Privacy Policy

On behalf of Mystic Box LLC, a California limited liability company, commonly known as “Mystic Box” (referred to as the “Mystic Box”, “Company”, “us”, or “we”), welcome to the website (or or (referred to as the “Site”). We recognize that your privacy is important. This Policy discloses the privacy practices for the Site and also covers how personal and other information that we receive or collect about you is treated. Please read the information below to learn the following regarding your use of the Site.

You acknowledge that this Privacy Policy is designed to be read in connection with the Site’s Terms and Conditions of Use policies (hereinafter, “Terms”) and that by accessing or using the Site, you agree to be bound by these Terms, as well as this Policy. We reserve the right to change this Privacy Policy from time to time. We will notify you about significant changes in the way we treat personal information by updating any privacy information on this page. Your continued use of the Site or the services available through this Site after such modifications will constitute your:

(a) acknowledgment of the modified Policy; and

(b) your agreement to abide and be bound by that Policy.

If you have any questions about this Policy, please feel free to contact us via e-mail at


1. Types of Information We Collect

In order to better provide you with our services, we may collect two types of information about our users: Personally Identifiable Information and Aggregate Information.

Personally Identifiable Information (“PII”): This refers to information that lets us know the specifics of who you are, grant access to the Site, and enable the functionality of the Site. Examples of PII may include your full name, e-mail address, telephone number, date of birth, your mailing and billing address, bank/credit card account numbers for purchases, and in some cases, your Internet Protocol (“IP”) address. You may also voluntarily provide other PII, whether or not specifically requested by us, by posting publicly viewable comments on the Site, linking third-party social media accounts, where available, or linking or referencing media or content hosted by third-party websites or applications. You agree that we may collect any PII voluntarily supplied by you, whether or not we have requested it. You must not submit any PII relating to a third party without their consent. We do not knowingly collect any information relating to third parties which you do not have permission to provide.

When you engage in certain activities on our Site, such as sending us an email to, we will ask you to provide certain PII.

We have not and do not sell your PII.

Aggregate Information: This refers to information that does not by itself identify a specific individual. We gather certain information about you to enable the Site’s features and functionality. This information includes, but is not limited to, generalized user data such as non-specific age (specified as within an age range of 10 years) and anonymous user statistical data on use and access of the Site.

We gather certain information about you based upon what you utilize on our Site. This information includes, but is not limited to information about your computer, technical information about your computer or device (such as type of device, web browser or operating system, and IP address in some cases), your preferences and settings (time zone, language, privacy preferences, product preferences, etc.), the buttons or controls you utilized (if any), how long you used the Site and which services and features you used, and your online or offline status of the Site. This information, which is collected in a variety of different ways, is compiled and analyzed on both a personal and an aggregated basis. This information may include the Website’s Uniform Resource Locator (“URL”) that points to the Site you just came from, which URL you go to after visiting our Site, what browser you are using, and your IP address, in some cases.

2. How We Collect and Use Information

We do not collect any PII about you unless you voluntarily provide it to us. However, you may be required to provide certain PII to us when you elect to use certain services available on the Site.

We will primarily use your PII to provide information and services, as you’ve selected, for you.

We will also use certain forms of PII to enhance the operation of our Site, improve our internal marketing and promotional efforts, statistically analyze Site use, improve our service, and customize the Site’s content, layout, and services. We may use PII to deliver information to you and to contact you if you request that we do so. We may use your PII to enforce our agreements with you, including our Site’s Terms of Use and this Privacy Policy. For example, we may use your IP address to diagnose problems with our servers, software, to administer our Site, and to gather demographic information.

If your web browser emits “do not track” signals, or you use other mechanisms that provide you the opportunity to prevent the collection of PII or Aggregate Information about your online activities, we honor these signals or mechanisms by refraining from collecting information about you.

3. Cookies

Depending on how you use our Site’s website, we may store cookies on your computer in order to collect certain aggregate data about our users and to customize certain aspects of your specific user experience. A cookie is a small data text file which is stored on your computer that uniquely identifies your browser. Cookies may also include more personalized information, such as your IP address, browser type, the server your computer is logged onto, the area code and zip code associated with your server, and your first name to welcome you back to our Site. We may use cookies to perform tasks such as: monitoring aggregate Site website usage metrics, storing and remembering your passwords (if you allow us to do so), storing account preferences that you have set, and personalizing the services we make available to you. However, we do not use cookies to track your browsing behaviors.

Most browsers are initially set up to accept cookies, but you can reset your browser to refuse all cookies or to indicate when a cookie is being sent. However, some aspects of the Site’s website may not function properly if you elect to disable cookies.

Some cookies used by us include those for Google Analytics, Display Advertising and Remarketing. Remarketing involves showing advertisements on other websites to users who have visited or used Mystic Box. The advertisements may feature Mystic Box or other advertisers. For more information on how Google uses data and how to opt out, please visit:

4. Release of Information

We will not sell, trade, or rent your PII to others. We do provide some of our services through contractual arrangements made with affiliates, service providers, partners and other third parties (“Service Partners”). We and our Service Partners may need to use some PII in order to complete orders, perform tasks between our respective sites, or to deliver services to you. For example, we use Service Partners, such as Stripe or Paypal, to facilitate and complete electronic transactions of sales of goods by buyers conducted with the Site.

We will choose Service Partners who adopt and promote strong privacy policies. However, the use of your PII by our Service Partners is governed by the respective privacy policies of those providers and is not subject to our control.

Except as otherwise discussed in this Privacy Policy, this document only addresses the use and disclosure of information we collect from you. Any other sites accessible through our Site, including those of our Service Partners, have their own privacy policies and data collection, use, and disclosure practices. Please consult each site’s privacy policy. We are not responsible for the policies or practices of third parties.

Other than our Service Partners, we do not allow third parties to collect PII or Aggregate information about you or your online activities when you use our Site.

Occasionally we may be required by law enforcement or judicial authorities to provide PII to the appropriate governmental authorities. In such cases, we will disclose PII upon receipt of a court order, subpoena, or to cooperate with a law enforcement investigation. We fully cooperate with law enforcement agencies in identifying those who use our services for illegal activities. We reserve the right to report to law enforcement agencies any activities that we in good faith believe to be unlawful.

5. Updating and Correcting Information

We believe you should have the ability to access and edit the PII that you have provided to us. You may change any of your PII in your account online at any time by accessing the Site.

We encourage you to promptly update your PII if it changes. You may ask to have the information on your account deleted or removed; however, some information, such as past transactions, logs of technical support calls, or other information may not be deleted. In addition, it may be impossible to completely delete your information without some residual information because of backups.

6. Your Privacy Rights

Under California Civil Code Section 1798.100, known as the California Consumer Privacy Act of 2018, and California Civil Code Section 1798.83, known as the “Shine the Light” law, requires us to provide to you, a verifiable user, upon your verified request, (a) categories of personal information collected from you, categories of sources of personal information collected from you, the business or purpose for selling or collection said information, the categories of third parties with whom said information has been shared, and a list of your personal information, if any, which we have disclosed to third parties, in the preceding calendar year, and (b) the names and addresses of those third parties. The “Shine the Light law” also requires us to provide you with the names and address of these third parties upon said request. You may make such a request twice per calendar year, and we will provide the information to you free of charge. Please send any requests made pursuant to this section to us by e-mail by at Registration is not required for said requests.

Mystic Box does not sell your PII. Under California Consumer Privacy Act of 2018, you have the right, at any time, to opt out of any sales of your PII. To opt out of any sales, please e-mail us at

Mystic Box does not and will not discriminate against a user or consumer due to the user or consumer’s exercise of their rights under the “Shine the Light” law or the California Consumer Privacy Act of 2018.

7. User Choices on Collection and Use of Information

We may, from time to time, send you e-mails and/or newsletters regarding information or services that we feel may interest you. Only the Company (or agents working on behalf of us and under confidentiality agreements) will send you these notifications. If you do not want to receive correspondence from us, you can “opt-out” by clicking on the “Unsubscribe” link at the bottom of each correspondence.

You also have choices with respect to cookies, as described above. By modifying your browser preferences, you have the choice to accept all cookies, to be notified when a cookie is set, or to reject all cookies. If you choose to reject all cookies some parts of our Site may not work properly in your case.

8. Security of Your PII

At our Site we make extensive efforts to secure your PII. We strive to take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of your PII. For example:

— We work hard to ensure that the data we collect is reliable, accurate, complete, and current.

— We use PII only for the purposes for which it was collected or to comply with any applicable legal or ethical reporting or document retention requirements.

— We limit access to PII only to specific employees, Service Partners, contractors, and agents who have a reasonable need to come into contact with your information.

— Additionally, we also employ a number of physical, electronic, and procedural safeguards to protect PII. Our secure servers and our data centers are protected by encryption and our servers reside behind firewalls and password protection.

Unfortunately, no data transmission over the Internet or any wireless network can be guaranteed to be 100% secure. As a result, while we strive to protect your PII, you acknowledge that: (a) there are security and privacy limitations inherent to the Internet which are beyond our control; and (b) the security, integrity, and privacy of any and all information and data exchanged between you and us through the Site cannot be guaranteed.

9. Miscellaneous

You must be at least eighteen (18) years old to have our permission to use our Site. Our policy is that we do not knowingly collect, use, or disclose PII about minor visitors.

You should also be aware that when Personally Identifiable Information is voluntarily disclosed (i.e. your name, email address, etc.) by you in the comments or media that you post in public areas on the Site and that information, along with any information disclosed in your communication, can be collected and used by third parties and may result in unsolicited messages (including unwanted spam messages) from third parties. Such activities are beyond our control and this Policy does not apply to such information. Please consult our Terms of Use for policies regarding user-provided information.

10. Contact Us

If you have any questions, concerns, or inquiries about our Privacy Policy, or our use of your PII, or our privacy practices, please contact us by e-mail at

11. Effective Date. This Privacy Policy is effective as of Oct 27, 2021.