BOYZSHOP

California Privacy Rights

Notice of Collection -- California Residents

Last Updated: March 18, 2026

Operated by XR, LLC d/b/a BoyZShop | 18047 Beach Blvd #220, Huntington Beach, CA 92649

CALIFORNIA USERS: YOUR CALIFORNIA PRIVACY RIGHTS

California Shine the Light Law

California Civil Code Section 1798.83, known as the Shine the Light Law, requires us to disclose that California customers may request information concerning whether a business has disclosed personal data (as defined in the Shine the Light law) to any third parties for their direct marketing purposes. We do not disclose your personal data (as defined in the Shine the Light law) to non-affiliated companies for their direct marketing purposes without your consent.

California Consumer Privacy Act (CCPA)

Under the California Consumer Privacy Act ("CCPA"), California Civil Code sections 1798.100 through 1798.199, California residents have specific rights related to the information we collect or maintain about you. This California-specific portion of the Privacy Policy was last updated on March 18, 2026. Any changes will be effective immediately upon posting.

1. Notice of Collection

We may collect information about consumers in the following categories of personal data:

Identifiers

Such as real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name, Social Security Number, driver's license number, passport number, or other similar identifiers.

Sources: Directly from consumers when they interact with our website, create an account, place an order, or contact us. Also from third-party suppliers.

Business Purposes: To create consumer accounts; complete transactions; market our products; respond to customer inquiries; prevent fraud.

Third Parties: Shipping companies, fraud prevention services, email marketing services.

Financial Information

Such as credit card or other payment information.

Sources: Directly from consumers when they make an account or place an order.

Business Purposes: To create accounts or complete transactions; fraud prevention.

Third Parties: Credit card processing businesses.

Commercial Information

Including records of products purchased, obtained, or considered, or other purchasing histories or tendencies.

Sources: Consumer interactions with our website including purchases, page views, searches, and cart additions. Also from third-party suppliers.

Business Purposes: To gain insight into consumer characteristics and behaviors; to market our products; to complete transactions; for customer service.

Third Parties: Third-party email marketing and advertisement services.

Internet or Electronic Network Activity Information

Including browsing history, search history, and information regarding a consumer's interaction with a website, application, or advertisement.

Sources: Consumer interactions with our website including purchases, page views, searches, and cart additions. Also from third-party suppliers.

Business Purposes: To gain insight into consumer characteristics and behaviors; to market our products.

Third Parties: Third-party email marketing and advertisement services.

Mobile Phone Number and SMS Consent Data

Including your mobile phone number, SMS opt-in consent record, opt-in timestamp and source, consent disclosure language presented at enrollment, cart session data, and opt-out records.

Sources: Directly from consumers when they opt in to our SMS marketing program via checkout, web forms, or keyword enrollment.

Business Purposes: To send SMS marketing messages, cart reminder messages, and service notifications you have consented to receive; to maintain compliance records required under TCPA, CTIA guidelines, and applicable carrier requirements.

Third Parties: Our SMS marketing platform provider, solely for message delivery. Your SMS opt-in data and consent status are not shared with or sold to any third party for their own marketing purposes.

Audio, Electronic, Visual, Thermal, Olfactory, or Similar Information

Sources: Collected when consumers make customer service inquiries.

Business Purposes: To answer customer service inquiries and improve customer service.

Third Parties: We do not share this information with any third parties.

Geolocation Data

Sources: Collected when a consumer makes a purchase.

Business Purposes: To complete consumer transactions, including currency selection and fraud prevention.

Third Parties: Third-party fraud prevention services.

Professional or Employment Related Information

Sources: Collected when a consumer provides a business address when creating an account or placing an order.

Business Purposes: To complete a transaction.

Third Parties: Shipping companies.

Inferences Drawn to Create a Consumer Profile

Reflecting the consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes.

Sources: Consumer interactions with our website including purchases, page views, searches, and cart additions.

Business Purposes: To gain insight into consumer characteristics and behaviors; to market our products.

Third Parties: Third-party email marketing and advertisement services.

Additional Uses of Information

We may also use any of the information we collect from consumers in order to:

  • Provide customer service and technical assistance and respond to questions related to our products and services
  • Conduct internal research and development and make business decisions about current and future product and service offerings
  • Debug and repair errors in our products and services and maintain and improve their quality and safety
  • Cooperate with law enforcement and protect the rights, interests, safety, or property of us or our customers, service providers, and other third parties
  • Comply with and enforce applicable legal and regulatory obligations, and respond to governmental requests
  • Enforce our policies, terms and conditions, or other agreements
  • Defend against or pursue claims, disputes, or litigation, in court or elsewhere

We may disclose or transfer personal data about consumers as part of a corporate business transaction, such as a merger or acquisition, joint venture, corporate reorganization, financing, or sale of company assets, or in the unlikely event of insolvency, bankruptcy, or receivership, in which case the personal data could be transferred to third parties as a business asset in the transaction, subject to the terms of this privacy policy.

2. Your Right to Know About Personal Information Collected or Disclosed

a. Your Right to Request Information. You have the right to request that we disclose to you the categories and specific pieces of personal information we have collected about you. You may make a request for this information twice within a 12-month period.

b. Instructions for Requesting Information. To submit a request, email [email protected], call us toll-free at 1-866-363-0688, or write to us at: XR, LLC d/b/a BoyZShop, CCPA, 18047 Beach Blvd #220, Huntington Beach, CA 92648. Please include your name, email address, and a description of your request so we can locate your records and respond appropriately.

c. Verification Process. To process requests about categories of information, we require at least two pieces of personal information that match our records. For requests about specific pieces of information, we require three matching pieces plus a signed and notarized declaration under penalty of perjury.

3. Disclosure or Sale of Personal Information

We have not sold any personal information to third parties for a business or commercial purpose in the preceding 12 months. We do not knowingly collect nor sell the personal information of minors under 18 years of age.

4. Your Right to Request Deletion of Personal Information

a. Your Right to Delete. You have the right to request that we delete any personal information about you which we have collected or maintain. We are not required to comply with a deletion request in certain circumstances, including where the information is necessary to complete a transaction, detect security incidents, debug errors, comply with legal obligations, or for other lawful internal uses.

b. Instructions for Requesting Deletion. To submit a deletion request, email [email protected], call us toll-free at 1-866-363-0688, or write to us at: XR, LLC d/b/a BoyZShop, CCPA, 18047 Beach Blvd #220, Huntington Beach, CA 92648. Please specify what information you are requesting be deleted, or state that you are requesting deletion of all information we have collected or maintain about you.

5. Right to Opt-Out of the Sale of Personal Information

We do not provide a mechanism for opting-out of the sale of your personal information because we do not, and will not, sell personal information we collect. If we decide to sell personal information in the future, we will provide a notice of right to opt-out in this privacy policy.

6. Right to Non-Discrimination

We will not discriminate against you because you have exercised any of your consumer privacy rights, including by denying goods or services, charging different prices, providing a different level of quality, or suggesting that you will receive a different price or quality.

7. Authorized Agent

You may designate an authorized agent to make a request under the CCPA by providing written permission or power of attorney pursuant to Probate Code sections 4000 to 4465. We will require proof of authorization and may require identity verification.

8. Notice of Financial Incentive

We do not currently offer financial incentives or price or service differences online to consumers in exchange for the retention and/or sale of their information.

9. Exceptions

We may aggregate and/or de-identify your information so that the information no longer relates to you individually. Our use and disclosure of such aggregated or de-identified information is not subject to this Privacy Policy, and may be disclosed to others without limitation and for any purpose.

10. Consumers with Disabilities

California consumers with disabilities may contact us by phone at 1-866-363-0688 or email us at [email protected] for information on how to access this notice in an alternative format.

11. Contact Us

For any questions or concerns about any aspect of this Privacy Policy or our privacy practices:

BoyZShop / XR, LLC d/b/a BoyZShop

CCPA

18047 Beach Blvd #220

Huntington Beach, CA 92648

Email: [email protected]

Phone: 1-866-363-0688

BoyZShop | XR, LLC d/b/a BoyZShop

18047 Beach Blvd #220, Huntington Beach, CA 92649

[email protected] | 1-866-363-0676