Privacy Policy

Last Updated: June 15, 2026

This Privacy Policy explains how Ervin Innovations LLC d/b/a StopBox USA (“StopBox,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit stopboxusa.com or any related website, application, or service that links to this Policy (collectively, the “Services”), or when you otherwise interact with us. It also describes the rights and choices available to residents of California and other U.S. states. By using the Services, you acknowledge the practices described in this Policy.

1. Personal Information We Collect

We collect the following categories of personal information, as those categories are defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

Category	Examples	Collected
Identifiers	Name, postal address, email address, telephone number, IP address, device identifiers, online identifiers, account credentials	Yes
Customer records	Billing and shipping information, payment information processed by our payment providers, purchase history	Yes
Commercial information	Products purchased or considered, cart activity, transaction records	Yes
Internet or network activity	Browsing and search activity on the Services, interactions with pages and advertisements, referring URLs	Yes
Geolocation data	General location derived from IP address	Yes
Commercial or electronic communications	Customer service messages, emails, SMS, and chat interactions	Yes
Inferences	Preferences and characteristics derived from the above to personalize and measure marketing	Yes
Sensitive personal information	Account login credentials. We do not use or disclose this for purposes that would require offering a right to limit.	Limited

We do not intentionally collect biometric information or precise geolocation data. We do not knowingly collect personal information from children. See Section 17.

We do not knowingly collect or process consumer health data as defined under applicable law, including the Washington My Health My Data Act. If we begin to collect such information, we will update this Policy and provide any required disclosures.

2. Sources of Personal Information

We collect personal information from the following sources:

• Directly from you, when you create an account, place an order, sign up for marketing, contact us, or otherwise interact with the Services.
• Automatically, through cookies, pixels, software development kits, and similar technologies as you use the Services. See Section 5.
• From third parties, including our e-commerce platform, payment processors, shipping carriers, analytics providers, and advertising partners.

3. How We Use Personal Information

We use personal information for the following business and commercial purposes:

• To provide, operate, and fulfill orders placed through the Services, including processing payments and arranging shipment.
• To operate, maintain, secure, and improve the Services.
• To communicate with you about your account, orders, and requests, and to provide customer support.
• To send marketing and promotional communications by email and SMS, where permitted, and to manage your preferences.
• To deliver, personalize, and measure advertising on the Services and on third-party platforms, including cross-context behavioral advertising.
• To conduct analytics and understand how visitors use the Services.
• To detect, investigate, and prevent fraud, security incidents, and other unlawful or prohibited activity.
• To comply with legal obligations and to establish, exercise, or defend legal claims.

4. How We Disclose Personal Information

We disclose personal information to the categories of recipients below. Within each category we have identified representative third parties. This list is illustrative and not necessarily exhaustive, and the specific providers we use may change over time.

Service providers and processors

Companies that process personal information on our behalf and under contract, for the purposes described above:

• E-commerce platform: Shopify
• Payment processing: Shopify Payments, Shop Pay, PayPal
• Order fulfillment and shipping: ShipStation and shipping carriers
• Site functionality, personalization, and reviews: providers that support on-site features, personalization, and customer reviews

Analytics providers

Companies that help us understand and measure use of the Services:

• Google Analytics, Microsoft Clarity, and similar analytics and attribution providers

Advertising partners

Companies to whom we make personal information available in connection with advertising, including cross-context behavioral advertising. As described in Section 6, this may be considered a “sale” or “sharing” under state privacy laws:

• Meta Platforms (Facebook and Instagram), Google (Google Ads), TikTok, X Corp. (Twitter), and similar advertising and measurement partners we may engage from time to time

Marketing communications providers

• Klaviyo (email) and Postscript (SMS)

Legal, safety, and corporate recipients

• To comply with applicable law, legal process, subpoena, or government request.
• To protect the rights, property, or safety of StopBox, our customers, or others, and to enforce our terms.
• To a successor or acquirer in connection with a merger, acquisition, financing, reorganization, or sale of assets.

5. Cookies and Tracking Technologies

We and our partners use cookies, pixels, web beacons, software development kits, and similar technologies to operate the Services, analyze usage, deliver and measure advertising, and personalize your experience. We categorize these technologies as follows:

• Strictly necessary: Required for the Services to function, including cart, checkout, security, and consent-preference technologies.
• Analytics: Used to understand how visitors interact with the Services, including technologies provided by Google Analytics and Microsoft Clarity.
• Advertising: Used to deliver and measure advertising on the Services and on third-party platforms, including technologies provided by Meta, Google, TikTok, and X.
• Functional: Used to enable enhanced features and personalization.

Where required by law, we display a consent banner that lets you accept or decline non-essential cookies before they are set, and you can change your choices at any time through the “Your Privacy Choices” link or your browser settings. Declining certain technologies may affect the functionality of the Services.

6. Targeted Advertising, “Sale,” and “Sharing”

We make certain personal information, such as identifiers and internet or network activity, available to advertising partners so that we can deliver and measure advertising across websites and platforms. Under the CCPA and similar state laws, this activity may constitute a “sale” or “sharing” of personal information, even though we do not exchange personal information for money. You have the right to opt out of this activity, as described in Sections 9 through 12. We do not knowingly sell or share the personal information of consumers under 16 years of age.

7. SMS and Text Message Communications

If you enroll in our text message program, your participation is also governed by our SMS Terms and Privacy. Consent to receive marketing text messages is not a condition of any purchase. Message and data rates may apply, message frequency varies, and you may opt out at any time by replying STOP or get help by replying HELP. For full details, including how we handle information collected through the program, see our SMS Terms and Privacy.

8. Automated Decision-Making

We do not use personal information to engage in automated decision-making that produces legal or similarly significant effects concerning you without human involvement. If this practice changes, we will update this Policy and provide any disclosures required by law.

9. Your California Privacy Rights

If you are a California resident, you have the following rights under the CCPA, subject to certain exceptions:

1. Right to know. You may request the categories and specific pieces of personal information we have collected, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we disclose it.
2. Right to delete. You may request that we delete personal information we collected from you.
3. Right to correct. You may request that we correct inaccurate personal information we maintain about you.
4. Right to opt out of sale or sharing. You may opt out of the sale or sharing of your personal information, including for cross-context behavioral advertising.
5. Right to limit use of sensitive personal information. To the extent we use sensitive personal information for purposes that confer this right, you may direct us to limit that use. As described in Section 1, we do not currently use sensitive personal information for such purposes.
6. Right to non-discrimination. We will not discriminate against you for exercising any of your privacy rights.

10. How to Exercise Your Rights

You may submit a request to exercise your rights in any of the following ways:

• Opt out of sale or sharing: Use the “Your Privacy Choices” or “Do Not Sell or Share My Personal Information” link in the website footer, or decline non-essential cookies through our consent banner.
• Know, delete, or correct: Email support@stopboxusa.com with the nature of your request and information sufficient for us to verify your identity. You may also call us at (509) 919-4600.

We will respond to verifiable consumer requests within the timeframes required by law, generally within 45 days. We may require information to verify your identity before fulfilling a request. You may designate an authorized agent to submit a request on your behalf by providing the agent with written, signed authorization; we may require you to verify your own identity directly.

11. Other U.S. State Privacy Rights and Right to Appeal

Residents of certain other U.S. states, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Tennessee, Minnesota, Nebraska, Maryland, New Jersey, New Hampshire, Kentucky, Indiana, and Rhode Island, may have rights similar to those described above, including the right to access, correct, and delete personal information, and to opt out of targeted advertising and the sale of personal information, subject to the requirements of their state laws. To exercise these rights, use the methods described in Section 10.

If we decline to take action on your request, you may appeal that decision by replying to our response or emailing support@stopboxusa.com with the subject line “Privacy Appeal.” We will respond to your appeal within the time required by your state’s law. If your appeal is denied, you may contact your state attorney general.

12. Opt-Out Preference Signals

Where required by law, we recognize and process the Global Privacy Control (GPC) and other browser-based opt-out preference signals as a valid request to opt out of the sale or sharing of personal information for the browser or device from which the signal is sent. Because such signals are tied to a browser or device rather than to an individual, they may not be associated with information about you that we hold in connection with your account.

13. Financial Incentives

From time to time we may offer programs, discounts, or other incentives, such as a discount in exchange for signing up for email or SMS marketing. Where these programs are considered financial incentives under applicable law, participation is optional, you may withdraw at any time, and any difference in price or service offered is reasonably related to the value of the personal information involved. Details are provided at the point of sign-up.

14. International Data Transfers

We are based in the United States, and we process and store personal information in the United States. Some of our service providers may process personal information in other countries. Where information is transferred across borders, we take steps designed to ensure it remains protected consistent with this Policy and applicable law. By using the Services, you acknowledge that your information may be processed in jurisdictions whose privacy laws differ from those of your state or country.

15. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including to provide the Services, comply with our legal obligations (such as tax and consumer-protection recordkeeping, for which order records are generally retained for seven years), resolve disputes, and enforce our agreements. Marketing information is retained until you unsubscribe or request deletion, subject to legal retention requirements.

16. Data Security

We maintain administrative, technical, and physical safeguards designed to protect personal information appropriate to its sensitivity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security incident affecting your personal information occurs, we will provide notifications as required by applicable law.

17. Children’s Privacy

The Services are intended for a general audience and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us at support@stopboxusa.com and we will take appropriate steps to delete it.

18. Third-Party Links

The Services may contain links to third-party websites and services that we do not operate or control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies.

19. Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date at the top indicates when it was last revised. If we make material changes, we will provide notice through the Services or by other means as required by law.

20. Contact Us

If you have questions about this Policy or our privacy practices, contact us:

Ervin Innovations LLC d/b/a StopBox USA
11002 E Montgomery Dr STE #200, Spokane Valley, WA 99206
Email: support@stopboxusa.com
Phone: (509) 919-4600