This Privacy Notice (“Notice”) describes how FlyBox Services, LLC (“FlyBox,” “we,” or “us”) collects, uses, stores, discloses, and protects your personal data, and the rights and choices you have with respect to your personal data.
“Personal data” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. There is a subcategory of personal data called “sensitive personal data,” which requires elevated protections under certain privacy laws. However, we do not collect sensitive personal data (as defined by California law) in the contexts covered by this Notice.
Personal data does not include publicly-available data, which is information that is lawfully made available from federal, state, or local government records. Personal data also does not include data that is anonymous or de-identified (such as summary statistics or metrics).
Quick Reference
This Notice contains the following sections:
1. Scope
A. This Notice applies to your interactions with FlyBox, including when you:
B. This Notice does not apply to personal data collected from job applicants or employees. If you have questions about those practices, please reach out using the information in the “Contact Us” section.
2. Personal Data We Collect and Why We Collect It
The personal data we collect about you depends on your User type, the context of your interactions with us, the choices you make, Services and Apps you use, and applicable law, as described below.
2.1 Information You Provide Directly to Us
A. Members. We collect the following categories of personal data from you if you are a Member:
B. Account Holders. We collect the following categories of personal data from you if you create an account with us, regardless of whether you become a Member:
C. Visitors. We do not collect personal data directly from you when you browse our Site as a Visitor, unless you choose to contact us via email or an online webform. If you choose to contact us, please do not send us any sensitive personal data (examples of sensitive personal data are race, sexual orientation, and social security number).
2.2 Information We Collect about You from Third Parties
We do not collect personal data about you from third parties except in the limited capacity outlined in the next section.
2.3 Information We Collect about You Automatically
We collect internet or other electronic activity information when you use our Services, including the Site and the Apps, regardless of whether you are a Member, Account Holder or Visitor. For example, we collect your usage data on our Site and our Apps, including your IP address, the model of your computer or mobile device, your internet service provider, browser type, and operating system. We also collect your Site and App interaction data such as referring/exit pages, which links you clicked, which pages you viewed, how long you spent in certain areas of the Site or the App, and access timestamps, using behavior analytics tools such as Intercom and Bloomreach. We use the information described in this section to improve our Site, Apps and Services by understanding how people use them. For more information about how we collect and use your usage data on our Site, please refer to our Cookie Policy.
2.4 AI and Machine Learning
We may utilize information you provide to improve, develop and enhance our artificial intelligence (“AI”) and large language model (“LLM”) capabilities. This allows us to create new services and refine existing ones, such as providing you with personalized offerings based on the inferences we have drawn about you, and to gain a deeper understanding of User needs. Any input data used in our AI and LLM systems will be aggregated and de-identified, ensuring it cannot be traced back to individual Users.
3. Disclosing Your Personal Data
We disclose your personal data as required by law and as part of our business practices, as described below.
3.1 User Activity
As discussed above and in our Cookie Policy, your online activity information may be shared through third-party cookies and similar functionality, subject to the elections you make regarding what we collect.
3.2 Common Carriers
Your contact and shipment information, including content descriptions, may be shared with common carriers for transporting materials between you and us in connection with the Services.
3.3 Third-Party Service Providers
A. We share your personal data with third-party service providers that require access to your information to support our operations and delivery of Services. The third parties that FlyBox shares your personal data with include:
B. We also may use and disclose aggregate information that does not identify or otherwise relate to an individual for any purpose unless we are prohibited from doing so under applicable law.
3.4 Business Transfers
As we continue to develop our business, we may buy, sell, or share assets in connection with, for example, a merger, acquisition, reorganization, sale of assets, or bankruptcy. In such transactions, information about Members, Account Holders and Visitors is often a transferred business asset. In the event that FlyBox itself or substantially all of FlyBox’s assets are acquired, information about Members, Account Holders and Visitors may be one of the transferred assets.
3.5 Legal or Public Authorities
We disclose personal data to legal or public authorities when disclosure is reasonably necessary to:
4. Do Not Sell or Share
We do not sell your personal data to third parties. We share your personal data for targeted advertising purposes to serve you with personalized ads through our use of third-party marketing and analytics tools, such as Google Analytics. To opt out of this sharing, visit the footer of our Site and click the “Do Not Sell or Share My Personal Information” link.
We do not sell or share personal data of minors under 16.
5. Do Not Track and Global Opt-Out Mechanisms
Some web browsers may be configured to send Do Not Track (“DNT”) signals to websites, or Users may use similar mechanisms, to indicate a User’s preference that certain web technologies not be used to track the User’s online activity. Because there is not yet a consensus on how companies should respond to web browser-based DNT mechanisms, we do not respond to web browser-based DNT signals at this time.
You may manage the Cookie Settings that apply to you as a User by visiting the “Do Not Sell or Share My Personal Information” link in the footer of our Site or by visiting our Cookie Policy and clicking the “Cookie Settings” button in the “Your choices” section.
6. Cookies and Other Tracking Technologies
When you visit our Site, we use cookies and similar technologies such as web beacons, alone or in conjunction with cookies, to automatically collect certain technical information from your browser or device. For more information about how we use cookies and to learn how to manage cookies, please see our Cookie Policy.
We also use Google Signals to better understand how Users interact with our Platform across multiple devices. You can manage your Google account activity and settings, including data collected through Google Signals by visiting My Activity, and you can opt out of Google’s use of cookies and device identifiers by visiting Google’s Ads Settings. Data collected through Google Signals may be used for aggregated analytics and personalized advertising. To opt out of sharing data for targeted advertising, please visit the “Do Not Sell or Share My Personal Information” link in the footer of our Site.
7. Transferring Your Personal Data
FlyBox operates its Services the United States. All our servers, including those used to provide the Services, are located in the United States. If you access our Services from outside the United States, such as Canada, we will need to transfer your personal data to the United States to provide you with our Services.
8. Retaining Your Personal Data
We retain your personal data for the necessary period to fulfill our legal and contractual obligations; support business operations; develop our Site and the Services; resolve disputes; and enforce our rights.
The criteria we use to determine the retention period include the following:
9. Protecting Your Personal Data
We are very concerned with safeguarding your personal data. We employ administrative, physical, and electronic measures designed to protect your information from unauthorized access. For example, we use commercially reasonable security measures such as encryption, firewalls, and secure socket layers/transport layer security (SSL/TLS) to protect information.
Please note that no security system is impenetrable. Accordingly, we do not guarantee the security of our databases, nor that information you supply won't be intercepted while being transmitted to us over the Internet or other network. Any information you transmit to us, you do at your own risk. We will make any legally required disclosures of any breach of the security, confidentiality, or integrity of your unencrypted electronically stored “personal data” (as defined in applicable state statutes on security breach notification) to you via email or conspicuous posting through the Services in the most expedient time possible and without unreasonable delay, as consistent with (i) the legitimate needs of law enforcement or (ii) any measures necessary to determine the scope of the breach and restore the reasonable integrity of the data system.
10. Your Privacy Rights and Choices
You have a variety of privacy rights and choices when it comes to how we collect, use, and disclose your personal data, as described below.
10.1 Your Privacy Rights
10.2 Your Choice to Unsubscribe
10.3 Exercising Your Rights
You may exercise your privacy rights by using our Privacy Webform or contacting us using one of the methods below in the Contact Us section. You may also opt out of the sharing of your personal data for targeted advertising by visiting the footer of our Site and clicking on the “Do Not Sell or Share My Personal Information” link.
To help protect your privacy and maintain security, we take steps to verify your identity before responding to requests. To verify your identity to make the request and confirm that the personal data relates to you, we send you an automated message via our privacy management tool, OneTrust, to verify your email address. We also check our systems to ensure the information you provide matches our database to determine whether you have a relationship with FlyBox.
Depending on where you live, you may have an authorized agent submit an access request on your behalf. If you wish to use an authorized agent, you must provide the party with written permission signed by you. We may deny a request from an authorized agent if the agent cannot provide your signed permission demonstrating that you have authorized them to act on your behalf.
11. Complaints
If you have unresolved concerns, you may also address any grievance directly with the relevant supervisory authority:
12. Minimum Age Requirements to Use Our Services
FlyBox does not direct its services to, knowingly collect, or disclose the personal data of minors under 16. If we learn a minor under 16 has provided us with personal data, we will take immediate steps to delete such information.
13. Changes to this Privacy Notice
We periodically review and update this Notice to describe new products, processes, or changes to our practices. You can see when we last updated this Notice by referring to the “Updated” date at the bottom of this Notice. We encourage you to review the Notice whenever you interact with us to stay informed about our privacy practices and the ways that you can help protect your privacy.
If we make significant changes to this Notice, we will notify you by email, via the Services, or by publishing the new Notice on our Site. If you do not agree with the privacy practices disclosed in the Notice, we recommend you stop using our Site and Services.
14. Contact Us
To submit questions about this Notice, or to update or request changes to your personal data, please contact us via one of the following methods:
Email: privacy@flybox.com
Mail: FlyBox Privacy, 3651 FAU Blvd, Suite 200, Boca Raton, Florida 33431
Phone: 561-961-7600
15. Notice for California Residents
This section applies to California residents and outlines individuals’ rights and choices with respect to the processing of your personal data under the California Consumer Privacy Act and its implementing regulations (“CCPA”). It also serves as our “Notice at Collection” for California residents.
15.1 Data Collection
We collect the following categories of personal data, as defined by the CCPA:
We do not collect sensitive personal information as defined by the CCPA.
Most of the personal data that we collect is directly provided by you, although we may receive personal data from other sources, including third-party service providers. We collect these categories of personal data from you so that we may provide our Services to you (maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, etc.), ensure the security and integrity of our Site and Services, engage in advertising and marketing related to our Services, and verify and maintain the quality and safety of our Services. For more information on the types of personal data that we collect and the purposes for collection, please see the “Personal Data We Collect and Why We Collect It” section, above.
We retain your personal data as outlined in the “Retaining your Personal Data” section, above.
15.2 Data Disclosures
We disclose the categories of personal data listed above to our third-party service providers and vendors and our affiliates. For example, we will share your personal data with shipping and returns partners when you enter into a transaction with us to allow us to transport the items you provide to us in connection with the Services. Apart from our sharing with shipping and returns partners, the third parties that we share your personal data with are as outlined in the “Disclosing Your Personal Data” section, above.
15.3 Data Sales and Sharing for Cross-Context Behavioral Advertising
We do not sell your personal data to third parties. We do share your personal data with our vendors for the purposes of cross-context behavioral advertising. The personal data categories shared include identifiers (including IP address and device information), Internet and other electronic information, and inferences based on that personal data. To opt out of this sharing, click on the “Do Not Sell or Share My Personal Information” link which can also be found on the footer of our Site.
We do not sell or share personal data of minors under 16.
15.4 Your Privacy Rights
As a California resident, you have the following privacy rights:
For more information about these rights and how to exercise them, please see the “Your Privacy Rights and Choices” section, above.
15.5 California’s Shine the Light Law
California’s “Shine the Light” law allows California residents to request information about how their personal data has been disclosed by FlyBox to third parties for the third parties’ direct marketing purposes. While FlyBox does not generally share personal data with third parties for their own direct marketing purposes, we do share your personal data with certain third-parties as outlined in the “Disclosing Your Personal Data” section, above. To make a request for information under the “Shine the Light” law, please email us at privacy@flybox.com.
15.6 Making Complaints
If you have unresolved concerns, you may contact the California Privacy Protection Agency here or the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs by contacting them in writing at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by telephone at (800) 952-5210.
You may also contact us with any questions you may have by using the contact information set forth above.
May 15, 2025