Privacy Policy

Last updated: March 7, 2026

1. Who We Are

Quest Mystery Boxes is operated by BPS Distributions ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or make a purchase.

2. Information We Collect

We collect the following types of information:

  • Order information: Name, billing address, shipping address, payment information (processed securely by Shopify Payments — we never store full card numbers), email address, and phone number.
  • Device information: IP address, browser type, time zone, and cookies as you interact with our site.
  • Marketing opt-ins: Email address if you voluntarily subscribe to marketing communications.

3. How We Use Your Information

We use your information to:

  • Process and fulfill your orders
  • Communicate with you about your order
  • Send marketing emails only if you have opted in
  • Comply with legal obligations
  • Improve our website and services (via anonymized analytics)

4. Sharing Your Information

We do not sell your personal data to third parties. We share information only with:

  • Shopify: Our e-commerce platform (see Shopify's privacy policy)
  • Shipping carriers (UPS, FedEx, USPS) solely to deliver your order
  • Payment processors to process your transaction
  • Law enforcement if required by applicable law

5. Cookies

We use cookies to maintain your shopping session, remember your preferences, and analyze site traffic. You may decline non-essential cookies via the cookie consent banner. Note that declining cookies may affect site functionality.

6. Your Rights (GDPR & CCPA)

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction or deletion of your data
  • Opt out of marketing communications at any time
  • Request that we not sell your personal information (we do not sell it)
  • Lodge a complaint with a supervisory authority (EU residents)

To exercise these rights, email us at privacy@questmysteryboxes.com.

7. Data Retention

We retain your order data for a minimum of 5 years to comply with tax and legal requirements. Marketing data is deleted upon unsubscribe request.

8. Security

We use industry-standard SSL encryption for all data transmission. Payment information is processed by Shopify Payments using PCI-DSS compliant infrastructure. We never store full credit card numbers.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors.

10. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page. Continued use of our services constitutes acceptance of the updated policy.

11. Contact

Privacy questions: privacy@questmysteryboxes.com