Privacy policy
This Privacy Policy describes how heatsbox.us and mybabyboo.us (each, the “Site”, and together “we”) collect, use, and disclose your Personal Information when you visit or make a purchase from either Site. Both Sites are operated by FAITRON US DISTRIBUTION, CORP., under its brands HeatsBox and BabyBoo.
Contact
After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail — for HeatsBox matters at info@heatsbox.us, for BabyBoo matters at info@mybabyboo.us — or by mail using the details provided below:
FAITRON US DISTRIBUTION, CORP., 7345 W Sand Lake Rd, Ste 210, Orlando, FL 32819, United States
Person responsible for the protection of personal information (Privacy Officer): the Privacy Officer of FAITRON US DISTRIBUTION, CORP., reachable at info@heatsbox.us or info@mybabyboo.us, or at the postal address above.
Collecting Personal Information
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual (including the information below) as “Personal Information”. See the list below for more information about what Personal Information we collect and why.
This section serves as our Notice at Collection for California residents: it describes the categories of Personal Information we collect, the purposes for which each category is collected, and the third parties to whom each category is disclosed.
Device information
Purpose of collection: to load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.
Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.
Disclosure for a business purpose: shared with our processors Shopify, Google Analytics, and our advertising partners as described under “Behavioral Advertising” below.
Personal Information collected: version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.
Order information
Purpose of collection: to provide products or services to you to fulfill our contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you, screen our orders for potential risk or fraud, and when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.
Source of collection: collected from you.
Disclosure for a business purpose: shared with our processors Shopify, our payment providers, and the fulfillment provider and shipping carriers who prepare and deliver your order.
Personal Information collected: name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.
Customer support information
Purpose of collection: to provide customer support and to respond to your inquiries.
Source of collection: collected from you.
Disclosure for a business purpose: shared with our processor Shopify and the communications providers we use to respond to you.
Personal Information collected: name, email address, phone number, order details, and the contents of any messages or attachments you send us.
Marketing information
Purpose of collection: to send you our email newsletter and other marketing communications where you have asked to receive them, and to measure how they perform.
Source of collection: collected from you when you subscribe or when you opt in during checkout.
Disclosure for a business purpose: shared with our processors Shopify and Klaviyo.
Personal Information collected: name, email address, and your engagement with our emails (opens and clicks).
Sharing Personal Information
We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above. For example:
We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
We use Klaviyo to send our email newsletter and service messages. You can read Klaviyo’s privacy policy here: https://www.klaviyo.com/privacy.
We use third-party payment providers to process your payment, and a third-party fulfillment provider and shipping carriers to pick, pack and deliver your order. They receive only the information they need to perform that service.
We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights. We may also share your Personal Information in connection with a merger, acquisition or sale of all or part of our business.
Behavioral Advertising
As described above, we use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/. You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to, depending on your location).
We use Shopify Audiences to help us show ads on other websites with our advertising partners to buyers who made purchases with other Shopify merchants and who may also be interested in what we have to offer. We also share information about your use of the Site, your purchases, and the email address associated with your purchases with Shopify Audiences, through which other Shopify merchants may make offers you may be interested in.
For more information about how targeted advertising works, you can visit the Network Advertising Initiative’s (“NAI”) educational page at https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.
You can opt out of targeted advertising by using the following links:
Meta (Facebook and Instagram) – https://www.facebook.com/adpreferences/ad_settings
Google – https://www.google.com/settings/ads/anonymous
Bing – https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, you can opt out of some of these services by visiting the Digital Advertising Alliance’s opt-out portal at: https://optout.aboutads.info/. If you are in Canada, you can also opt out through the Digital Advertising Alliance of Canada at https://youradchoices.ca/.
Using Personal Information
We use your Personal Information to provide our services to you, which includes: offering products for sale, processing payments, shipping and fulfillment of your order, and keeping you up to date on new products, services, and offers.
Retention
When you place an order through the Site, we retain your Personal Information for as long as we need it to fulfil the order and to meet our tax, accounting, warranty and legal record-keeping obligations — normally seven years from the date of the order. Marketing data is retained until you unsubscribe or ask us to delete it. Website analytics and advertising data are retained for the periods set by the relevant cookie, as listed in the cookie tables below. When a retention period ends, we delete the information or anonymise it. For more information on your deletion rights, please see the ‘Your U.S. Privacy Rights’ and ‘Canadian residents’ sections below.
Data Security
We use appropriate technical and organizational measures to protect your Personal Information, including encryption in transit (TLS) across the Site and at checkout, access controls limiting who on our side can see order and customer data, and the security measures maintained by our processors. We do not store full payment card numbers ourselves; card data is handled by our PCI-compliant payment providers. No method of transmission over the internet or of electronic storage is completely secure, so while we work to protect your Personal Information we cannot guarantee absolute security.
Children’s Privacy
Our Sites are intended for adults. BabyBoo products are marketed to parents and caregivers, not to children, and no part of either Site is directed to children. We do not knowingly collect Personal Information from children under 13, and we do not sell or share the Personal Information of consumers we know to be under 16 years of age. If you believe that a child has provided us with Personal Information, please contact us using the details above and we will delete it.
Sensitive Personal Information
We do not collect or process sensitive Personal Information as defined under U.S. state privacy laws — such as government identifiers, precise geolocation, racial or ethnic origin, religious beliefs, health information, or the contents of your private communications — and we do not use Personal Information for profiling that produces legal or similarly significant effects concerning you.
Automated Decision-Making
We do not use your Personal Information to make decisions about you that produce legal or similarly significant effects through solely automated means (including profiling).
Our processor Shopify uses limited automated decision-making to prevent fraud that does not have a legal or otherwise significant effect on you. Services that include elements of automated decision-making include:
-
Temporary blacklist of IP addresses associated with repeated failed transactions. This blacklist persists for a small number of hours.
-
Temporary blacklist of credit cards associated with blacklisted IP addresses. This blacklist persists for a small number of days.
Your U.S. Privacy Rights
Depending on the U.S. state you live in, you may have some or all of the following rights regarding the Personal Information we hold about you: the right to know and access it, to receive a portable copy of it, to correct it, and to request that it be deleted. You may also have the right to opt out of the “sale” or “sharing” of your Personal Information and of targeted advertising. To exercise any of these rights, please contact us using the contact information above. We will not discriminate against you for exercising your privacy rights. We will respond to your request within 45 days, and we may extend that period once where the law allows, telling you why. Before we act on a request we may need to verify your identity, usually by asking you to confirm details of a recent order.
California residents (CCPA/CPRA)
If you are a resident of California, you have the right to access the Personal Information we hold about you (also known as the ‘Right to Know’), to port it to a new service, and to ask that your Personal Information be corrected, updated, or erased. You also have the right to opt out of the sale or sharing of your Personal Information and to limit the use of certain sensitive Personal Information. If you would like to exercise these rights, please contact us through the contact information above.
If you would like to designate an authorized agent to submit these requests on your behalf, please contact us at the address above.
Other U.S. state privacy rights
If you are a resident of a state with a comprehensive consumer privacy law (for example Virginia, Colorado, Connecticut, Utah, Texas, Oregon, or Montana, among others), you may have the right to confirm whether we process your Personal Information and to access it, to correct inaccuracies, to request deletion, to obtain a portable copy, and to opt out of the sale of your Personal Information, targeted advertising, and certain profiling. Where an appeal process is available, you may also appeal a decision we make about your request. To exercise these rights, please contact us using the details in the ‘Contact’ section above.
Canadian residents (PIPEDA)
If you are located in Canada, we handle your Personal Information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. You have the right to be informed of the existence, use and disclosure of your Personal Information, to access it, and to ask that inaccurate or incomplete information be corrected. We collect, use and disclose your Personal Information only for the purposes described in this policy, and we obtain your consent where the law requires it. You may withdraw your consent to marketing communications at any time.
To exercise these rights, contact our Privacy Officer using the details in the ‘Contact’ section above. If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca.
Cross-border processing: we are a United States company, and the Personal Information of Canadian customers is stored and processed in the United States by us and by our processors. It may therefore be accessible to U.S. courts and to law-enforcement and regulatory authorities under U.S. law.
Quebec residents (Law 25)
If you are a resident of Quebec, in addition to the rights above you have the right to be informed when we collect your Personal Information and for what purposes, to access and correct it, to receive a copy of the computerized Personal Information you provided to us in a structured, commonly used technological format (data portability), and to request that we cease disseminating your Personal Information or de-index a link to it where the law allows. You may also withdraw your consent to a particular use of your Personal Information.
We use cookies and similar technologies for advertising and analytics as described in this policy, and we obtain your consent for non-essential technologies where the law requires it. We do not use your Personal Information to render a decision about you based exclusively on automated processing.
The person in charge of the protection of personal information at FAITRON US DISTRIBUTION, CORP. is our Privacy Officer, who can be reached at info@heatsbox.us or info@mybabyboo.us. If you are not satisfied with our response, you may file a complaint with the Commission d’accès à l’information du Québec at https://www.cai.gouv.qc.ca.
Do Not Sell or Share My Personal Information
We do not sell your Personal Information for money. To the extent our use of advertising and analytics cookies constitutes a “sale” or “sharing” of Personal Information under applicable U.S. state law, you can opt out at any time by emailing us (for HeatsBox: info@heatsbox.us — for BabyBoo: info@mybabyboo.us) or by using the opt-out links in the ‘Behavioral Advertising’ section above. We also honor opt-out preference signals, such as the Global Privacy Control (GPC), where required by law. You can also exercise these choices at any time via the “Your Privacy Choices” link in the footer of our Site.
Cookies
A cookie is a small amount of information that’s downloaded to your computer or device when you visit our Site. We use a number of different cookies, including functional, performance, advertising, and social media or content cookies. Cookies make your browsing experience better by allowing the website to remember your actions and preferences (such as login and region selection). This means you don’t have to re-enter this information each time you return to the site or browse from one page to another. Cookies also provide information on how people use the website, for instance whether it’s their first time visiting or if they are a frequent visitor.
We use the following cookies to optimize your experience on our Site and to provide our services.
[The two Shopify cookie tables from the original document — “Cookies Necessary for the Functioning of the Store” and “Reporting and Analytics Cookies” — are unchanged and are omitted here for readability. Keep them exactly as they are in the Google Doc.]
Managing Cookies
You can control and manage cookies in various ways. Please keep in mind that removing or blocking cookies can negatively impact your user experience and parts of our website may no longer be fully accessible.
Most browsers automatically accept cookies, but you can choose whether or not to accept cookies through your browser controls, often found in your browser’s “Tools” or “Preferences” menu. For more information on how to modify your browser settings or how to block, manage or filter cookies can be found in your browser’s help file or through such sites as: www.allaboutcookies.org.
Additionally, please note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners. To exercise your rights or opt-out of certain uses of your information by these parties, please follow the instructions in the “Behavioral Advertising” section above.
Do Not Track
Please note that because there is no consistent industry understanding of how to respond to “Do Not Track” signals, we do not alter our data collection and usage practices when we detect such a signal from your browser. However, where required by applicable U.S. state law, we honor recognized opt-out preference signals such as the Global Privacy Control (GPC).
Changes
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. Where the changes are material, we will post the updated policy on this page with a new effective date and, where required by law, notify you directly.
Subscription to Our Email Newsletter
When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing any additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter if you have explicitly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email, asking you to confirm by clicking a corresponding link that you wish to receive the newsletter in the future.
By activating the confirmation link, you give us your consent to send you the newsletter. When you subscribe to the newsletter, we store the IP address provided by your Internet Service Provider (ISP) as well as the date and time of the subscription to be able to trace any potential misuse of your email address at a later date. The data we collect during the subscription process will be used solely for promotional purposes through the newsletter. You can unsubscribe from the newsletter at any time via the unsubscribe link provided in the newsletter or by sending a corresponding message to us at the email address in the ‘Contact’ section above. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list. We keep a suppression record of your unsubscribe so that you are not added back to the list.
Every marketing email we send includes a working unsubscribe link and our postal address, and we action unsubscribe requests within 10 business days, as required by the CAN-SPAM Act. Commercial email to recipients in Canada is sent only where we have the consent required by Canada’s Anti-Spam Legislation (CASL), and identifies us and how to contact us.
Notice of Financial Incentive (California residents)
When you subscribe to our email newsletter, we may offer you a discount on your order. Under the California Consumer Privacy Act this is a “financial incentive”, because we offer you something of value in connection with the collection and use of your Personal Information. Participation is entirely voluntary and you can withdraw at any time.
Personal Information collected under the program: your email address, and your first name where you choose to provide it.
How to opt in: subscribe through the signup form on our Site and confirm your subscription by clicking the link in the confirmation email we send you. The discount code is sent to you once your subscription is confirmed.
How to withdraw: unsubscribe at any time using the link at the bottom of any newsletter, or contact us at info@heatsbox.us or info@mybabyboo.us. Withdrawing does not affect a discount you have already redeemed, and we will not discriminate against you for withdrawing.
Good-faith estimate of the value of your Personal Information: we estimate the value of the Personal Information collected under this program to be approximately equal to the value of the discount offered, since the discount is the only consideration we provide for it and we do not sell this information for money. We calculated this estimate using the expected margin contribution of a subscriber over the life of the subscription, measured against the cost of the discount and of operating the newsletter program.
Why the incentive is permitted: the difference in treatment between subscribers and non-subscribers is reasonably related to the value the subscriber’s Personal Information provides to us, calculated as described above.
Newsletter Distribution via Klaviyo
Our email newsletter is distributed via the technical service provider “Klaviyo”, 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided during the newsletter subscription. Klaviyo acts as our service provider and processes this data only on our instructions.
Klaviyo uses this information to send the newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to contact them directly or to pass it on to third parties. You can view Klaviyo’s privacy policy here: https://www.klaviyo.com/privacy.
Complaints
As noted above, if you would like to make a complaint, please contact us by e-mail or by mail using the details provided under “Contact” above.
If you are not satisfied with our response to your complaint, you may also contact the U.S. Federal Trade Commission (https://www.ftc.gov) or the office of your state attorney general. If you are in Canada, see the ‘Canadian residents’ and ‘Quebec residents’ sections above.
Effective Date
This Privacy Policy is effective as of August 23, 2026. Last updated: August 23, 2026.
