BOYZSHOP

Privacy Policy

How We Handle Your Data

Last Updated: March 18, 2026

Operated by XR, LLC d/b/a BoyZShop | 18047 Beach Blvd #220, Huntington Beach, CA 92649

I. GENERAL PRIVACY STATEMENT

The following is the BoyZShop policy regarding the privacy rights of visitors to this website. We respect your right to privacy and your desire for a secure online shopping experience. This is a website of boyzshop.com. We can be reached via email at info@boyzshop.com.

Shipping Privacy

We respect your privacy. All orders from BoyZShop are shipped in plain packaging using the return address "XRLLC". For more information please see our full privacy policy below.

What Kind of Information Does BoyZShop Collect?

We may collect personal information from you, such as your name, email address, postal address, phone number, and similar identifiers, when you visit our website, place an order, or contact us with a question or concern.

How Does BoyZShop Use My Information?

We may use your personal information in the following ways:

• To communicate with you, and to send you information by email and other means about our company
• To help us address problems with and improve our site design, products, and services
• To analyze trends and statistics
• To protect the security or integrity of our websites and our business
• To contact you if necessary

You always have the choice not to receive information or communications from us. For instructions on opting out, please see the section entitled "How do I make choices about receiving promotional communications?" below.

Does BoyZShop Share My Information?

We do not sell or rent the information you provide to us to third parties. However, we do contract with service providers to assist us in maintaining and managing our databases and to communicate with those who are interested in our company. We do not authorize any of those third parties to make any other use of your information. Additionally, we may disclose and maintain user information in special cases, including:

• In the unlikely event of a sale of some or all of our business, we will disclose your personal information to a purchaser that agrees to abide by the terms and conditions of this privacy policy.
• If necessary, in our good faith judgment, to comply with laws or regulations or in response to a valid subpoena, order, or government request, or to protect the rights of BoyZShop or others.

How Do I Access or Change My Information?

You can ask us to update your personal information by contacting us as described in the section entitled "How do I contact you?" below. Please note that any request to update your personal information may take up to 10 days for your email request and 6 to 8 weeks for your postal mail request, or you may log into your user account settings and update your account directly.

How Do I Make Choices About Receiving Promotional Communications?

BoyZShop wants to communicate with you only if you want to hear from us. If you prefer not to receive promotional information or other communications from us, you can let us know by contacting our customer service as described in the section entitled "How do I contact you?" below.

If you ask us to remove your name and address from promotional lists, we will maintain your name in a "do not contact" file to ensure that we can honor your request. It may take up to 10 days to process your email request and 6 to 8 weeks to process your postal mail request, during which period you may continue to receive communications from us. You can also opt out of newsletters by clicking the opt-out link on any promotional email.

How Does BoyZShop Use Cookies?

We make limited use of cookies on this website. A cookie is a small data file that websites often store on your computer's hard drive when you visit their sites. A cookie may contain information (such as a unique user ID) that is used to track the pages of the sites you have visited. We use cookies for the limited purpose of determining whether you have visited a particular page before, so that you will not have to view introductory information that is displayed for first-time visitors. We do not store personally identifiable information in your cookie.

Website Analytics

We may also partner with selected third-party vendors, such as Google Analytics, to allow tracking technologies and remarketing services on the site through the use of first-party cookies and third-party cookies, to, among other things, analyze and track users' use of the site, determine the popularity of certain content, and better understand online activity. By accessing the site, you consent to the collection and use of your information by these third-party vendors. You are encouraged to review their privacy policy and contact them directly for responses to your questions. We do not transfer personal information to these third-party vendors. If you do not want any information to be collected and used by tracking technologies, you can visit the third-party vendor or the Digital Advertising Alliance Opt-Out Tool.

You should be aware that getting a new computer, installing a new browser, upgrading an existing browser, or erasing or otherwise altering your browser's cookies files may also clear certain opt-out cookies, plug-ins, or settings.

SMS / Text Message Marketing

If you opt in to receive SMS marketing messages from us, your mobile phone number and consent record are collected and stored. We use this information solely to send you the messages you have consented to receive. We do not sell your mobile number to third parties. Your consent records, including date, time, method of consent, and the disclosure language presented at enrollment, are retained for a minimum of 5 years to support compliance with the Telephone Consumer Protection Act (TCPA), applicable state laws, and Canadian Anti-Spam Legislation (CASL).

You may opt out at any time by replying STOP to 27634, emailing info@boyzshop.com, or calling 1-866-363-0676. For full details, see our SMS Terms of Service.

Tracking Technology for SMS Cart Reminders

Some carriers require an explicit description of how tracking technology is used to capture, store, and transmit abandoned cart data for the purpose of sending SMS cart reminder messages.

We use automated tracking technologies, including browser cookies, session tokens, server-side event webhooks, and third-party platform plugins (collectively, "Tracking Technologies"), to power our SMS abandoned cart reminder program. The following describes how these technologies work across three stages: Capture, Storage, and Transmission.

1. Capture -- How Cart Data Is Collected

The boyzshop.com website uses cookies and similar tracking technologies to monitor shopping cart activity in real time. Specifically:

• When you visit our website and add products to your shopping cart, a first-party browser cookie or session token is created and stored on your device. This token is linked to your cart contents, timestamps, and browsing session.
• If you have previously provided your mobile phone number and opted in to receive SMS marketing from us, our SMS marketing platform provider associates your session data with your SMS subscriber profile.
• A server-side webhook event is triggered when cart activity occurs (items added, cart viewed, checkout initiated but not completed). This event transmits relevant cart data, including cart contents, item values, and session identifiers, to our SMS marketing platform provider.
• No cart tracking for SMS purposes occurs unless you have actively and expressly opted in to our SMS marketing program. Consent is a prerequisite.

2. Storage -- How Cart Data Is Retained

• Cart session data (items, timestamps, session identifiers) is stored within our SMS marketing platform provider's encrypted, access-controlled environment.
• Cart content data is retained for the minimum period necessary to evaluate whether a reminder should be triggered, consistent with applicable carrier requirements.
• Your mobile phone number, SMS consent record, opt-in timestamp, opt-in source, and the disclosure language presented to you at enrollment are stored separately and retained for a minimum of 5 years in compliance with the TCPA, CTIA guidelines, and applicable carrier codes of conduct.
• All stored data is protected by industry-standard security measures including encryption at rest and in transit, role-based access controls, and audit logging.

3. Transmission -- How Cart Reminders Are Sent

• Our SMS marketing platform provider initiates a cart reminder message to your opted-in mobile phone number via a carrier-registered 10-digit long code (10DLC) or approved short code provisioned and registered through The Campaign Registry (TCR), compliant with T-Mobile's Code of Conduct and CTIA guidelines.
• The SMS message contains a direct link back to your shopping cart on our website. You must complete any purchase yourself. We do not process payment or complete transactions on your behalf via SMS.
• Cart reminder messages are limited in frequency and will not be sent repeatedly for the same cart event. We reserve the right to adjust message frequency and timing in our sole discretion, consistent with applicable carrier guidelines.
• Your phone number and cart data are transmitted only to our SMS marketing platform provider for the purpose of message delivery routing. We do not share, sell, rent, or otherwise transfer your mobile phone number or SMS opt-in consent to any third-party advertisers, data brokers, or marketing aggregators.

Your Choices Regarding SMS Cart Reminder Tracking

• Opt out of SMS cart reminders at any time by replying STOP to 27634.
• Upon opt-out, the association between your session tracking data and your SMS profile is terminated and no further cart reminder triggers will fire for your device.
• Opting out of SMS does not affect your ability to browse or make purchases on our website.

To opt out or request deletion of stored data, contact us at info@boyzshop.com or call 1-866-363-0676. For full details, see our SMS Terms of Service.

Third-Party SMS Data Sharing: In accordance with wireless carrier requirements, including T-Mobile's Code of Conduct, we affirm that your SMS opt-in data and consent status will not be shared with or sold to any third party for their own marketing purposes. SMS opt-in data is used exclusively by BoyZShop to send you messages you have consented to receive.

How Do I Know My Personal Information Is Secure?

We have in place certain physical, electronic, and managerial safeguards to protect the security and privacy of your personal information.

What Is "Phishing"?

"Phishing" is a scam designed to steal your personal information. If you receive an email that looks like it is from us asking you for your personal information, do not respond. We will never request your password, user name, credit card information, or other personal information through email.

How Do I Contact You?

For questions about our privacy policy, to make choices about receiving promotional or other communications, or to update your personal information, you can contact us by email at info@boyzshop.com or write to us at:

BoyZShop / XR, LLC d/b/a BoyZShop

18047 Beach Blvd #220

Huntington Beach, CA 92649

Email: info@boyzshop.com

Phone: 1-866-363-0676

II. CALIFORNIA USERS: YOUR CALIFORNIA PRIVACY RIGHTS

California Shine the Light Law

California Civil Code Section 1798.83, known as the Shine the Light Law, requires us to disclose that California customers may request information concerning whether a business has disclosed personal data (as defined in the Shine the Light law) to any third parties for their direct marketing purposes. We do not disclose your personal data (as defined in the Shine the Light law) to non-affiliated companies for their direct marketing purposes without your consent.

California Consumer Privacy Act (CCPA)

Under the California Consumer Privacy Act ("CCPA"), California Civil Code sections 1798.100 through 1798.199, California residents have specific rights related to the information we collect or maintain about you. This California-specific portion of the Privacy Policy was last updated on March 18, 2026. Any changes will be effective immediately upon posting.

1. Notice of Collection

We may collect information about consumers in the following categories of personal data:

Identifiers

Such as real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, Social Security Number, driver's license number, passport number, or other similar identifiers.

Sources: Directly from consumers when they interact with our website, create an account, place an order, or contact us. Also from third-party suppliers.

Business Purposes: To create consumer accounts; complete transactions; market our products; respond to customer inquiries; prevent fraud.

Third Parties: Shipping companies, fraud prevention services, email marketing services.

Financial Information

Such as credit card or other payment information.

Sources: Directly from consumers when they make an account or place an order.

Business Purposes: To create accounts or complete transactions; fraud prevention.

Third Parties: Credit card processing businesses.

Commercial Information

Including records of products purchased, obtained, or considered, or other purchasing histories or tendencies.

Sources: Consumer interactions with our website including purchases, page views, searches, and cart additions. Also from third-party suppliers.

Business Purposes: To gain insight into consumer characteristics and behaviors; to market our products; to complete transactions; for customer service.

Third Parties: Third-party email marketing and advertisement services.

Internet or Electronic Network Activity Information

Including browsing history, search history, and information regarding a consumer's interaction with a website, application, or advertisement.

Sources: Consumer interactions with our website including purchases, page views, searches, and cart additions. Also from third-party suppliers.

Business Purposes: To gain insight into consumer characteristics and behaviors; to market our products.

Third Parties: Third-party email marketing and advertisement services.

Mobile Phone Number and SMS Consent Data

Including your mobile phone number, SMS opt-in consent record, opt-in timestamp and source, consent disclosure language presented at enrollment, cart session data, and opt-out records.

Sources: Directly from consumers when they opt in to our SMS marketing program via checkout, web forms, or keyword enrollment.

Business Purposes: To send SMS marketing messages, cart reminder messages, and service notifications you have consented to receive; to maintain compliance records required under TCPA, CTIA guidelines, and applicable carrier requirements.

Third Parties: Our SMS marketing platform provider, solely for message delivery. Your SMS opt-in data and consent status are not shared with or sold to any third party for their own marketing purposes.

Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information

Sources: Collected when consumers make customer service inquiries.

Business Purposes: To answer customer service inquiries and improve customer service.

Third Parties: We do not share this information with any third parties.

Geolocation Data

Sources: Collected when a consumer makes a purchase.

Business Purposes: To complete consumer transactions, including currency selection and fraud prevention.

Third Parties: Third-party fraud prevention services.

Professional or Employment Related Information

Sources: Collected when a consumer provides a business address when creating an account or placing an order.

Business Purposes: To complete a transaction.

Third Parties: Shipping companies.

Inferences Drawn to Create a Consumer Profile

Reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sources: Consumer interactions with our website including purchases, page views, searches, and cart additions.

Business Purposes: To gain insight into consumer characteristics and behaviors; to market our products.

Third Parties: Third-party email marketing and advertisement services.

Additional Uses of Information

We may also use any of the information we collect from consumers in order to:

• Provide customer service and technical assistance and respond to questions related to our products and services
• Conduct internal research and development and make business decisions about current and future product and service offerings
• Debug and repair errors in our products and services and maintain and improve their quality and safety
• Cooperate with law enforcement and protect the rights, interests, safety, or property of us or our customers, service providers, and other third parties
• Comply with and enforce applicable legal and regulatory obligations, and respond to governmental requests
• Enforce our policies, terms and conditions, or other agreements
• Defend against or pursue claims, disputes, or litigation, in court or elsewhere

We may disclose or transfer personal data about consumers as part of a corporate business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which case the personal data could be transferred to third parties as a business asset in the transaction, subject to the terms of this privacy policy.

2. Your Right to Know About Personal Information Collected or Disclosed

a. Your Right to Request Information. You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you. You may make a request for this information twice within a 12-month period.

b. Instructions for Requesting Information. To submit a request, email ccpa@xrllc.com, call us toll-free at 1-866-363-0688, or write to us at: XR, LLC d/b/a BoyZShop, CCPA, 18047 Beach Blvd #220, Huntington Beach, CA 92648. Please include your name, email address, and a description of your request so we can locate your records and respond appropriately.

c. Verification Process. To process requests about categories of information, we require at least two pieces of personal information that match our records. For requests about specific pieces of information, we require three matching pieces plus a signed and notarized declaration under penalty of perjury.

3. Disclosure or Sale of Personal Information

We have not sold any personal information to third parties for a business or commercial purpose in the preceding 12 months. We do not knowingly collect nor sell the personal information of minors under 18 years of age.

4. Your Right to Request Deletion of Personal Information

a. Your Right to Delete. You have the right to request that we delete any personal information about you which we have collected or maintain. We are not required to comply with a deletion request in certain circumstances, including where the information is necessary to complete a transaction, detect security incidents, debug errors, comply with legal obligations, or for other lawful internal uses.

b. Instructions for Requesting Deletion. To submit a deletion request, email ccpa@xrllc.com, call us toll-free at 1-866-363-0688, or write to us at: XR, LLC d/b/a BoyZShop, CCPA, 18047 Beach Blvd #220, Huntington Beach, CA 92648. Please specify what information you are requesting be deleted, or state that you are requesting deletion of all information we have collected or maintain about you.

5. Right to Opt-Out of the Sale of Personal Information

We do not provide a mechanism for opting-out of the sale of your personal information because we do not, and will not, sell personal information we collect. If we decide to sell personal information in the future, we will provide a notice of right to opt-out in this privacy policy.

6. Right to Non-Discrimination

We will not discriminate against you because you have exercised any of your consumer privacy rights, including by denying goods or services, charging different prices, providing a different level of quality, or suggesting that you will receive a different price or quality.

7. Authorized Agent

You may designate an authorized agent to make a request under the CCPA by providing written permission or power of attorney pursuant to Probate Code sections 4000 to 4465. We will require proof of authorization and may require identity verification.

8. Notice of Financial Incentive

We do not currently offer financial incentives or price or service differences online to consumers in exchange for the retention and/or sale of their information.

9. Exceptions

We may aggregate and/or de-identify your information so that the information no longer relates to you individually. Our use and disclosure of such aggregated or de-identified information is not subject to this Privacy Policy, and may be disclosed to others without limitation and for any purpose.

10. Consumers with Disabilities

California consumers with disabilities may contact us by phone at 1-866-363-0688 or email us at ccpa@xrllc.com for information on how to access this notice in an alternative format.

11. Contact Us

For any questions or concerns about any aspect of this Privacy Policy or our privacy practices:

BoyZShop / XR, LLC d/b/a BoyZShop

CCPA

18047 Beach Blvd #220

Huntington Beach, CA 92648

Email: ccpa@xrllc.com

Phone: 1-866-363-0688

BoyZShop | XR, LLC d/b/a BoyZShop

18047 Beach Blvd #220, Huntington Beach, CA 92649

info@boyzshop.com | 1-866-363-0676