Privacy policy

Privacy Policy

Last updated: 29/09/2026

Overview

FemboyBox ("we", "us", or "our") is an online retailer operating from Sydney, Australia. We're committed to protecting your privacy, and we understand that many of our customers value discretion.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our store, make a purchase, or engage with us.

We do not sell your personal information to third parties for their own marketing purposes.

Contact: contact@femboybox.com

Discretion and your privacy

We know privacy matters to our customers, so a few things worth stating plainly:

• All orders ship in plain, unmarked packaging with no branding or product details on the outside
• Your billing statement shows FB2026, not FemboyBox
• We never share customer details with anyone except the service providers needed to fulfil your order
• We don't publish, post, or share customer names, photos, or purchase information without explicit permission

Information we collect

Personal data

When you make a purchase or attempt to make a purchase, we collect your name, billing address, shipping address, payment information, email address, and phone number.

Some countries require additional information for customs clearance, such as a tax identification number. Where this applies we collect it solely to complete delivery and pass it to the relevant carrier and customs authority.

Device information

When you visit our site, we automatically collect information about your device including browser type, IP address, time zone, and cookie data. As you browse, we also collect information about the pages and products you view and how you interact with the site.

We collect this using:

• Cookies — data files placed on your device, often including an anonymous unique identifier. To learn more or disable cookies, visit allaboutcookies.org
• Log files — records of actions on the site including IP address, browser type, referring pages, and timestamps
• Web beacons, tags, and pixels — electronic files used to record how you browse the site

Cookie choices

If you're visiting from the European Economic Area or the UK, you'll be shown a cookie banner allowing you to accept or reject non-essential cookies. You can change your preferences at any time through that banner. Essential cookies needed for the site and checkout to function can't be disabled.

How we use your information

To fulfil orders

• Process your orders and transactions
• Manage payments
• Arrange shipping, and handle returns and exchanges

To improve our services

• Understand and analyse how you use our site
• Develop new products, services, and features

To communicate with you

• Send order updates and transactional notifications
• Send marketing emails and newsletters you've opted in to receive

To protect our store

• Screen orders for potential risk or fraud
• Comply with legal obligations

Legal basis for processing

Where the GDPR applies, we process your personal data on the following bases:

• Performance of a contract — processing your order, arranging delivery, handling returns
• Consent — marketing emails and SMS, and non-essential cookies
• Legitimate interests — fraud prevention, site analytics, and improving our products and service
• Legal obligation — tax, accounting, and customs requirements

SMS marketing

If you opt in to receive SMS marketing from us, we may use your phone number to send promotional offers, order notifications, and other marketing communications. Message frequency may vary. Message and data rates may apply. Consent is not a condition of purchase.

We use third-party services including Shopify and Klaviyo to deliver SMS. These providers process your phone number solely to deliver messages on our behalf. Your phone number will not be shared with third parties for their own marketing purposes.

We retain records of your SMS marketing consent including timestamp, opt-in method, and phone number, to comply with consumer protection regulations.

Opting out: reply STOP, UNSUBSCRIBE, or CANCEL to any message at any time. You may still receive transactional messages about your orders after opting out.

Sharing your information

We share your personal information only with service providers who help us operate our store and fulfil your order. These include:

We may also disclose your information where required by law, or to protect our rights, property, or safety.

International data transfers

We operate from Australia and use service providers based outside the European Economic Area, including in the United States and Canada. Your personal data may therefore be transferred to and processed in these countries.

Where we transfer personal data of EEA or UK residents outside those regions, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and equivalent UK provisions.

Data retention

We keep your information only as long as we need it:

• Order and transaction records — 7 years, to meet Australian tax and accounting requirements
• Marketing contact details — until you unsubscribe or request deletion
• Analytics data — up to 26 months
• Customer support correspondence — 2 years from your last contact with us
• Identity documents submitted for order verification — deleted immediately once verification is complete, and never retained

Some information may be retained longer where required by law or to resolve a dispute.

Your rights

Access and correction — you can request access to, or correction of, your personal information at any time.

Erasure — you can ask us to delete your personal data, subject to any legal obligations requiring us to retain certain records, such as tax records.

Data portability — you can request a copy of your personal data in a portable format.

Opt-out — you can opt out of marketing at any time using the unsubscribe link in any email, by replying STOP to any SMS, or by contacting us.

Objection and restriction — where the GDPR applies, you can object to or ask us to restrict certain processing.

Withdraw consent — where we rely on consent, you can withdraw it at any time. This doesn't affect processing carried out before you withdrew it.

To exercise any of these rights, email contact@femboybox.com. We'll respond within 30 days.

Australian privacy

FemboyBox operates in accordance with the Australian Privacy Act 1988 and the Australian Privacy Principles.

If you're an Australian resident and believe your privacy rights have been breached, contact us first at contact@femboybox.com. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

European and UK residents

If you're located in the European Economic Area or the United Kingdom, you have additional rights under the GDPR and UK GDPR, including the rights listed above.

To exercise these rights, email contact@femboybox.com. You also have the right to lodge a complaint with your local data protection authority.

Security

We take reasonable technical and organisational measures to protect your information from loss, theft, misuse, unauthorised access, disclosure, alteration, and destruction. Payments are processed over encrypted connections, and we don't store full card details on our systems.

We will never ask for your card details, bank details, or passwords by email or direct message. If you receive a message claiming to be from us asking for these, don't respond, and let us know at contact@femboybox.com.

Children's privacy

Our store is intended for adults. We don't knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us at contact@femboybox.com and we'll delete it.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. Updates will be posted on this page with a revised "last updated" date.

Contact

Email: contact@femboybox.com