Privacy Policy

Last updated: November 4, 2026

Florida Deals, Inc. operates the Cookie Box® website. In this policy, “Cookie Box,” “we,” “us,” and “our” refer to Florida Deals, Inc. This policy explains how we handle personal information when you browse our website, use our learning resources, subscribe to our emails, or contact us.

Our website currently provides product information, crochet tutorials, and support. We do not currently accept orders or payments through this website. If you follow a link to a separate retailer or marketplace, information you provide there is subject to that service’s privacy policy. Information you subsequently provide to us for product support is covered by this policy.

Information we collect

Depending on how you interact with us, we collect:

  • Contact and support information: your name, email address, message, and any other information you choose to provide through a form or correspondence. A support request may include information about a kit or a purchase made elsewhere.
  • Email subscription information: your email address, any name or preferences you provide, and records of your subscription, consent, and unsubscribe choices.
  • Website usage and device information: pages and resources viewed, interactions with the website, referring pages, browser and device details, cookie identifiers, and technical information processed by our website and analytics providers. Our hosting provider may process your IP address to deliver and secure the website.
  • Email engagement information: where tracking is enabled and permitted, information about email delivery, opens, and link clicks, and related website activity.

Please do not send payment card details, passwords, or other sensitive information through our contact forms.

How we use information

We use personal information to operate and secure the website; provide tutorials and support; respond to questions; manage subscriptions and privacy choices; send requested news and promotional emails; understand how visitors use our content; improve our website and communications; and meet legal obligations or establish, exercise, or defend legal claims.

Subscribing to marketing is optional. You can unsubscribe using the link in our marketing emails or by contacting us. Unsubscribing does not prevent us from replying to a support request or sending another necessary, non-marketing response.

Services we use

Shopify hosts our website and processes information needed to deliver, maintain, and protect it. Shopify’s own processing is explained in its Consumer Privacy Policy. You can also visit the Shopify privacy portal to learn about choices relating to information Shopify processes for its own purposes.

We have enabled Shopify Network Intelligence. Shopify uses information about your interactions with our website together with information from interactions with other merchants and Shopify to provide Enhanced Services, including security, improvements, personalization, and advertising. Information is shared with Shopify and other service providers, which may process it outside your country. Shopify is responsible for this enhanced processing and for handling requests about its own use of your information. The Shopify privacy policy and portal linked above explain that processing and how to withdraw consent, object, or exercise other applicable rights.

Klaviyo helps us manage email subscriptions and send communications. It processes subscriber information, subscription preferences, and, where enabled and permitted, email engagement and related website activity on our behalf.

Google Analytics helps us understand website traffic and how visitors interact with our pages and resources. It processes usage information and device or browser identifiers, depending on our configuration and your privacy choices. Learn more about how Google uses information from sites and apps that use its services.

Cookies and your choices

Our website and service providers, including Shopify, use cookies and similar technologies for website functionality, preferences, analytics, personalization, and advertising. Where enabled, Klaviyo tracking can also connect email engagement with website activity. Where applicable law requires consent for non-essential tracking or advertising based on activity across our website, other merchants, and Shopify, those activities require your consent, which you may withdraw.

You can manage available choices through the website’s privacy controls and your browser settings. Blocking cookies may affect some website features. You can also use Google’s Analytics opt-out browser add-on, where supported.

Our Your Privacy Choices page provides available controls for opting out of the sale or sharing of personal information or its use for targeted advertising. Availability and scope can depend on your location and the tracking features enabled. Where applicable, a recognized Global Privacy Control signal can also communicate an opt-out choice. Cookie-based choices may apply to the browser or device used; you may need to repeat them on another browser or device or after clearing cookies.

An opt-out recorded through Shopify’s privacy controls prevents use of the relevant activity by Shopify Network Intelligence for advertising. A refusal of non-essential tracking through properly integrated consent controls also restricts Shopify Network Intelligence’s use of the associated device data for non-essential purposes. To request help with your choices, contact help@cookiebox.store.

When information is shared

We disclose information to providers that help us host and secure the website, manage communications, provide support, and analyze website use. We may also disclose information when you ask us to, when legally required, to protect rights or safety, or in connection with a business reorganization or transfer, subject to applicable law.

The legal meaning of “sale,” “sharing,” and “targeted advertising” can include certain disclosures through tracking technologies even when no money changes hands. Available choices are described above. A lack of checkout or direct sales on the website does not mean that no personal information is collected.

Legal bases for visitors in the EEA and UK

Where the GDPR or UK GDPR applies, our legal bases depend on the activity. They include consent for marketing or tracking where required; our legitimate interests in operating and securing the website, responding to inquiries, and improving our services where those interests are not overridden by your rights; taking steps you request in connection with a contract or performing applicable contractual obligations; and compliance with legal obligations. You may withdraw consent at any time without affecting processing that took place lawfully before withdrawal.

Retention, security, and international processing

We retain personal information for as long as reasonably needed for the purposes described in this policy, taking into account the nature of the information, our relationship with you, legal requirements, and the need to resolve disputes. We may retain limited suppression records to respect an unsubscribe request.

We use reasonable safeguards to protect information, but no website, transmission, or storage system can be guaranteed completely secure.

We and our providers may process information in the United States and other countries. Where legally required, international transfers must be supported by an applicable adequacy decision or appropriate safeguards, such as approved standard contractual clauses. Contact us for information about safeguards relevant to your data.

Your privacy rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or receive a portable copy of your information; object to or restrict certain processing; withdraw consent; and opt out of certain sale, sharing, or targeted advertising activities. Some rights are subject to exceptions.

To make a request, email help@cookiebox.store. We may need to verify your identity and, where applicable, an authorized agent’s authority. We will respond within the time required by applicable law and will not discriminate against you for exercising an applicable privacy right.

If you wish to appeal a response, contact us at the same address. You may also complain to your local privacy regulator. Visitors in the EEA can find their authority in the European Data Protection Board directory.

Children’s privacy

Cookie Box® kits and learning resources are intended for adults and teenagers aged 15 and over. Our website is not directed to children under 13, and we do not knowingly collect their personal information.

Where applicable law requires parental consent to collect or use a younger visitor’s personal information, we must obtain that consent before the relevant processing. This may also apply to teenagers over 13, depending on their location and how their information is used.

If you are a parent or guardian and believe your child has provided personal information without legally required consent, contact help@cookiebox.store. We will review the matter and delete information collected without the required consent, unless the law requires us to retain it.

External websites

Links to retailers, social networks, video services, and other external websites lead to services with their own privacy practices. This policy covers our handling of information; it does not replace the privacy notices of those services.

Updates and contact

We may update this policy as our website or practices change. We will update the date above and provide any additional notice required by law.

For questions or privacy requests, contact Florida Deals, Inc. at help@cookiebox.store. Where applicable data protection law uses that term, Florida Deals, Inc. is the controller for information we process for our own purposes under this policy. Shopify is responsible for its own processing as explained above.

Mailing address: Florida Deals, Inc., 12240 NW 30th Pl, Sunrise, Florida 33323, United States.