Baboo Box

Privacy policy

Who handles your information

Baboo Box operates this website. Use the contact block below for privacy questions or requests. This notice explains the information involved in browsing and contacting us.

Browsing and device information

Cloudflare hosts and delivers the website and helps protect it. Page requests can include your IP address, browser details, request time, requested URL and security or error information. These records support delivery, troubleshooting and protection against misuse.

Your bag and messages

The website keeps bag and preference information in browser storage. Product search filters the displayed collection. You can clear saved browser data through your browser settings.

If you email us, we receive your address, message and attachments. We use them to answer questions, manage requested changes and keep the related correspondence. Avoid sending passwords, full payment-card details or unnecessary sensitive information.

Purchase information

When you use an available purchase service, order details can include contact information, delivery address, items and payment status. The payment service handles payment credentials. Payment options and the payable total are presented before you authorize payment.

We use order information to handle purchases, delivery, refunds and support, and to meet applicable recordkeeping duties. A browsing visit alone does not create an order.

Sharing and service providers

Cloudflare processes technical information for hosting, delivery and security. Information sent through email also passes through the email services involved in delivery. When you place an order, Whop processes payment information. Shopify is used as our order-management system: the purchased items, payment reference, contact details and delivery address are shared with Shopify and the fulfillment providers handling that order. Our storefront does not store your full payment-card number.

We may disclose information where law requires it or to investigate misuse and protect legal rights. If the business transfers ownership, relevant records may transfer subject to applicable privacy duties.

Cookies and advertising

Google Analytics is optional and starts only after the visitor accepts optional measurement. Google receives the store ID and domain plus device, network and shopping-interaction information; customer names, email addresses, delivery addresses and payment details are excluded. Google advertising measurement remains separate. Browser storage used for the bag and preferences is separate from optional measurement. The Cookies page explains browser controls.

Do Not Track and Global Privacy Control are browser signals. We do not claim a dedicated signal handler on this site. Contact us about a privacy choice or request; disabled advertising does not depend on enabling a signal.

Retention

We keep information for the purpose it was collected, including support, security and any applicable recordkeeping duties. Retention depends on the record and purpose. Ask us about a particular record using the contact details below.

You can remove local bag and preference data in your browser. Deleting browser data does not delete correspondence or records held by a service provider.

Your choices and requests

Depending on your location and applicable law, you may have rights to access, correct or delete personal information, obtain a copy or object to certain uses. Email us to exercise a right or ask which rights apply. We may need proportionate information to verify your request.

Where applicable, you can use an authorized agent or appeal a denied request. We explain the reason for a restriction and any available next step. We do not discriminate for exercising applicable privacy rights.

Children and security

Baboo Box sells toys for adults to choose for children. The shopping and customer-care services are intended for adults. Do not submit a child’s personal information in a product question or message. If a child has provided personal information, contact us so we can investigate and delete it where appropriate.

We use the protections available through our hosting and service arrangements. No transmission or storage system is risk free. Do not send sensitive credentials through ordinary email.

Changes to this notice

The effective date identifies this version. Material changes will be communicated through the website or another appropriate channel. Any consent required by law will be requested before the relevant new use.

Google Ads measurement and your choice

The Google Ads tag loads on public shopping pages with advertising storage, advertising user data and personalization denied by default. Before advertising consent, Google may receive measurements without advertising cookies, including technical network information and a sanitized public page URL. Advertising cookies and consented purchase measurement are enabled only after you allow Advertising in Manage cookies. Customer names, email addresses, delivery addresses, payment details and private order-access URLs are not sent by this tag. Do Not Track and Global Privacy Control prevent advertising consent from being granted. You can withdraw your choice in Manage cookies.

Contact information

support@baboobox.com

Baboo Box

270 Fulton St, Brooklyn, NY 11201, United States

Optional product interest measurement

With your permission, we count product views and successful additions to the bag by product and UTC date. These are action counts, not unique shoppers or conversion rates. Each event contains only a product ID, event type and a random event ID used to prevent duplicates; it contains no customer name, email, address or payment details. Cloudflare stores the aggregate totals and temporary event IDs. Temporary IDs expire from duplicate checking after 24 hours and are removed in bounded cleanup batches when new events arrive; aggregate totals remain until deleted. No analytics cookie or persistent visitor ID is used for this counter. Optional measurement stays off until you accept, and Global Privacy Control or Do Not Track keeps it off. You can withdraw permission on the Cookie & privacy choices page. Your choice is stored in this browser with its version and timestamp and expires after 180 days. Necessary bag and checkout storage works independently. Any separately configured Google Analytics or advertising measurement uses its own disclosed settings.

Server purchase measurement

With Analytics permission, we save Google client and session identifiers in a first-party cookie for up to 24 hours and attach them to your checkout. Our server uses this link to report confirmed purchases, order references, items and amounts to Google Analytics, even if you close the confirmation page. We schedule these server-side identifiers for removal after 30 days. Advertising use follows your separate advertising choice. Names, email addresses, delivery addresses and payment-card data are excluded from these events. You can withdraw permission on the privacy choices page.

Google measurement before a choice

Before you choose, configured Google tags may send shopping measurements without analytics or advertising cookies. Google receives public page details, store, product and order references, prices, and browser and network information. Customer names, email addresses, delivery addresses and payment details are excluded from these events. For cookieless Google measurement before a choice, temporary Google client and session references can be attached to an unpaid checkout without saving these identifiers in a browser cookie. Our server uses this reference to report a confirmed purchase if the confirmation page closes. The server-side identifiers are removed after 30 days. Saved measurement refusals, Global Privacy Control and Do Not Track keep this reporting off. Analytics and advertising cookies require their respective approval.

Cookie-free purchase reporting

Reject optional on the cookie banner turns off optional cookies and keeps cookie-free purchase reporting on. You can also select Allow cookie-free purchase reporting in Cookie & privacy choices. Google Ads receives a confirmed purchase amount and order reference without analytics or advertising cookies. This separate choice allows purchase measurement using the order reference, amount and IP address; it does not allow analytics or advertising cookies or personalized advertising. Google also receives browser and network information. Names, email, delivery addresses and payment details are excluded. You can turn off all optional measurement instead. Existing full refusals, Global Privacy Control and Do Not Track remain in effect.

Cookie & privacy choices