Privacy Policy

Last Updated: April 30, 2025

1. Introduction

Boost Marketing LLC ("we," "us," or "our") operates the website sorpresabox.xyz and provides a subscription-based service for themed surprise boxes containing curated products like clothing, accessories, gadgets, and beauty items. We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website or subscribe to our service, in compliance with the California Consumer Privacy Act (CCPA) and other applicable U.S. regulations.

By using our website or subscribing, you consent to the practices described in this Privacy Policy. If you do not agree, please do not provide your personal information or use our services.

2. Information We Collect

We collect the following types of information:

2.1. Personal Information

When you subscribe or interact with our website, we collect:

• First name and last name
• Shipping address (street, city, state, ZIP code)
• Phone number
• Email address
• Preferences (e.g., product categories, clothing sizes)

2.2. Payment Information

To process the $2 initial subscription fee and recurring payments, we collect payment details (e.g., credit card information) through secure third-party payment processors. We do not store payment information on our servers.

2.3. Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on the website
• Referring website or advertisement

This data is collected using cookies, web beacons, and similar technologies, as outlined in our Cookie Policy (linked below).

2.4. Voluntary Information

You may provide additional information when contacting us via our Contact Us form or email, such as inquiries or feedback.

3. How We Use Your Information

We use your information for the following purposes:

• Service Delivery: To process subscriptions, ship surprise boxes, and manage customer accounts.
• Payment Processing: To securely process the fee and monthly subscription payments via third-party providers.
• Communication: To send order confirmations, shipping updates, and customer support responses.
• Marketing: To send promotional emails or newsletters about new boxes or offers, only with your explicit consent.
• Website Improvement: To analyze anonymized website usage data (e.g., via Google Analytics) to enhance user experience.
• Legal Compliance: To comply with U.S. laws, respond to legal requests, or protect our rights and property.

We do not use your information for purposes beyond those listed without your prior consent.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share it with:

• Service Providers: Third-party vendors for payment processing, shipping, or website hosting (e.g., courier services, cloud providers). These providers are contractually obligated to protect your data and use it only for the services provided.
• Legal Authorities: If required by law, court order, or government request, we may disclose your information to comply with legal obligations.
• Marketing Partners: If you consent to marketing, we may share limited data (e.g., email) with partners for promotional campaigns, with an option to opt out.

5. Data Security

We use industry-standard security measures to protect your personal information, including:

• HTTPS encryption for secure data transmission.
• Secure servers with restricted access to authorized personnel only.
• Regular security audits to identify and mitigate vulnerabilities.
• PCI DSS-compliant payment processing through trusted third-party providers.

While we take reasonable steps to secure your data, no system is completely immune to risks. In the event of a data breach, we will notify affected customers and authorities as required by CCPA and other U.S. laws.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Subscription and shipping data is retained for 1 year after account cancellation to manage deliveries and disputes.
• Marketing consent data is retained until you opt out.
• Anonymized analytics data may be retained indefinitely.

After the retention period, we securely delete or anonymize your information in compliance with U.S. regulations.

7. Your Rights

Under the California Consumer Privacy Act (CCPA) and other U.S. privacy laws, you have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Deletion: Request the deletion of your information, subject to legal exceptions.
• Opt-Out: Opt out of the sale of personal information (we do not sell data, but you can opt out of marketing).
• Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at support@sorpresabox.xyz or via our Contact Us form. We will respond within 45 days, as required by CCPA. You may also designate an authorized agent to submit requests on your behalf.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience and analyze website performance:

• Essential Cookies: Required for website functionality (e.g., session management).
• Analytics Cookies: Collect anonymized data for website optimization (e.g., Google Analytics).
• Advertising Cookies: Deliver targeted ads, only with your consent.

You can manage cookie preferences via our Cookie Consent tool or browser settings. See our Cookie Policy [link to Cookie Policy, if created] for details.

9. Third-Party Links

Our website may link to third-party sites (e.g., payment processors). We are not responsible for their privacy practices. Please review their policies before sharing information.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the U.S. (e.g., for cloud storage). We ensure such transfers comply with CCPA and use safeguards like standard contractual clauses to protect your data.

11. Children��s Privacy

Our services are not intended for individuals under 18. We do not knowingly collect personal information from minors. If we discover such data, we will delete it immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Updates will be posted at sorpresabox.xyz/privacy.html and take effect immediately. Significant changes will be communicated via email or website notice. Continued use of our services after updates implies acceptance of the revised policy.

13. Contact Us

For questions or to exercise your privacy rights, contact us at:

• Email: support@sorpresabox.xyz
• Contact Form: Contact Us
• Address: BOOST MARKETING LLC USA, 30 N Gould St, #30416, WY 82801

We will respond within 5 business days.