Privacy Policy

Welcome to BoxLunch Shop – your ultimate pop culture playground! We’re not just a store; we’re a community built for collectors, fans, and fun-seekers worldwide. This Privacy Policy explains how we collect, use, share, and protect your personal information when you visit our website mysterytoysshop.com, shop for exclusive Pops!, figurines, cosplay gear, and other fandom treasures, or interact with us online.

We’re committed to protecting your data with the same care you’d give a mint-condition chase variant. Your trust is our grail!

1. Who We Are & Who We Serve

BoxLunch Shop caters to global pop culture enthusiasts – from casual collectors to hardcore fans. Our target audience includes:

• Funko Pop! vinyl collectors and toy enthusiasts.
• Cosplay and anime fans seeking unique gear.
• Shoppers interested in exclusive, social-media-worthy items (“As Seen On Social”).
• International fans looking for accessible payment options like PayPal.
• Gift shoppers and mystery box lovers (“Blind Box and Bag”).

Our website style is vibrant, fan-centric, and secure, focusing on a seamless, joyful shopping experience. We value transparency, security, and community – and this policy reflects that.

2. Information We Collect

To fuel your fandom and provide a smooth checkout, we collect the following data:

• Personal Details: Name, email address, shipping/billing address, phone number.
• Payment Information: Processed securely via our payment partners (VISA, MasterCard, JCB, PayPal). We do not store full credit card numbers on our servers.
• Order Details: Products purchased, presale selections, shipping preferences.
• Account Data: If you create an account, username, password, and order history.
• Communication Data: Emails, chat logs with customer support, feedback.
• Technical & Usage Data: IP address, browser type, device info, pages visited, referral sources, and interactions with our site.

3. How We Use Your Information

Your data helps us create a personalized, secure, and fun shopping experience:

• Process orders, payments, and shipments worldwide (excluding Asia and certain remote areas).
• Communicate about orders, presales, exclusives, and promotions.
• Improve our website, product offerings, and fan experience.
• Prevent fraud and ensure transaction security.
• Comply with legal obligations and protect our community.
• Send marketing emails (only with your consent – you can opt out anytime).

4. Sharing & Disclosure of Data

We treat your data like an exclusive Pop! – we don’t share it recklessly. We only disclose information:

• With Service Providers: Trusted partners who help with payment processing, shipping, IT support, and marketing (under strict confidentiality).
• For Legal Compliance: If required by law, regulation, or legal process.
• To Protect Our Community: To prevent fraud, security risks, or violations of our policies.
• With Your Consent: When you explicitly agree to share information.

We do not sell your personal data to third parties for their marketing purposes.

5. Data Storage & Security

We’re based in Spokane, US, but serve fans globally. Your data may be stored and processed in the United States or other locations where our service providers operate.

6. Your Rights & Choices

You have control over your data, including the right to:

• Access, update, or correct your personal information.
• Request deletion of your data (subject to legal requirements).
• Opt out of marketing communications.
• Disable cookies via your browser settings.
• Object to or restrict certain data processing.

To exercise these rights, contact us at [email protected].

7. Cookies & Tracking Technologies

We use cookies and similar tech to enhance your browsing, remember your preferences, and understand how fans interact with our site. This helps us improve your experience, from “Back by Popular Demand” sections to personalized recommendations.

You can manage cookie settings in your browser, but note that some site features (like shopping cart) may not function fully if cookies are disabled.

8. International Data Transfers

We ship globally (with noted exceptions) and may transfer data internationally in compliance with applicable laws (like GDPR for European fans). By using our site, you consent to such transfers.

9. Children’s Privacy

Our site is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this policy as our fandom grows. The latest version will always be posted here with the “Last Updated” date. Continued use of our site means you accept the updated policy.