Privacy Policy

Last updated: July 2026

1. Information we collect

When you visit this store we automatically receive your device and browser information, IP address, and how you interact with the site ("Device Information"), collected via cookies, log files and web beacons.

When you place an order we collect the information you provide: name, email address, shipping and billing address, phone number, and payment information ("Order Information"). Payment card details are processed directly by our payment providers and are never stored on our systems.

2. How we use your information

To produce, fulfil and ship your order, including sharing your name and address with our print partners and carriers
To send order confirmations, tracking updates and service emails
To screen orders for fraud risk
To respond to your support enquiries
To improve our store and, where you have consented, to send marketing about new designs and drops

3. Who we share it with

We share information only with service providers who need it to operate this store: Shopify (store platform), our print and fulfilment partners, shipping carriers, payment processors, and email and analytics providers. We do not sell your personal information.

We may also disclose information where required by law or to protect our legal rights.

4. Marketing emails

We only send marketing email to people who have opted in. Every email includes a one-click unsubscribe link, and you can also email us to be removed at any time.

5. Your rights

If you are in the EEA or UK (GDPR): you have the right to access, correct, port or delete your personal data, and to object to or restrict its processing. Our lawful bases are contract performance (fulfilling your order), legitimate interests (fraud prevention, service improvement) and consent (marketing).

If you are in California (CCPA/CPRA): you have the right to know what personal information we collect, to request deletion, and to opt out of any sale or sharing of personal information. We do not sell personal information.

To exercise any right, email pirapiraboxes.llc@gmail.com. We respond within 30 days and may ask you to verify your identity.

6. Data retention

We retain order records for as long as necessary to fulfil orders, honour our replacement guarantee, and meet tax and accounting obligations — typically 7 years — unless you request earlier deletion.

7. International transfers

Your information may be processed in the United States and other countries where our service providers operate. Where required, transfers out of the EEA or UK rely on the European Commission's Standard Contractual Clauses.

8. Cookies

We use essential cookies (cart and checkout), analytics cookies, and where applicable advertising cookies. You can disable cookies in your browser settings, though checkout may not function correctly without essential cookies.