Privacy Policy

1. Information We Collect

Information you provide directly

We may collect information that you voluntarily provide, including:

• Your name, email address, telephone number, and mailing or shipping address.
• Messages, questions, feedback, and other information submitted through contact forms.
• Order details, product selections, customization details, and transaction information.
• Marketing preferences and consent records for email or text-message communications.
• Job-application information, if you apply for employment through the Site.
• Any other information you choose to provide to us.

Payment information

Payments are processed by Square or another payment processor identified at checkout. Payment card details are transmitted directly to the payment processor and are handled under that provider's privacy and security practices. We generally receive limited transaction information, such as payment status, order amount, transaction identifiers, and portions of payment-card information, rather than your complete card number.

Information collected automatically

When you use the Site, we and our service providers may automatically collect information through cookies, pixels, tags, server logs, and similar technologies. This information may include:

• Internet Protocol (IP) address and approximate location derived from it.
• Browser type, device type, operating system, language, and device identifiers.
• Pages viewed, links clicked, referring pages, dates and times of visits, and session activity.
• Interactions with advertisements, forms, products, checkout pages, and marketing messages.
• Cookie identifiers, advertising identifiers, and similar online identifiers.

Information from third parties

We may receive information from vendors that help us operate the Site, process payments, fulfill orders, measure advertising, manage customer communications, prevent fraud, and provide analytics. We may combine that information with information collected directly from you or automatically through the Site.

2. Cookies and Tracking Technologies

Cookies are small data files placed on your browser or device. Pixels, tags, local storage, and similar technologies can perform related functions. We may use these technologies for:

• Essential functions: operating the Site, maintaining security, processing transactions, and remembering basic preferences.
• Analytics: understanding traffic, visitor activity, and how the Site is used.
• Advertising: measuring campaigns, building audiences, limiting repeated ads, and showing advertisements that may be more relevant to you.
• Functionality: supporting forms, embedded content, customer service, and other website features.

Google technologies

The Site may use Google technologies, including Google Tag Manager and analytics or advertising tags configured through it. Google may use cookies and similar technologies to collect information about your device and activity for analytics, measurement, security, and advertising. Google's use of information is governed by its own policies. You can learn more at Google's Privacy Policy and How Google Uses Cookies.

Meta Pixel

The Site may use the Meta Pixel and related Meta Business Tools. These technologies may collect information about visits, page views, product activity, purchases, browser and device information, cookie identifiers, and interactions with the Site. We use this information to measure advertising, understand campaign performance, create audiences, and deliver or improve advertisements on Meta platforms such as Facebook and Instagram. Meta processes information under its own privacy terms. Learn more through Meta's Privacy Policy.

Your cookie choices

You can control or delete cookies through your browser settings. Where a cookie-preference tool is offered on the Site, you may also use that tool to manage non-essential cookies. Blocking some cookies may affect Site functionality. Browser controls may not prevent every form of pixel, server-side, or similar tracking.

3. How We Use Information

We may use information for the following purposes:

• Operate, maintain, secure, troubleshoot, and improve the Site.
• Respond to questions, requests, feedback, and customer-service inquiries.
• Process payments, confirm orders, fulfill purchases, and provide order updates.
• Coordinate production and shipping of print-on-demand merchandise.
• Send service-related, transactional, marketing, and promotional communications in accordance with your choices and applicable law.
• Measure website usage and advertising performance.
• Personalize content and advertisements and create advertising audiences.
• Detect, investigate, and prevent fraud, abuse, security incidents, or unlawful activity.
• Comply with legal obligations, enforce our agreements, and protect our rights and the rights of others.
• Carry out any other purpose disclosed when the information is collected or with your consent.

4. How We Disclose Information

We may disclose information to the following categories of recipients:

Payment processors

We share transaction and customer information with Square or another payment processor as necessary to authorize payments, manage transactions, prevent fraud, and provide payment services. Square's handling of information is governed by its privacy notice for buyers and other users.

Order-production and fulfillment providers

Merchandise orders may be produced and fulfilled through Printify and its network of print providers. We may share your name, email address, shipping address, telephone number, product and customization details, order information, and other information reasonably required to produce, ship, support, refund, or replace an order. Printify's handling of information is governed by its Privacy Policy.

Website, CRM, communications, and technical vendors

We may disclose information to vendors that provide website hosting, customer relationship management, form processing, email, text messaging, analytics, security, cloud storage, technical support, and related services. These providers may include HighLevel or LeadConnector and other vendors used to operate the Site and communicate with customers.

Analytics and advertising partners

We may disclose online identifiers, device information, usage information, event data, and purchase or conversion information to Google, Meta, and other analytics or advertising partners for measurement, attribution, audience creation, and targeted advertising.

Legal, safety, and business purposes

We may disclose information when we reasonably believe disclosure is required by law, legal process, or governmental request; necessary to enforce our policies; or appropriate to protect the rights, property, safety, and security of Boba Toko, our customers, or others. We may also disclose information as part of a merger, financing, sale, reorganization, bankruptcy, or transfer of all or part of our business or assets.

5. Targeted Advertising and Privacy Choices

We do not sell personal information in exchange for money. However, our use of advertising cookies, pixels, and related technologies may involve disclosing identifiers and internet activity to advertising partners. Depending on the law where you live, this activity may be considered "selling," "sharing," or processing personal information for targeted advertising.

You may be able to opt out by using the Site's cookie-preference tool, changing your browser settings, or using advertising controls provided by Google and Meta. Where required by applicable law and supported by our systems, we will also honor recognized browser-based opt-out preference signals, such as Global Privacy Control.

You may also contact us at [email protected] with the subject line "Privacy Request." We may need to verify your identity before completing certain requests.

6. Email and Text Messages

If you provide your email address or telephone number, we may send transactional or service-related communications. With your consent, we may also send marketing and promotional messages. Consent to receive marketing text messages is not a condition of purchase. Message frequency may vary, and message and data rates may apply.

You can unsubscribe from marketing emails by using the unsubscribe link in the message. You can opt out of marketing text messages by replying STOP. Reply HELP for assistance. We may send a final confirmation after an opt-out request.

We do not sell or share mobile numbers, text-message originator opt-in data, or consent information with third parties or affiliates for their own marketing or promotional purposes. We may share this information with service providers that help us deliver messages, provide customer support, prevent fraud, or operate our communications systems.

7. Data Retention

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to complete transactions, maintain business and tax records, resolve disputes, enforce agreements, prevent fraud, and comply with legal obligations. Retention periods vary depending on the type of information, the reason it was collected, and applicable law.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No website, transmission method, or storage system is completely secure, however, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Know whether we process your personal information and request access to it.
• Request correction of inaccurate personal information.
• Request deletion of personal information.
• Request a portable copy of certain personal information.
• Opt out of targeted advertising or certain sales or sharing of personal information.
• Withdraw consent where processing is based on consent.
• Appeal a decision we make regarding a privacy request, where required by law.
• Receive equal service and pricing without unlawful discrimination for exercising privacy rights.

To submit a request, email [email protected] with the subject line "Privacy Request" or write to the address listed below. Please describe your request and provide enough information for us to verify your identity. An authorized agent may submit a request where permitted by law, but we may require proof of the agent's authority.

10. Children's Privacy

The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can review and delete it as appropriate.

11. International Visitors

Boba Toko is based in the United States. If you access the Site from another country, information may be transferred to, stored in, and processed in the United States or other locations where our service providers operate. Those locations may have data-protection laws different from the laws in your country.

12. Third-Party Links and Services

The Site may link to or integrate with services operated by third parties, including payment, ordering, social-media, map, delivery, and fulfillment platforms. We do not control those third parties' privacy practices. Review their privacy policies before providing information through their services.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The revised policy will be posted on this page with a new effective date. Material changes may also be communicated through the Site or by other appropriate means.