Privacy Policy

This Privacy Policy explains how Knives Mystery Box LLC ("Mystery Knives Box," "we," "us," or "our"), collects, uses, and shares personal information when you visit or buy from mysteryknivesbox.com (the "Site"), sign up for our emails, or contact us. This policy applies to visitors and customers in the United States. We only ship to addresses in the United States.

We do not offer SMS or text-message marketing.

1. PERSONAL INFORMATION WE COLLECT

- Contact and identity information: name, email address, phone number, and billing and shipping addresses.
- Order information: products you buy, order totals, order history, shipping and delivery details, and any certification you give at checkout about restricted items.
- Payment information: payment is handled at checkout by Shopify and its payment processors (including Shop Pay, Apple Pay, and Google Pay where available). We do not see or store your full card number.
- Account information: if you create an account, your login details and saved addresses.
- Age or identity verification: if we ask you to verify your age or identity for an order, the information you provide for that purpose.
- Marketing preferences: whether you have signed up for our emails, and how you interact with them (for example, opens and clicks).
- Customer support information: what you send us when you email us or use our contact form, including photos you send for a damage or Lifetime Guarantee claim.
- Reviews: if you leave a product review, your name, review text, and any photos you include.
- Device and usage information: IP address, browser and device type, pages you view, products you view or add to your cart, how you navigate the Site, referring websites, and similar information collected through cookies, pixels, and similar technologies.

Categories under U.S. state privacy laws. Using the categories in the California Consumer Privacy Act and similar laws, in the past 12 months we have collected: identifiers (such as name, email, postal address, phone number, IP address, and online identifiers); customer records (such as billing and shipping information); commercial information (such as products bought and order history); internet or other electronic network activity (such as browsing and interaction with the Site and our emails); approximate geolocation (inferred from your IP address or shipping address); audio, electronic, or visual information (such as photos you send for a claim or include in a review); and we may draw inferences from the above (such as product preferences). We do not knowingly collect biometric information or precise geolocation.

Sensitive personal information. We do not intentionally collect sensitive personal information, except: your account login credentials, if you create an account; and a government-issued ID or similar document, only if we ask you to verify your age or identity. We use sensitive personal information only to provide our services, verify age and identity, prevent fraud, and comply with the law, and we do not use or disclose it to infer characteristics about you, or sell or share it.

Notice at collection. This policy is our notice at collection. We collect the categories above for the purposes in Section 3, disclose them to the recipients in Section 4, and keep them as described in Section 10.

2. HOW WE COLLECT IT

- From you: when you place an order, create an account, sign up through a pop-up or form, leave a review, or contact us.
- Automatically: through cookies, pixels, and similar technologies on the Site (see Section 6).
- From our service providers: such as Shopify and shipping carriers (for example, delivery status).

3. HOW WE USE PERSONAL INFORMATION

- To accept, process, ship, and deliver your orders, confirm you received your package, and handle cancellations, refunds, and guarantee claims.
- To check that orders meet our age and restricted-item rules, and to prevent fraud.
- To communicate with you about your orders and answer your questions.
- To send marketing emails if you subscribe, including reminders about items left in your cart. You can unsubscribe at any time.
- To make the Site easier to use and personalize it for you (for example, showing the mobile version), and to measure and improve the Site, our products, and our advertising.
- To show you ads for our products on other websites and apps (see Section 5).
- To keep the Site secure, enforce our Terms of Service, and comply with the law.

4. WHO WE SHARE PERSONAL INFORMATION WITH

We work with outside companies that help us run our store. We limit the data they can access to what they need to do their job.

- Shopify: our e-commerce platform. Shopify hosts the Site, runs checkout, calculates sales tax, and processes order data on our behalf. Learn more at https://www.shopify.com/legal/privacy
- Payment processors: Shopify's payment services and the wallets available at checkout (such as Shop Pay, Apple Pay, and Google Pay) receive the payment details needed to verify and complete your purchase.
- Klaviyo: our email marketing provider. Klaviyo collects information through sign-up forms and on-site tracking (for example, products you view and add to your cart) so we can send emails, including cart reminders, to people who have subscribed. Learn more at https://www.klaviyo.com/legal/privacy
- Google: we use Google tools, including Google Analytics and Google Merchant Center, to understand how people use the Site and to list our products. Google receives device and usage information and, where enabled, order and customer data. Learn how Google uses data at https://policies.google.com/technologies/partner-sites
- Reviews and post-purchase tools: we use Loox to collect and display product reviews and Aftersell for post-purchase offers.
- Suppliers, fulfillment partners, and carriers: the suppliers and warehouses that pack your order receive your order contents, and carriers such as UPS receive your name, shipping address, and, where needed, phone number or email to deliver your package.
- Legal and safety: we may disclose information if required by law or legal process, in response to lawful requests from law enforcement or government authorities, if we believe a product is being bought or used unlawfully or for a minor, to protect our rights or the safety of others, or to prevent fraud.
- Business transfers: if our business is sold or merged, personal information may be transferred as part of that transaction.

5. WE DO NOT SELL YOUR PERSONAL INFORMATION FOR MONEY

We do not sell your personal information for money. However, we use advertising and analytics cookies and pixels (such as TikTok's and Google's) that let these partners collect information about your activity on the Site, including to show you more relevant ads on other websites. Some U.S. state privacy laws may treat this as a "sale," "sharing," or "targeted advertising." Depending on where you live, you may have the right to opt out. You can opt out at any time by:

- emailing team@mysteryknivesbox.com with the subject line "Do Not Sell or Share" (we will apply your request to the email address and other details you give us);
- turning on Global Privacy Control in your browser, which we honor where technically supported (see Section 7); or
- using a cookie preferences tool, where one is shown on the Site.

To stop marketing emails, click "unsubscribe" in any marketing email.

6. COOKIES AND PIXELS

Cookies are small files stored by your browser. Pixels and similar technologies are small pieces of code that report activity on a page. We and our partners use them to:

- make the Site work, for example to keep items in your cart and run checkout (strictly necessary);
- understand how the Site is used (analytics), including Shopify's built-in analytics and Google Analytics; and
- send marketing and measure and personalize ads (marketing), including Klaviyo, Google, and TikTok.

You can block or delete cookies in your browser settings. If you block cookies, some parts of the Site (like the cart) may not work. Third parties may collect information about your online activity over time and across different websites when you use the Site.

7. DO NOT TRACK AND GLOBAL PRIVACY CONTROL

Do Not Track: some browsers send a "Do Not Track" signal. There is no accepted industry standard for responding to it, so the Site does not currently respond to Do Not Track signals.

Global Privacy Control (GPC): if you visit the Site with the GPC opt-out preference signal turned on, depending on where you are and where technically supported, we will treat it as a request to opt out of activity that may be considered a "sale" or "sharing" of personal information, or targeted advertising, for the browser and device you used.

8. YOUR CHOICES AND RIGHTS

You can email us at team@mysteryknivesbox.com to:

- get a copy of the personal information we have about you;
- correct it;
- delete it from our systems (we may need to keep some records, such as order records, for legal, tax, accounting, or fraud-prevention reasons);
- withdraw any consent you gave us; or
- opt out of targeted advertising, "sales," or "sharing" (use the subject line "Do Not Sell or Share"; see Section 5).

If you have an account, you can also review and update your contact details and addresses by signing in. To stop marketing emails, click "unsubscribe" in any marketing email.

U.S. state privacy rights. Depending on where you live (for example, California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with consumer privacy laws), you may have the right to access, correct, delete, or receive a portable copy of your personal information; to opt out of targeted advertising, sales, or profiling; and to appeal our decision on your request. We offer these choices to all U.S. customers.

How to make a request. Email team@mysteryknivesbox.com and tell us what you are asking for. We will verify your request (for example, by matching your email and order details) and respond within the time required by applicable law, usually within 45 days. You may use an authorized agent if you give them written permission. To appeal a decision, reply to our response with the subject line "Appeal." We will tell you the result of your appeal and the reasons within the time required by law. If you are not satisfied with the result, you may contact your state Attorney General. We will not discriminate against you for exercising your privacy rights.

Email sign-up offers. If we offer a discount or other benefit for joining our email list, that may be considered a "financial incentive" under some state laws. The terms will be shown at sign-up, joining is optional, and you can withdraw at any time by unsubscribing. We value the benefit as roughly equal to the value of the marketing relationship to us, which is the amount of the discount offered.

Nevada residents. We do not sell "covered information" as defined in Nevada law. You may still submit a request directing us not to sell your covered information by emailing team@mysteryknivesbox.com.

California "Shine the Light." California residents may ask what personal information we have shared with third parties for their own direct marketing. We do not share personal information with third parties for their own direct marketing. To ask, email us.

9. CHILDREN AND AGE REQUIREMENT

The Site and our products are for adults 18 and older only, as stated in our Terms of Service (https://mysteryknivesbox.com/policies/terms-of-service). The Site is not directed to children under 18, and we do not knowingly collect personal information from children under 18 or sell to anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

10. DATA RETENTION

We keep personal information only as long as we reasonably need it for the purposes in this policy. The criteria we use are:
- Order, payment, tax, and certification records: as long as needed for accounting, tax, legal, warranty (including the Lifetime Guarantee), chargeback, and fraud-prevention purposes, and to show compliance with our restricted-item rules.
- Account information: while your account is open, and for a reasonable time after it is closed.
- Email marketing data: while you are subscribed, and afterward only as needed to honor your unsubscribe request.
- Customer support messages and claim photos: as long as needed to resolve your request and any related claim.
- Age or identity documents: only as long as needed to complete the verification and keep a record that it was done.
- Device and usage data: as set by our analytics and advertising providers' retention settings.
When we no longer need personal information, we delete or de-identify it.

11. DATA SECURITY

We use reasonable administrative, technical, and physical safeguards, and we rely on Shopify's secure, PCI-compliant checkout to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. WHERE YOUR DATA IS PROCESSED

The Site is meant for people in the United States. Your information is stored and processed in the United States and in other places where our service providers operate.

13. LINKS TO OTHER WEBSITES

The Site may link to other websites and social media pages (such as Facebook, YouTube, and TikTok). Their own privacy policies apply, and we are not responsible for their practices.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on this page and change the "Last updated" date at the top. If we make material changes, we will also give more prominent notice, such as a notice on the Site or an email to customers who have given us their email address.

15. CONTACT US

For questions about this Privacy Policy or to make a privacy request, contact us at: team@mysteryknivesbox.com