Notice at Collection (California)

Notice of Collection for California residents. Last updated: March 18, 2026. Operated by XR, LLC d/b/a BoyZShop, 18047 Beach Blvd #220, Huntington Beach, CA 92649. This notice supplements our Privacy Policy.

California Shine the Light Law

California Civil Code Section 1798.83, the Shine the Light Law, requires us to disclose whether we have shared personal data with third parties for their direct marketing purposes. We do not disclose your personal data to non-affiliated companies for their direct marketing purposes without your consent.

California Consumer Privacy Act (CCPA)

Under the CCPA, California Civil Code sections 1798.100 through 1798.199, California residents have specific rights related to the information we collect or maintain. This section was last updated on March 18, 2026, and changes are effective upon posting.

1. Notice of collection

We may collect the following categories of personal data:

Identifiers

Real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, Social Security number, driver's license number, passport number, or similar identifiers.

• Sources: Directly from consumers when they interact with our website, create an account, place an order, or contact us, and from third-party suppliers.
• Business purposes: To create accounts, complete transactions, market our products, respond to inquiries, and prevent fraud.
• Third parties: Shipping companies, fraud prevention services, email marketing services.

Financial information

Credit card or other payment information.

• Sources: Directly from consumers when they create an account or place an order.
• Business purposes: To create accounts, complete transactions, and prevent fraud.
• Third parties: Credit card processing businesses.

Commercial information

Records of products purchased, obtained, or considered, and purchasing histories or tendencies.

• Sources: Consumer interactions with our website including purchases, page views, searches, and cart additions, and third-party suppliers.
• Business purposes: To understand consumer behavior, market our products, complete transactions, and provide customer service.
• Third parties: Third-party email marketing and advertisement services.

Internet or network activity

Browsing history, search history, and information on a consumer's interaction with a website, application, or advertisement.

• Sources: Consumer interactions with our website, and third-party suppliers.
• Business purposes: To understand consumer behavior and market our products.
• Third parties: Third-party email marketing and advertisement services.

Mobile number and SMS consent data

Mobile phone number, SMS opt-in consent record, opt-in timestamp and source, consent disclosure language, cart session data, and opt-out records.

• Sources: Directly from consumers who opt in to our SMS program via checkout, web forms, or keyword enrollment.
• Business purposes: To send SMS marketing, cart reminders, and service notifications you consented to, and to maintain TCPA, CTIA, and carrier compliance records.
• Third parties: Our SMS marketing platform provider, solely for message delivery. Not shared or sold for third-party marketing.

Audio, electronic, visual, or similar information

Information collected during customer service inquiries.

• Sources: Collected when consumers make customer service inquiries.
• Business purposes: To answer inquiries and improve customer service.
• Third parties: Not shared with any third parties.

Geolocation data

Approximate location associated with a purchase.

• Sources: Collected when a consumer makes a purchase.
• Business purposes: To complete transactions, including currency selection and fraud prevention.
• Third parties: Third-party fraud prevention services.

Professional or employment information

A business address provided at account creation or checkout.

• Sources: Collected when a consumer provides a business address.
• Business purposes: To complete a transaction.
• Third parties: Shipping companies.

Inferences

Profiles reflecting preferences, characteristics, behavior, and predispositions.

• Sources: Consumer interactions with our website.
• Business purposes: To understand consumer behavior and market our products.
• Third parties: Third-party email marketing and advertisement services.

Additional uses of information

We may also use information we collect to provide customer service and technical support; conduct research and make business decisions about current and future offerings; debug and repair errors and improve quality and safety; cooperate with law enforcement and protect the rights, safety, or property of us or others; comply with legal obligations and respond to government requests; enforce our policies and agreements; and defend or pursue legal claims. We may transfer personal data as part of a corporate transaction such as a merger, acquisition, financing, or sale of assets, subject to this policy.

2. Your right to know

You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you. You may make this request twice within a 12-month period. To submit a request, email [email protected], call toll free at 1-866-363-0688, or write to XR, LLC d/b/a BoyZShop, CCPA, 18047 Beach Blvd #220, Huntington Beach, CA 92648. Include your name, email address, and a description of your request. To verify a request about categories, we require at least two pieces of personal information that match our records; for specific pieces, three matching pieces plus a signed, notarized declaration under penalty of perjury.

3. Disclosure or sale of personal information

We have not sold any personal information to third parties for a business or commercial purpose in the preceding 12 months. We do not knowingly collect or sell the personal information of minors under 18 years of age.

4. Your right to request deletion

You have the right to request that we delete personal information we have collected or maintain. We are not required to comply in certain cases, such as completing a transaction, detecting security incidents, debugging errors, complying with legal obligations, or other lawful internal uses. To request deletion, email [email protected], call 1-866-363-0688, or write to the address above.

5. Right to opt out of sale

We do not provide an opt-out mechanism because we do not, and will not, sell the personal information we collect. If we decide to sell personal information in the future, we will provide a notice of the right to opt out in this policy.

6. Right to non-discrimination

We will not discriminate against you for exercising any of your privacy rights, including by denying goods or services, charging different prices, or providing a different quality of service.

7. Authorized agent

You may designate an authorized agent to make a request under the CCPA with written permission or power of attorney under Probate Code sections 4000 to 4465. We may require proof of authorization and identity verification.

8. Notice of financial incentive

We do not currently offer financial incentives or price or service differences in exchange for the retention or sale of your information.

9. Exceptions

We may aggregate or de-identify information so it no longer relates to you individually. Our use and disclosure of aggregated or de-identified information is not subject to this policy.

10. Consumers with disabilities

California consumers with disabilities may contact us at 1-866-363-0688 or [email protected] for this notice in an alternative format.

11. Contact us

XR, LLC d/b/a BoyZShop
CCPA
18047 Beach Blvd #220, Huntington Beach, CA 92648
Email: [email protected]
Phone: 1-866-363-0688