Privacy Policy

Effective Date: Feb, 24, 2021

1. Introduction

The purpose of this Privacy Policy is to allow you (the “User”) to understand how we, Mystic Box, LLC (“Mystic Box”) collect and use the personal information you provide to us through the websites and mobile apps that we own and operate (in each case, the “Services”), including,, and and other channels, both offline and online, that reference or link to this Privacy Policy.

This Privacy Policy applies to information collected by Mystic Box and does not apply to information collected by any third-party sites to which Mystic Box may link or to information provided to, or collected by, third-parties through cookies, web beacons, or other third-party technologies served during your visit to the Services.

2. Information We Collect and How We Use It

Personal Account Information: If you choose to sign-up for our subscription box service, or engage in other transactions or activities (for example surveys or sweepstakes entries, among other things), or sign up for other services, on our Services, you will be asked to provide the following basic information: your name, your e-mail address, your mailing address, your telephone number and your credit card or other payment information.

We need these categories of information in order to enter into a transaction agreement with you to provide you with the goods or services you have requested.

All of this information submitted by you will be subject to this Privacy Policy and is called “Personal Account Information.”

As part of our agreement with you, we may use Personal Account Information to contact you or send you notifications about products and services that you have ordered. We may also, on the basis of your consent or our legitimate business interests, send you notifications about products and services that we otherwise think may be of interest to you. You can withdraw your consent at any time by using the opt-out mechanism in the notification or contacting us directly.

Technical Data: When a User visits the website Services, our servers automatically record information regarding the User’s browser type, browser language, platform type, IP address, web request, number of clicks, domain names, the amount of time spent on particular pages, the date and time of use of services and interactions with the Services (“Technical Data”). We store Technical Data through use of cookies, pixels, or other similar technologies.

Mystic Box uses Technical Data for the following legitimate business purposes:

(a) to diagnose and prevent service or technology problems that are associated with the IP addresses;

(b) to help us provide you with customized content and promotions that match your stated preferences;

(c) to prepare geographical or other statistical data to help us better serve our Users;

(d) to create new features, promotions, and services in connection with the Services;

(e) to measure the effectiveness of our advertising campaigns;

(f) to monitor the use of the Services;

(g) to confirm that Users have visited previously;

(h) to keep track of the status of your shopping cart; and

(i) to perform other functions on the Services.

You can set your browser to accept all cookies, reject all cookies, or notify you when a cookie is set. However, if you set your browser to disable all cookies, some features of the Services may not function properly. 

Information from Other Sources: We may obtain information about you from other sources and combine or link that with the information we have collected about you. To the extent we combine such third-party sourced information with your Personal Account Information, Technical Data, or Referral Information, we will treat the combined information in accordance with this Privacy Policy. We may also contract with third party vendors to pool browsing information about your visits to our website with other sources of information for purposes of determining whether you might be interested in receiving advertising, including direct mail or a catalog.

3. Disclosure of your Information

Mystic Box may provide your Personal Account Information, Technical Data, or Referral Information to third-party service providers that we engage to assist us with the operation of the Services and the provision of products and services. Such access is provided with the understanding that these parties will use the information for these limited purposes and in a manner consistent with our Privacy Policy.

Unless otherwise disclosed at the time of collection of information, Mystic Box does not share Personal Account Information or Technical Data with third parties for their own direct marketing purposes. We may, however, share personal information of our users with social media platforms, web publishers and/or their advertising intermediaries in order for them to display the relevant c ads to our users and individuals with similar interests and to measure the effectiveness of those ads.

Mystic Box may also provide your information to service-providers who provide marketing insights, such as lookalike models or other statistical research. Mystic Box may also provide general demographic, aggregated, or deidentified information about Users and customers and their preferences to advertisers and other existing or prospective business partners.

In addition, Mystic Box reserves the right to share Personal Account Information, Technical Data, and Referral Information with authorized third parties if:

(a) we believe we are required to do so in accordance with a law or to respond to a subpoena, court order, or other lawful request by a public authority, including to meet national security or law enforcement requirements;

(b) we believe that such disclosure is necessary or appropriate to enforce our Terms of Use and Sale;

(c) we believe that such disclosure is necessary or appropriate to take precautions against liability;

(d) we believe that such disclosure is necessary or appropriate to investigate and defend ourselves against any third-party claims or allegations;

(e) we believe that such disclosure is necessary or appropriate to assist government agencies;

(f) we believe that such disclosure is necessary or appropriate to protect the security or integrity of the Services;

(g) we believe that such disclosure is necessary or appropriate to protect the rights, safety or property of Mystic Box, our Users or others; or

(h) Mystic Box becomes involved in a merger, acquisition, or other transaction resulting in a change of control of Mystic Box or a sale of substantially all of the assets of the business or of a particular product line or division of the business, or negotiations for any such transaction, Personal Account Information may be transferred in connection with the transaction or potential transaction and may become subject to the privacy policy of another entity.

4. Third-Party Advertising

Advertisers may download cookies onto your computer, or use other technology like web beacons, to enable them to recognize your computer and collect information about your activity over time on our Services and other online services to facilitate delivery of targeted advertisements on other online services that they believe would be of most interest to you. Mystic Box does not have access to or control of the data collected from cookies that may be placed on your computer by third-party advertisers.

In some instances you can opt-out of receiving personalized ads from third party advertisers and ad networks. Advertisers and ad networks that are members of the Network Advertising Initiative (NAI) or who follow the Digital Advertising Alliance’s Self-Regulatory Principles for Online Behavioral Advertising provide opt-out choices at the following websites:

NAI Website

DAA Website

5. Security

We take reasonable and appropriate measures to help keep information secure and to help prevent it from becoming disclosed. Even though we follow reasonable procedures to try to protect the information in our possession, no security system is perfect so we cannot guarantee, and you should not expect, that your information will be secure in all circumstances.

6. Choice

We do not collect, use, or disclose your Personal Account Information in any ways or for any purposes that are materially different from those set forth herein. However, if we wish to do so in the future, we will obtain your consent first, and offer you the choice to opt-out of such collection, use, or disclosure.

7. Data Quality, Access, and Rectification

We will make reasonable efforts to ensure your Personal Account Information is accurate and complete and we will update or correct your information as needed when notified by you. In addition, you can manage your Personal Account Information through your Mystic Box account. If you would like to request access to your personal information, request to verify your personal information, identify any inaccuracy in your personal information, or change your personal information in any way, please contact us. 

8. Retention

We will keep your Personal Account Information in active files or systems as long as needed to meet the purposes for which it was collected or to fulfill the other purposes outlined herein.

9. International Transfers

This website is hosted in, and our Services are provided from, the United States. Accordingly, any personal information we collected may be processed in the United States or other countries in which we or our service providers operate. Those countries may offer less privacy protection than your country of residence, and in certain instances your personal information may be accessible by foreign courts, law enforcement authorities and national security authorities in those countries.

10. Other Sites

As noted above, this Privacy Policy only applies to our Services. Our Services may include links to other sites, but FabFitFun does not control the privacy practices of other sites. Mystic Box is not responsible for the privacy practices of other websites.

11. Changes to this Policy

Mystic Box may change its Privacy Policy from time to time. Any updated policy will be posted on this page and the effective date of the updated policy will be indicated at the top of the page.

12. How We Communicate with You

If you have any questions about our Privacy Policy, you can contact us by emailing us at If we need, or are required, to contact you concerning any event that involves your information, you agree that we may do so by email, telephone, or mail.

13. Do Not Track Signals: Some web browsers and devices allow you to broadcast a preference that your activities online not be “tracked”. At this time, our Services do not take action in response to “do not track” signals.

14. Children: The Service is not intended for use by children under 16 years of age. We do not knowingly collect or solicit information from children under the age of 16.

If you are a parent or guardian of a child under the age of sixteen (16) and believe he or she has disclosed personal information to us, please contact us at

If we become aware that we have collected personal information of a child under 16 years of age through the Service, we take steps to remove that information and terminate the child’s account.16. 

15. Changing and Deleting: You may access your Personal Account Information through your profile on our Services and delete, change, or modify certain information. For additional assistance with modifying or deleting information provided to our Services, contact us at

16. Countries other than United States of America services is limited to United States and Canadian residents only. United Kingdom or European individuals may also contact us at

17. Questions or Complaints

Should you have any questions or complaints regarding our Privacy Policy, please feel free to contact us at