedoms.
• Other lawful bases permitted under applicable law.

Where we rely on consent, you may withdraw your consent where applicable.

Retention

We retain Personal Information for as long as reasonably necessary to provide our services, fulfill orders, maintain appropriate business and transaction records, comply with legal and accounting obligations, resolve disputes, prevent fraud, enforce our agreements, and otherwise fulfill the purposes described in this Privacy Policy.

When you place an order through the Site, we may retain information associated with that order for our records as required or permitted by applicable law.

Where you request deletion of your Personal Information, we will evaluate and respond to the request in accordance with applicable law and any legal obligations that require us to retain certain information.

Automated Decision-Making

If you are a resident of the EEA or another jurisdiction providing rights regarding automated decision-making, you may have the right to object to certain processing based solely on automated decision-making, including profiling, when that processing produces legal effects or similarly significant effects.

We do not use AI-assisted customer chat to make decisions that have legal or similarly significant effects on customers.

Shopify may use automated systems for security and fraud-prevention purposes. For example, Shopify may temporarily restrict certain IP addresses or payment information associated with repeated failed transactions or suspected fraud.

Your Rights

European Economic Area and United Kingdom

Depending on your location and applicable law, you may have rights to:

• Access Personal Information we hold about you.
• Correct inaccurate or incomplete Personal Information.
• Request deletion of your Personal Information.
• Request restriction of certain processing.
• Object to certain processing.
• Receive certain Personal Information in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a relevant data protection authority.

To exercise applicable rights, contact us using the information in the “Contact” section above.

Your Personal Information may be processed or stored in countries outside your country of residence, including the United States and Canada. Where required, applicable safeguards are used for international transfers.

For additional information about Shopify's privacy and data protection practices:

Shopify Privacy Policy

California Privacy Rights

If you are a California resident, California privacy law may provide you with additional rights regarding your Personal Information.

Depending on the circumstances and applicable law, these rights may include the right to:

• Know and access certain Personal Information we collect about you.
• Request deletion of certain Personal Information.
• Request correction of inaccurate Personal Information.
• Obtain information about how Personal Information is collected, used, disclosed, sold, or shared.
• Opt out of certain sales or sharing of Personal Information.
• Opt out of certain targeted or cross-context behavioral advertising.
• Limit certain uses and disclosures of sensitive Personal Information where applicable.
• Exercise your privacy rights without unlawful discrimination.

To exercise applicable rights, contact us using the contact information above.

We may need to verify your identity before completing certain requests. We will process verified requests in accordance with applicable California law.

If you use an authorized agent to submit a request on your behalf, we may require appropriate verification and authorization as permitted by law.

Cookies

A cookie is a small amount of information that is downloaded to your computer or other device when you visit a website.

We use cookies and similar technologies to operate our Site, remember preferences, maintain shopping-cart and checkout functionality, provide security, perform analytics, and, where enabled and permitted, support advertising and marketing.

Shopify places certain cookies and similar technologies on merchant storefronts. Because Shopify periodically changes and updates the cookies used on its platform, we do not intend this Privacy Policy to serve as a complete permanent list of every Shopify cookie.

For the most current information regarding Shopify's merchant-storefront cookies, please review Shopify's current Cookie Policy:

Shopify Cookie Policy

You may also control cookies through your browser settings and, where available, through the privacy and cookie controls provided on our Site.

Blocking or deleting certain cookies may affect the functionality of the Site, including shopping-cart, checkout, account, or other features.

Do Not Track

Because there is currently no universally accepted standard for responding to browser-based “Do Not Track” signals, we may not alter our data collection or usage practices solely in response to such signals.

Where required by applicable law, we will honor other legally recognized privacy signals or opt-out mechanisms.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, the services we use, applicable laws, regulations, or other operational, legal, or regulatory requirements.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.

Complaints

If you have a concern or complaint about our privacy practices, please contact us using the information provided in the “Contact” section above.

We will review and respond to complaints in accordance with applicable law.

If you are not satisfied with our response, you may have the right to lodge a complaint with the applicable data protection or privacy authority in your jurisdiction.

---

Last updated: September 1, 2026