Privacy Policy
How BoxBudy collects, uses, shares, and protects your personal information when you shop sports cards, hobby boxes, and supplies with us — and the choices you have.
Our promise: we collect only what we need to fulfil your orders and support you, we never sell your data, and you can ask us to access, correct, or delete it at any time.
This Privacy Policy explains how BOXBUDY LLC ("BoxBudy," "we," "us") collects, uses, shares, and protects your personal information when you visit boxbudy.us or buy from us. By using our site, you agree to the practices described here.
What Information We Collect
We collect only the information we need to run our store, fulfil your orders, and support you.
1.1Information you give us
- Order and account details: your name, billing and shipping address, email address, and phone number when you place an order or create an account.
- Payment details: handled by our payment processor. We see only limited details, such as card type and last four digits — never your full card number.
- Messages: anything you send us by email, phone, or our contact form, such as order questions or return requests.
- Marketing preferences: if you choose to join our email list.
1.2Information collected automatically
- Device and usage data: your IP address, browser type, operating system, pages viewed, and how you reached our site.
- Cookies: small files that keep your cart and login working and, if enabled, help us measure site traffic and advertising (see Section 07).
How We Use Your Information
- To process, ship, and deliver your orders, and send order confirmations and tracking updates.
- To handle returns, refunds, warranty claims, and customer support requests.
- To prevent fraud and keep our store secure.
- To understand how visitors use our site and improve it.
- To measure the performance of our ads (see Section 06).
- To send marketing emails about new releases and offers — only if you've opted in. You can unsubscribe anytime.
We do not sell your personal information.
Consent
When you give us personal information to complete a transaction — placing an order, arranging delivery, or processing a return — you consent to us using it for that purpose. If we ask for your information for another purpose, such as marketing, we'll ask for your consent or give you a clear way to say no.
Withdrawing consent: you can change your mind at any time. Use the unsubscribe link in any marketing email, or contact us at sales@boxbudy.us or +1 (205) 745-5565.
How We Share Information
We share personal information only when needed to run our business:
- Service providers: payment processors, shipping carriers, website hosting, and email providers — only the information they need to perform their service for us.
- Legal reasons: when required by law, or to protect our rights, our customers, or the public — for example, if you violate our Terms of Service.
- Business transfers: if our business is sold or merged, your information may transfer to the new owner, who must continue to protect it.
Some providers may process data in other jurisdictions and have their own privacy policies, which we encourage you to review. When you click a link that takes you off our site, this Privacy Policy no longer applies.
Payment Security
Payments on boxbudy.us are processed by trusted third-party payment providers that comply with the Payment Card Industry Data Security Standard (PCI-DSS), the security standard maintained by the PCI Security Standards Council and supported by Visa, Mastercard, American Express, and Discover.
- Your full card number is entered on the payment provider's secure system and is never stored on our servers.
- All data sent between your browser and our site is encrypted with SSL/TLS.
Analytics and Advertising
We may use Google Analytics to understand how visitors use our site, and Google Ads to measure whether our ads lead to visits and purchases. If we use remarketing, Google may show you our ads on other websites based on your earlier visits to boxbudy.us. These services use cookies, and Google processes the data under its own Privacy Policy.
- Manage personalized ads in Google Ad Settings.
- Opt out of Google Analytics with the Google Analytics Opt-out Add-on.
- Opt out of interest-based ads from participating companies at optout.aboutads.info.
- Block or delete cookies in your browser. We honor Global Privacy Control (GPC) signals where required by law.
Cookies
Our store runs on WordPress and WooCommerce. These are the main cookies we use:
| Cookie | Purpose | Duration |
|---|---|---|
| woocommerce_cart_hash | Remembers changes to your cart | Session |
| woocommerce_items_in_cart | Tracks whether your cart has items | Session |
| wp_woocommerce_session_* | Keeps your cart and checkout session | 2 days |
| wordpress_logged_in_* | Keeps you signed in to your account | Session or 14 days |
| wordpress_test_cookie | Checks that your browser accepts cookies | Session |
| _ga, _ga_* | Google Analytics — anonymous traffic statistics (if enabled) | Up to 2 years |
| _gcl_au | Google Ads — conversion measurement (if enabled) | 90 days |
The cart and session cookies are essential for the store to work. You can block or delete other cookies in your browser settings without losing the ability to shop.
Data Retention
We keep order records for as long as needed to fulfil orders, handle returns and warranty claims, and meet tax and accounting requirements. Marketing data is kept until you unsubscribe. When information is no longer needed, we delete it or make it anonymous.
Your Privacy Rights
Depending on where you live, you may have the right to:
These rights may apply to residents of California (CCPA/CPRA), Colorado, Virginia, Connecticut, and other U.S. states with privacy laws. To make a request, email sales@boxbudy.us. We'll verify your identity and respond within the time required by law, and you can appeal if we decline. We will never discriminate against you for using your rights.
Security
We take reasonable precautions and follow industry practices to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction — including SSL/TLS encryption, PCI-DSS compliant payment processing, and limited internal access. No method of transmission or storage is 100% secure, but we work hard to keep your information safe.
Age Requirements
By using this site, you confirm that you are at least the age of majority in your state of residence, or that you are using the site with the consent and supervision of a parent or guardian. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we'll delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes take effect when posted on this page, and we'll update the date at the top. If we make significant changes, we'll highlight them here so you always know what we collect, how we use it, and when we share it.
Questions and Contact Information
Questions about this Privacy Policy, or want to access, correct, or delete your information? Contact BOXBUDY LLC:
Privacy FAQ
Your name, addresses, email, and phone number when you order; limited payment details from our processor; messages you send us; and basic device and usage data such as your IP address.
No. We never sell your personal information. We share it only with service providers who help us run the store, or when required by law.
No. Card details are entered on our PCI-DSS compliant payment provider’s secure system and never stored on our servers.
We may use them to understand site traffic and measure ad results. You can opt out through Google Ad Settings, the Google Analytics opt-out add-on, or your browser’s cookie settings.
Click the unsubscribe link in any marketing email, or email sales@boxbudy.us and we’ll remove you.
Yes. Email sales@boxbudy.us. We’ll verify your identity and delete your information, except records we must keep for legal or tax reasons.