1 Who is responsible
SHARK FORGE 112337 LLC, operating as Boomi Box, is responsible for the personal information described here. Our address is 7901 4th St N, Ste 15863, St. Petersburg, FL 33702, United States; email [email protected]. This Policy explains how we handle information through boomibox.com, orders, subscriptions and customer support. It is a notice of our practices, not a request for blanket consent.
2 Information we collect
You provide contact and account information, such as your name, email address, login credentials and any phone number you supply; billing and delivery addresses; plan selections, orders, payment status and subscription changes; gift recipient details and messages; and information in support requests. You may also provide a child’s first name or nickname, birth month or age range, and box style preference where those fields are offered. Provide only the details needed for the service.
Payment information is collected by our payment provider. We receive transaction information and limited card details such as brand and last four digits, rather than full card numbers or security codes. Secure payment by Stripe.
We also collect technical information such as IP address, browser and device details, pages viewed, timestamps, security logs and cookie identifiers, to the extent generated by the technologies actually used. Sources include you, an adult gift purchaser, your browser or device, payment and delivery providers, and service providers supporting our website.
3 How we use information
We use information to accept and fulfill orders, manage accounts and subscriptions, process payments and refunds, deliver boxes, respond to requests, and send billing, renewal, delivery and safety messages. We also use it to detect fraud, protect the website, maintain records and comply with legal obligations. Child details supplied by an adult are used only as needed to personalize and deliver the service and provide support.
We send marketing emails with your consent. You can unsubscribe through each marketing email or contact us. Unsubscribing does not stop necessary messages about active orders, subscriptions or safety. Analytics and advertising uses, if enabled, are described in section 6 and subject to applicable choices and consent. We do not use children’s details for targeted advertising.
4 Children and families
Our shopping, account and subscription services are intended for adults. Although the products are for children aged 3 – 6, children should not create accounts, place orders or send personal information through the site. We do not knowingly collect personal information directly from children under 18. Optional child information should be supplied by a parent or another authorized adult. We do not sell or share children’s personal information for targeted advertising.
If you believe a child has provided personal information directly, contact us so we can investigate, delete it where appropriate, and take any further steps required by law. A parent or guardian may ask to review, correct or delete child details supplied through their account, subject to necessary verification and legal exceptions. Please do not send children’s photos, full birth dates, school details or sensitive information unless specifically necessary and requested through an appropriate process.
5 When we disclose information
We disclose information as needed to providers supporting hosting and security, payment and subscription administration, warehousing and packing, delivery, email communications and customer support. They receive the information needed for their role and must handle it under applicable contractual and legal requirements. Payment providers and carriers may also act independently for some activities, such as fraud prevention or legal compliance.
We may disclose information to professional advisers, authorities or other parties where legally required or reasonably necessary to protect rights and safety. Information may be transferred as part of a merger or business sale, subject to appropriate safeguards and any required notice. We do not make gift recipient or child details publicly available merely because you order.
7 How long we keep information
We retain information only for as long as reasonably necessary for the purposes described here. Account information is kept while the account is active and as needed to close it or resolve requests. Order, payment, tax and subscription consent records may be kept longer to satisfy legal requirements, document transactions, address disputes and prevent fraud. Support records are retained as needed to resolve issues and establish relevant history.
Optional child details are deleted or deidentified when no longer needed for personalization or delivery, subject to necessary legal retention. Marketing contact details are kept until you unsubscribe or they are no longer needed; we may retain a minimal suppression record to honor your choice. Technical data is retained according to security needs and the verified cookie or system settings.
8 Your rights and choices
You can update account information, unsubscribe from marketing, and use available cookie choices. Depending on where you live and which laws apply, you may also request access, correction, deletion or a portable copy of your information; withdraw consent; restrict or object to certain processing; and opt out of sale, sharing, targeted advertising or certain profiling. Where applicable, you may limit uses of sensitive information and appeal a denied request.
Email [email protected] with your request. We may reasonably verify your identity or an authorized agent’s authority, but will not request more information than necessary. We respond within the applicable legal deadline and explain any permitted refusal or extension and available appeal process. We do not discriminate against you for exercising legal privacy rights. Deleting account information does not itself cancel a subscription; request cancellation separately if you also want billing to stop. We may retain records where the law permits or requires it.
9 Additional information for Europe and the United Kingdom
Where the GDPR or UK GDPR applies, we rely on contractual necessity for adult account, order and subscription administration; legal obligations for required records and disclosures; and legitimate interests for proportionate security, fraud prevention, support and service improvement, subject to your rights. We rely on consent for marketing and optional tracking where required. Optional personalization information about a child supplied by a parent is processed with the parent’s consent where that is the appropriate legal basis. You may withdraw that consent without affecting the lawfulness of earlier processing. Essential order information is required to fulfill your order; optional information is not.
10 International processing and security
Boomi Box is operated by a US company. Information may be processed in the United States and in other countries where our team and providers operate.
We use reasonable technical and organizational safeguards appropriate to the information and risk. No online system is completely secure. Protect your login details and notify us about suspected unauthorized access. External websites and social media platforms have their own privacy practices.
11 Changes and contact
We will post updates with a revised effective date and provide additional notice or seek consent for material changes when required by law.
Privacy questions and requests:
SHARK FORGE 112337 LLC
7901 4th St N, Ste 15863, St. Petersburg, FL 33702, United States
https://boomibox.com/