Privacy Policy

Effective: September 28, 2025

This Privacy Policy explains how Lillie’s Toy Box (“LTB,” “we,” “us,” or “our”) collects, uses, and protects your information when you use lilliestoybox.com (the “Site”) and our services. This Site is intended for adults 18+.

1) Information We Collect

Identifiers & Contact: name, email, phone, billing/shipping addresses.
Order Details: products purchased, price, timestamps, fulfillment status.
Support Content: messages you send us (email/forms) and related attachments.
Device/Usage Data: IP address, browser/OS, pages viewed, referring/exit pages, approximate location derived from IP (city/region level).
Cookies/Similar Tech: session IDs, cart state, and basic analytics signals.

2) How We Use Information

Process and fulfill orders; provide customer support and account notices.
Prevent fraud, secure the Site, and enforce our Terms & Conditions.
Operate, analyze, and improve the Site and our product catalog.
Comply with legal, tax, and accounting obligations.

3) Payments (No Card Storage on Our Servers)

Checkout is handled by our payment gateway using secure tokenization. Cardholder data is entered via the gateway and is not stored on our servers. We receive non-sensitive payment confirmations (e.g., transaction ID, last four digits, status) to complete and support your order.

4) Cookies & Analytics

We use cookies to keep your session/cart intact and to understand how the Site is used. You can control cookies through your browser settings; disabling some cookies may affect site functionality.

We do not sell your personal information. We share limited data with service providers who help us operate the Site:

Payments: payment gateway and fraud screening.
Fulfillment/Shipping: carriers and our distributor (for packing/shipping).
Infrastructure: hosting, backup, email delivery, and error logging providers.
Legal/Compliance: if required by law or to protect our rights, users, or the public.

6) Security & Retention

Security: HTTPS/TLS; least-privilege admin access; hashed/salted passwords; routine backups.
Retention: We keep data only as long as necessary for the purposes described above and to meet legal/recordkeeping requirements; then we delete or de-identify it.

7) Your Choices & Rights

Access/Update: Contact us to access or correct your info.
Delete: You may request deletion where applicable; we’ll comply unless we must keep data for legal or transactional reasons (e.g., open orders, tax/audit).
Opt-Out: You can opt out of non-essential emails by using built-in unsubscribe links or contacting us.
Do Not Track: We currently do not respond to DNT signals due to lack of industry consensus.

8) State & Regional Notices

California (CCPA/CPRA): California residents may request access to, deletion of, and information about our collection/disclosure of personal information. We do not “sell” personal information as defined by CCPA/CPRA. To exercise rights, contact us using the methods below and indicate you are a California resident.

EEA/UK (GDPR): If you are in the EEA/UK, our legal bases may include contract (order processing), legitimate interests (site security, fraud prevention, service improvement), compliance with legal obligations, and consent where required. You may have rights to access, correction, deletion, restriction, portability, and objection. You also have the right to lodge a complaint with your local supervisory authority.

9) Minors

This Site is intended for adults 18+. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, please contact us and we will delete it.

10) Changes to This Policy

We may update this Privacy Policy periodically. The “Effective” date above reflects the latest version. Your continued use of the Site after changes are posted constitutes acceptance of the updated policy.

11) Contact

Lillie’s Toy Box
Phone: 531-213-1945
Email: adam@lilliestoybox.com