September 1, 2023
We are part of the 40 Boxes, Inc. brands which include, but are not limited to, 40boxes.com, shoptamfam.40boxes.com, abcsecretsales.com, wwblackfriday.com and other 40boxes.com subdomains. 40 Boxes, Inc. is committed to respecting your privacy (collectively, 40 Boxes Inc. or “We”, “Us”, “Our”). This Privacy Policy explains how We collect, use, and share your personal information (“Personal Information” is information that identifies you or that can reasonably be linked to information that identifies you). This Privacy Policy applies when you visit any of Our sites and any official social media sites, or other domains where this Privacy Policy is posted (collectively "Sites"). We recognize that you care about how your information is used, and your privacy is important to Us. This Privacy Policy explains the choices you can make about what information We share. Please read this Privacy Policy carefully. By using any of Our Sites or mobile applications, or by sharing your Personal Information with Us, you are accepting and consenting to the practices described in this Privacy Policy.
Please note that this Privacy Policy does not govern the practices of third parties, including Our partners, third party service providers, marketing providers, and/or advertisers, even when those services are branded as or provided on behalf of 40 Boxes, Inc.
We ask that you read this Privacy Policy prior to the first time you use the Sites and continue to access and read it from time to time during the period when you continue to use the Sites. We may modify this Privacy Policy at any time in Our sole discretion in accordance with applicable law and without advance notice to you. If We make material changes to this Privacy Policy, We will notify you either through an email to your registered email address or by prominent posting on the Sites and, if required by law, We will obtain consent from you either through email or the Sites.
We collect information to deliver the products and services you request and to help improve your shopping experience and to help improve Our ability and Our business partners’ ability to provide services to you.
We may collect the following categories of Personal Information. Not all categories may be collected about every individual or in every instance in which an individual uses the Sites:
We collect the following categories of sensitive Personal Information:
We collect Personal Information from you in a variety of ways. It may be:
Our goal is to limit the Personal Information We collect to the information that We determine is needed to support Our business.
We collect Personal Information about you when you interact with Our Sites, including:
The information We may collect includes the categories listed above as well as any other information that you choose to share with Us.
We may automatically collect personal information from devices that you use to interact with Our Sites, as well as from your interaction with emails that We send to you. The personal information We automatically collect may include:
The information We automatically collect will be associated with any personal information that you have provided to Us.
We may use this information to provide you location-based advertisements and social media posts. We may also use this personal information for analytics purposes or for other purposes described in this Privacy Policy.
We receive personal information about you from other sources to help Us correct or supplement Our records, improve the quality or personalization of Our service to you, prevent or detect fraud, and for other business purposes or other purposes described in this Privacy Policy.
We may use the Personal Information We collect for a number of purposes, including without limitation:
All of the categories of Personal Information that We collect will be or have been shared with other companies, including those within Our corporate family and/or promotional partners, are for a business purpose. We also may share your Personal Information with service providers who perform services and functions on Our behalf to support Our interactions with you including, for example, providing Our products and services, processing your purchases, administering surveys or contests, or communicating with you.
We may share your personal information with other third parties, including law enforcement authorities, where We determine that doing so is appropriate to:
Unless you have elected to opt out by unchecking the applicable box, We may provide your personal information to brands and merchants whose products you purchase on the Sites for these third parties direct marketing of their products and other business purposes. In such event, the use of such information (and any other information which you may separately provide) will be subject to the privacy policies of such merchants and brands in effect from time to time.
You may opt out from Our continuing to share your information for these purposes by contacting Us at privacy@40boxes.com.
In the event that you have elected to opt in by checking the applicable box for marketing purposes We may share your personal information with The Walt Disney Company (“Disney”) family of companies, which include American Broadcasting Companies, Inc. (“ABC”), for their business purposes as well as any of the business purposes set forth in this Privacy Policy. In such event, the use of such information (and any other information which you may separately provide) will be subject to their privacy policies in effect from time to time including as may be found at the following URL or at other location(s) or by such other means by which such companies make such information available: this url
Aggregated, Non-Identifying Information: We may share aggregated or other information that is not individually identifiable (and is not personal information) with third parties including in connection with industry analysis, demographic analysis, targeted ad delivery or other purposes. This may include Disney, ABC or other promotional partners whether or not you have elected to opt in to provide personal information to such entities for marketing purposes.
We may share categories of Personal Information with certain categories of third parties, including as described below.
|
Types of Third Parties to Which the Personal Information Was Disclosed for a Business Purpose |
Categories of Personal Information Disclosed for a Business Purpose |
|---|---|
|
Those We are legally required to share with |
|
|
Service providers that receive data in order to provide services to Us (e.g. technology providers, cloud storage providers, etc.) |
|
|
Our suppliers, marketplace vendors or brands whose products you purchase on the Sites |
|
When you visit Our Sites, We may place pieces of code, commonly referred to as "cookies," "pixel tags," "web beacons," and other technologies on Our Sites to collect usage, demographic, and geographic location data, which allow Us to count users who have visited certain pages of the Sites, to deliver branded services, and to help determine the effectiveness of promotional or advertising campaigns. We may begin collecting information about you or your activity on devices associated with you through cookies or similar technologies described herein as soon as you visit Our Sites. By using Our Sites, you permit Us to collect and use your Personal Information from activity on devices associated with you in accordance with this Privacy Policy. We may take such actions based on your acceptance of this Privacy Policy through your use of the Sites.
We may use cookies for a number of purposes: First, We may use persistent cookies to save your login information for future logins to Our Sites and to collect and analyze information about your online activity to help Us improve Our services and to use in accordance with the terms of this Privacy Policy. Second, We may use session ID cookies to enable certain features of the Sites to better understand how you interact with the Sites, and to monitor aggregate use of Our Sites by Our users. Unlike persistent cookies, session cookies are deleted from your computer when you log off of the Sites and close your browser. But in both cases, We may collect and store the information provided to Us by the cookies.
When it comes to how you want to use or allow cookies to be used on your devices, you are in control. Most internet browsers are initially set to accept cookies. You can set your browser to block or otherwise control what cookies your browser or mobile device accepts via your browser or mobile device settings. Additionally, you can choose to modify your settings and delete cookies that are otherwise stored on your device. Please consult the instructions provided by your browser or your mobile device’s manufacturer to determine how you can limit the placement of and/or remove cookies or other technologies. Please note, however, that limiting or disabling essential cookies and other technologies may impact or adversely affect some portion or functions of Our Sites.
Third parties, including advertisers, may collect information, potentially including Personal information, about your activities over time and across different websites when you use the Sites. Those third parties may use cookies, pixel tags, web beacons, mobile application advertising identifiers and other technologies. Those third parties may also provide Us with information and reports about data collection, ad response measurement, analytical information, and assist with delivery of relevant marketing messages and advertisements. We are not responsible for the content or privacy practices on any websites, applications, tracking tools, or other technology that are not operated by Us, even though Our Sites might link to them or they might link to Our Sites.
Collection of your Personal Information by third parties is not governed by this Privacy Policy. Please consult the privacy policies of those third parties to determine how they collect and use your Personal Information. Many third-party advertisers and some web browsers and mobile devices allow you to opt out of third-party advertising. You can visit the following sites for comprehensive information on how to manage cookies and how to opt out of cookies used for advertising and marketing purposes:
-The Digital Advertising Alliance’s Consumer Choice tool at https://www.aboutads.info/choices
-The Digital Advertising Alliance’s App Choices program at https://www.aboutads.info/appchoices
-The Network Advertising Initiative’s opt-out program at https://www.optout.networkadvertising.org/
We may share aggregated or pseudonymous information (pseudonymous information includes things like: device identifier, type of device, IP addresses, cookies and other information associated with your browsing and app usage) with other companies, such as promotional partners, publishers, advertisers, measurement analytics providers, and others. We do not share information that directly identifies you with these companies (except as otherwise provided in this Privacy Policy with respect to merchants and brands whose products you purchase).
We also allow companies that show advertisements on Our webpages or Our apps to collect information from your browsers or devices via the use of cookies or other technologies. Other companies' use of cookies and other data collection technologies are subject to their own privacy policies, not this one. Like many companies, We may allow cookie matching with select partners. However, these parties are not authorized to directly access information from Our cookies.
We have implemented an information security program that includes administrative, technical and physical controls designed reasonably to safeguard your Personal Information.
We reserve the right to disclose, sell, or transfer all information related to the Sites, including personal information:
The Sites to which this Privacy Policy applies are subject to U.S. law, unless otherwise stated in this Privacy Policy. By using the Sites or providing Us with your Personal Information, you are directly transferring your Personal Information to Us in the United States. In addition, we may transfer the information that we collect through the Sites to other countries where we do business. These countries may not have the same data protection laws as the country in which you reside. When We transfer personal information We collect about you to other countries, We will protect that information as described in this Privacy Policy, even though a given country may not have the same privacy and data protection laws as the country in which you reside. You agree to and acknowledge Our collection, transfer, and processing of your Personal Information in accordance with this Privacy Policy.
Our Sites are general audience sites not directed at or intended for children under the age of 18. We do not intentionally or knowingly collect, use, or process the Personal Information from children under the age of 18, and such children are not permitted to use our Site or services. If We obtain actual knowledge that any Personal Information We collect has been provided by a child under the age of 18, We will promptly delete that Personal Information. If you are under 18, do not attempt to register for or use any of Our services, including Our Sites, and do not provide Us with any Personal Information about yourself. By using Our services, you acknowledge you are an adult over 18 years of age and are permitted to use Our services in accordance with Our Privacy Policy and Terms of Service. If you are a parent or guardian and you are aware that your child has violated this Privacy Policy and provided Us with Personal Information, please contact Us and We will take measures to remove that Personal Information from Our services.
You may have certain data privacy rights under state privacy laws. If you wish to exercise any of these rights please see the CONSUMER RIGHTS REQUEST SUBMISSION METHODS section below. Your rights may include the right to:
In addition to the above data privacy rights, please note that the exercise of your data privacy rights may be limited to a specific number of requests per year as defined by the applicable state law. That said, We will NEVER discriminate against any consumer for exercising their rights under any applicable privacy law. This generally means We will not deny you goods or services, charge different prices or rates, provide a different level of service or quality of goods, or suggest that you might receive a different price or level of quality for goods. Please know, if you ask Us to delete or stop selling your Personal Information, it may impact your experience with Us, and you may not be able to participate in certain programs or membership services which require usage of your Personal Information to function.
You may also have the right to appeal the denial of any of these consumer rights requests by submitting a form that will be provided to you if we deny a data request. Depending on your data choices, certain services may be limited or unavailable. To ensure the security of your identity, We will generally ask you to verify your request using the contact information you have already provided. If you do not have an account, or if you are an authorized agent under applicable state law, please contact Us at privacy@40boxes.com or844-785-8609.
To exercise your applicable consumer rights, including but not limited to data collection opt-outs, please email privacy@40boxes.com. You may also do so here or by using Our toll-free number for such purpose which is 844-785-8609. You will be asked to provide certain information in order for Us to consider or fulfill your request.
We take the privacy of your personal information seriously and want to ensure that We provide only you or your authorized agent with your Personal Information. To do so, We verify the identity of each person who makes a request such that your request is addressed in an accurate manner and for the correct individual.
To verify your identity, We ask you to provide your:
First name*
Last name*
Middle initial
Email address*
Phone number
Address*
*required field
We may verify your identity in a few different ways. We may work with a third-party identification service to help Us verify your identity and prevent fraudulent requests. When you make your request, you will be asked to answer a few questions about yourself to help Us validate your identity. If you have an online account, We may ask you to log into your account and complete a one-time passcode validation.
In some instances, We may ask you to provide other documentation to verify your identity. If this happens, We will reach out to you directly with this request.
If We can’t verify your identity, We will not be able to process your request. If We are unable to verify your identity with a high degree of certainty, We will only be able to provide a report with category-level information and We may not be able to delete some of your information.
An authorized agent is a person or business who has authorization to request to know what Personal Information We have about you, to delete the personal information We have about you, or to opt out of the sale of personal information on behalf of an individual. Authorized agents use the same links described above to submit requests.
If you are submitting a request on behalf of another person, We require a valid power of attorney and a signed attestation form. If you do not have a valid power of attorney, We require an authorization document and a copy of the consumer’s government-issued photo identification in addition to Our attestation form. Our attestation form can be downloaded from the request form.
If you submit a request on Our website, you will be asked to upload this documentation when you submit your request. If you submit your request over the phone, you will be asked to email your forms to privacy@40boxes.com. Please note, you will have 10 business days to provide all required documentation.
If you are a California resident, California law permits you to request information regarding the disclosure of your personal information by Us to third parties for the third parties’ direct marketing purposes within the immediately preceding calendar year. We will provide you with a list of the categories of personal information disclosed and a list of the names and addresses of the third parties. To make such a request, please write Us at: privacy@40boxes.com.
Certain laws require Us to disclose aspects of data use that may relate to your Personal Information. Those disclosures are listed below.
Below is a chart showing the types of personal identifiers that We may have sold in the previous 12 months.
|
Categories of Third Parties to whom the Personal Information may be Sold |
Categories of Personal Information Sold |
|---|---|
|
Advertising companies (like ad servers, advertising agencies, technology vendors, providers of sponsored content, and others) |
|
|
Other entities |
|
Some browsers include the ability to transmit “Do Not Track” or “DNT” signals. Since uniform standards for “DNT” signals have not been adopted, Our Sites do not currently process or respond to “DNT” signals.
We keep your personal information to enable your continued use of Our products and services, for as long as it is required in order to fulfill the relevant purposes described in the Privacy Policy, as permitted or as may be required by law, or as otherwise communicated to you. For example, We retain your transaction history so that you can review past purchases (and repeat orders if desired) and what addresses you have shipped orders to, and to improve the relevance of products and content We recommend.
In accordance with the California Privacy Rights Act, Colorado Privacy Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, and Virginia Consumer Data Protection Act, We are informing you that We may use de-identified data in some instances. We either maintain such data without attempting to re-identify it or treat such data as Personal Information subject to applicable law(s).
In the European Union (“EU”), the processing of personal identifiable data is governed by the General Data Protection Regulation 2016/679 (“GDPR”). Under the GDPR, personal identifiable data (“PII”) is defined as: “Any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.” We comply with obligations under GDPR by keeping PII up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data or data; by protecting PII from loss, misuse, unauthorized access and disclosure and by ensuring that appropriate technical measures are in place to protect PII. The legal bases for Our processing activities include processing such information as necessary to comply with Our contractual obligations, compliance with Our legal obligations, protecting the safety of Our employees, users and others, for Our legitimate business interests, and pursuant to your consent. In addition, without limitation of the foregoing, We do not acknowledge the general applicability of the GDPR to its operations because it is not Our intention to offer goods and services in the EU, to market or sell to persons within the EU, to ship to addresses within the EU or to collect information concerning users known by Us to be within the EU.
If you elect to participate in Our SMS mobile messaging program, you will be separately asked to agree to the SMS/MMS Mobile Message Marketing Program Terms and Conditions which can be found here.
Please contact Us if you have any questions or comments about Our privacy practices or this Privacy Policy. You can reach Us at privacy@40boxes.com or 844-785-8609.