Privacy policy

Effective date: October 19, 2026

Last updated: October 19, 2026

1. Who we are

Kitsy Box ("Kitsy Box," "we," "us," or "our") is a brand operated by Eshopo LLC, a New York limited liability company. Eshopo LLC is the operator of kitsybox.com and is responsible for the personal information described in this Privacy Policy.

This policy explains what personal information we collect when you visit kitsybox.com (including our QR-code recipe pages at kitsybox.com/unlock/), buy from our online store, sign up for our emails, or contact us. It also explains how we use and share that information and the choices you have.

If you bought a Kitsy Box product on another marketplace (for example, Amazon or TikTok Shop), that marketplace's privacy policy covers the information you gave it. See Section 5.

2. Information we collect

Information you give us

  • Contact details: name, email address, phone number, and billing and shipping address when you place an order or contact us.
  • Order details: the products you buy, order history, and communications about your order. Payment card details are entered into and processed by Shopify and our payment processors. We do not store full card numbers.
  • Email sign-up details: your email address, the page or product you signed up from (for example, the recipe page for a specific kit), the date and time you signed up, and whether you checked the box agreeing to receive marketing emails.
  • Reviews and messages: reviews you submit through our review provider, and anything you send us by email or contact form.

Information collected automatically

When you visit our website, we, our service providers, and our advertising and analytics partners automatically collect certain information using cookies, pixels, tags, and similar technologies. This includes your IP address, device and browser type, approximate location (from IP address), pages viewed, links clicked, referring website, the date and time of your visit, and actions such as adding items to your cart or completing a purchase. See Section 6.

3. QR-code recipe pages (kitsybox.com/unlock/) and our email newsletter

Some Kitsy Box packaging includes a QR code that links to a recipe page at kitsybox.com/unlock/.

  • No sign-up is required. You can download the free recipe book directly without entering an email address.
  • The newsletter is optional. Each recipe page also has an optional sign-up form. We only add you to our marketing email list if you enter your email address and check the box agreeing to receive emails. The box is never pre-checked.
  • What we collect: your email address, the recipe page and product you signed up from, the date and time, and your consent choice. Our email service provider, Omnisend, collects and stores this on our behalf.
  • What we send: recipes, tips, and Kitsy Box product news and offers. Every marketing email includes an unsubscribe link, and you can unsubscribe at any time.
  • Amazon and other marketplace orders: we do not use names, email addresses, phone numbers, or shipping addresses that we receive from Amazon or other marketplaces to send you marketing. We will only email you about Kitsy Box marketing if you sign up yourself on our website.

We do not run an SMS or text-message marketing program. We do not send marketing text messages. If you give us a phone number at checkout, we use it only to process and deliver your order (for example, the carrier may use it to contact you about delivery).

4. How we use your information

We use personal information to:

  • process, ship, and support your orders, including order confirmations and shipping updates;
  • send marketing emails if you have signed up (you can unsubscribe at any time);
  • respond to your questions and requests;
  • display and manage product reviews;
  • operate, secure, and improve our website, products, and recipe content;
  • measure and improve our advertising, including showing Kitsy Box ads on other websites and apps (see Section 6);
  • prevent fraud and abuse; and
  • comply with legal obligations and enforce our terms.

5. How we share your information

We share personal information with the following categories of third parties:

  • E-commerce platform and payments: Shopify, which hosts our store and checkout, and our payment processors.
  • Fulfillment and shipping: our fulfillment warehouse and shipping carriers, so they can deliver your order.
  • Email marketing: Omnisend, which stores our email list and sends our emails.
  • Reviews: Judge.me and Junip, which collect and display product reviews.
  • Analytics and advertising partners: Google (Google Analytics and Google Ads), Meta (Facebook and Instagram), and Pinterest. These partners collect information through cookies and pixels on our website (see Section 6).
  • Other apps on our website: Amazon (Amazon MCF and Buy with Prime), which can fulfill orders and offer Buy with Prime; Whatmore (Whatmore Shoppable Videos), which shows shoppable videos; and Shopify Collabs, which tracks referrals and sales from creators we partner with. These apps also collect information through pixels on our website (see Section 6).
  • Site feature apps: SWishlist (SWishlist: Simple Wishlist), which saves wishlists for customers who use it; SW Back in Stock, which sends back-in-stock alerts to the email address or phone number you give it; and Isonomy (Isonomy Accessibility), which provides accessibility tools, receives your IP address and browser information when those tools load, and, if you allow analytics cookies, usage events tied to a session ID. Other apps that provide site features such as wishlists, back-in-stock alerts, forms and accessibility tools may process limited information to provide those features.
  • Professional advisers and authorities: our lawyers, accountants, and auditors, and government authorities or other parties when required by law or to protect our rights, our customers, or others.
  • Business transfers: a buyer or successor if all or part of our business is sold, merged, or transferred.

Our service providers may use your information only to provide services to us, except as described in Section 6 for advertising and analytics partners, which may also use information under their own privacy policies.

Marketplace purchases. If you buy on Amazon, TikTok Shop, or another marketplace, that marketplace collects your order information and shares only limited information with us to fulfill your order. We use it only for that purpose.

6. Cookies, pixels, and third-party tracking

We and third parties use cookies, pixels, tags, and similar technologies on our website. Third parties, including Shopify (including Shopify Collabs), Omnisend, Google, Meta, Pinterest, Amazon, and Whatmore, may collect information about your online activities over time and across different websites and apps when you use our website. We use these tools to:

  • keep the store working (for example, your cart and checkout);
  • understand how visitors use our website (analytics);
  • send and measure our emails; and
  • measure our ads and show you Kitsy Box ads on other websites and apps (advertising).

Our product review providers also receive information when their scripts load on our pages: Judge.me (product reviews), which receives your IP address, browser and page information when its review widgets load; and Junip (product reviews), which receives your IP address, browser and page information when its script loads on our pages.

You can manage cookies through your browser settings and through the "Your Privacy Choices" link at the bottom of our website. Disabling some cookies may affect how the store works. You can also learn about partner choices at:

Types of cookies we use: (1) strictly necessary cookies that make the store work, such as your cart, checkout, and security, which are always on; (2) preference cookies that remember your settings; (3) analytics cookies that help us understand how the website is used; and (4) marketing cookies that our advertising partners use to show you relevant ads and measure them. Depending on where you live, you may see a cookie banner when you first visit our website. You can accept or decline non-essential cookies there, and you can change your choices at any time through the “Your Privacy Choices” link at the bottom of our website.

Do Not Track. Some browsers send "Do Not Track" (DNT) signals. Because there is no common industry standard for DNT, our website does not currently respond to DNT signals. We treat a Global Privacy Control (GPC) signal from your browser as a request to opt out of the sale or sharing of your personal information for that browser.

7. "Sale" and "sharing" of personal information

We do not sell your personal information for money, and we do not sell or rent our email list.

However, some U.S. state privacy laws define "sale," "sharing," or "targeted advertising" broadly enough to include letting advertising partners (such as Meta, Google, and Pinterest) collect information through cookies and pixels on our website for advertising. To the extent our use of these tools counts as a "sale," "sharing," or "targeted advertising" under those laws, you can opt out at any time by using the "Your Privacy Choices" link at the bottom of our website, or by emailing us at the address in Section 13.

We do not knowingly sell or share the personal information of anyone under 16.

8. Your choices and rights

Marketing emails. Click "unsubscribe" in any marketing email, or email us. We will process your request promptly, and within 10 business days. We may still send you messages about your orders.

Reviewing and changing your information. You can ask us to review, correct, or update the personal information we hold about you by emailing us at the address in Section 13. If you have a store account, you can also review and update your account details by signing in.

Privacy rights. Depending on where you live, you may have the right to:

  • know or access the personal information we hold about you;
  • correct it;
  • delete it;
  • receive a portable copy;
  • opt out of the "sale" or "sharing" of personal information and targeted advertising (see Section 7); and
  • appeal our decision on your request.

To make a request, email us at the address in Section 13. We may need to verify your identity before acting on a request, and an authorized agent may make a request on your behalf with proof of authorization. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision with "Appeal" in the subject line.

9. Data retention

We keep personal information only as long as we need it for the purposes in this policy, including to fulfill orders, keep business, tax, and accounting records, resolve disputes, and enforce our agreements. If you unsubscribe from marketing emails, we keep a record of your email address and unsubscribe request so that we do not email you again.

10. Data security

We use reasonable administrative, technical, and physical safeguards to protect personal information, and our checkout is encrypted. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

11. Children

Our website and products are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children under 13. Products intended for use with alcohol, such as our Alcohol Infusion Kit, are intended only for adults of legal drinking age (21+ in the United States). If you believe a child has given us personal information, please email us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on this page and change the "Last updated" date at the top. If we make material changes, we will also post a notice on our website, and where appropriate, notify you by email before the changes take effect.

13. Contact us

If you have questions about this Privacy Policy, or want to exercise any of the choices or rights described above, please email us at:

support@kitsybox.com

Please include "Privacy" in the subject line.

Kitsy Box is a brand of Eshopo LLC.