Privacy Policy

Last Updated: May 30, 2026

This Privacy Policy explains how Shadowbox Ventures, LLC, doing business as Shadowbox Merch Services ("Company," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you visit or use our website, online storefronts, mobile experiences, artist merch stores, email sign-up forms, customer support channels, and related services (collectively, the "Services").

Our Services allow fans and customers to browse, purchase, and receive music merchandise, including merchandise offered through artist, label, brand, or other partner storefronts.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are

For purposes of applicable privacy laws, the controller or business responsible for your personal information is:

Shadowbox Ventures, LLC
dba "Shadowbox Merch Services"

Website: www.shadowboxmerch.com

E-mail: privacy@shadowboxmerch.com

2. Personal Information We Collect

We may collect personal information directly from you, automatically when you use the Services, and from third parties such as payment processors, shipping providers, artist partners, advertising partners, analytics providers, and fraud prevention vendors.

A. Information You Provide to Us

We may collect:

• Contact information, such as your name, email address, phone number, billing address, and shipping address.
• Account information, such as username, password, account preferences, saved addresses, order history, and customer profile information.
• Order and transaction information, such as products purchased, order date, purchase amount, shipping details, returns, exchanges, refunds, and customer service history.
• Payment-related information, such as payment method, billing details, and transaction confirmation details. We generally rely on third-party payment processors to process full payment card details and do not intentionally store full card numbers.
• Communications, such as messages you send to customer support, responses to surveys, feedback, reviews, or other communications with us.
• Marketing preferences, such as email subscription status, SMS consent, product interests, artist interests, and communication preferences.
• User-generated content, such as comments, reviews, photos, social media handles, or other content you choose to submit.

B. Information Collected Automatically

When you use the Services, we and our service providers may automatically collect:

• Device and browser information, such as IP address, browser type, device type, operating system, referring URLs, language settings, and general location derived from IP address.
• Usage information, such as pages viewed, products viewed, links clicked, search terms, session duration, cart activity, checkout activity, and other interactions with the Services.
• Cookie and tracking information, such as cookie identifiers, pixels, tags, SDKs, local storage, and similar technologies used for site functionality, analytics, personalization, advertising, fraud prevention, and performance measurement.

C. Information from Third Parties

We may receive information from:

• Artist, label, brand, or promotional partners, such as information related to campaigns, fan engagement, presale access, or merchandise promotions.
• Payment processors, such as transaction confirmation, fraud risk signals, and payment status.
• Shipping and fulfillment providers, such as delivery status, tracking information, and shipping exceptions.
• Advertising and analytics partners, such as campaign performance, audience segments, referral source, and engagement data.
• Social media platforms, if you interact with us through those platforms or use social login or sharing features.
• Publicly available sources, where permitted by law.

3. How We Use Personal Information

We may use personal information for the following purposes:

A. To Provide and Operate the Services

We use personal information to:

• Create and manage accounts.
• Process and fulfill orders.
• Process payments and refunds.
• Provide shipping, delivery, returns, and exchanges.
• Provide customer support.
• Send order confirmations, shipping updates, service notices, and other transactional communications.
• Maintain the security and functionality of the Services.

B. To Personalize and Improve the Services

We use personal information to:

• Remember your preferences.
• Recommend products, artists, collections, or promotions.
• Understand how customers use the Services.
• Improve website design, product offerings, checkout flows, customer support, and merchandising strategy.
• Test and develop new features, products, and services.

C. For Marketing and Promotional Purposes

We may use personal information to:

• Send marketing emails, newsletters, early access notices, product drops, restock alerts, artist merch announcements, and promotional offers.
• Send SMS or text messages where you have provided consent.
• Measure the effectiveness of marketing campaigns.
• Create and manage advertising audiences.
• Show targeted or interest-based advertising, where permitted by law.
• Administer contests, sweepstakes, giveaways, or promotions.

You may opt out of marketing emails by using the unsubscribe link in our emails. You may opt out of SMS messages by following the instructions provided in the message, such as replying "STOP."

D. For Security, Fraud Prevention, and Legal Compliance

We use personal information to:

• Detect, prevent, and respond to fraud, abuse, security incidents, and unauthorized transactions.
• Enforce our terms, policies, and agreements.
• Comply with tax, accounting, chargeback, consumer protection, sanctions, and other legal obligations.
• Respond to legal requests, court orders, subpoenas, or government inquiries.
• Protect our rights, property, users, partners, and the public.

4. Legal Bases for Processing Personal Information

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal information only when we have a lawful basis to do so, including:

• Contractual necessity, such as processing your order, creating an account, delivering products, handling returns, and providing customer support.
• Consent, such as when you sign up for certain marketing communications, accept non-essential cookies, or provide consent for SMS messages.
• Legitimate interests, such as improving the Services, preventing fraud, securing our platform, conducting analytics, personalizing the user experience, and marketing our products and services, where those interests are not overridden by your privacy rights.
• Legal obligations, such as tax, accounting, consumer protection, regulatory, and compliance obligations.
• Protection of vital interests or public interests, where applicable and legally permitted.

Where we rely on consent, you may withdraw your consent at any time, but withdrawal will not affect processing that occurred before the withdrawal.

5. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients:

A. Service Providers and Vendors

We may disclose personal information to vendors that help us operate the Services, including:

• Website hosting and e-commerce platform providers.
• Payment processors.
• Fraud prevention and security providers.
• Order fulfillment, warehousing, printing, and shipping providers.
• Customer support tools.
• Email, SMS, and marketing automation providers.
• Analytics providers.
• Advertising technology providers.
• Professional advisors, such as lawyers, accountants, insurers, and auditors.

B. Artist, Label, Brand, and Promotional Partners

If you purchase merchandise from, sign up for updates related to, or otherwise interact with an artist, label, brand, or partner storefront, we may disclose relevant personal information to that artist, label, brand, or partner, such as order information, customer contact information, campaign performance information, or fan engagement information.

Where required by law, we will provide notice or obtain consent before disclosing personal information to partners for their own independent marketing purposes.

C. Advertising and Analytics Partners

We may disclose or make available certain personal information, such as device identifiers, cookie identifiers, IP address, browsing activity, purchase activity, and engagement data, to advertising and analytics partners to help us measure campaigns, understand performance, and deliver relevant advertising.

Depending on where you live, this activity may be considered "selling," "sharing," or targeted advertising under applicable privacy laws. See the "Your Privacy Rights" and "California Privacy Notice" sections below for more information.

D. Legal, Compliance, and Safety Recipients

We may disclose personal information when we believe disclosure is necessary or appropriate to:

• Comply with applicable law.
• Respond to lawful requests.
• Enforce our terms and policies.
• Protect our rights, users, customers, employees, partners, or the public.
• Detect, investigate, or prevent fraud, security issues, or illegal activity.

E. Business Transfers

We may disclose or transfer personal information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar corporate transaction.

6. Cookies and Similar Technologies

We use cookies, pixels, tags, local storage, and similar technologies to operate and improve the Services. These technologies may be used for:

• Essential site functions, such as cart, checkout, account login, security, and fraud prevention.
• Performance and analytics, such as understanding traffic, product views, and checkout behavior.
• Personalization, such as remembering preferences and recommending products.
• Advertising, such as measuring campaigns and showing relevant ads.

Where required by law, we will request your consent before using non-essential cookies or similar technologies. You can adjust cookie settings through our cookie banner or preference center, where available. You may also control cookies through your browser settings.

Some browsers or devices may allow you to send "Do Not Track" or similar signals. Because there is not yet a uniform industry standard for responding to all such signals, we may not respond to them unless required by law. Where required, we will honor legally recognized opt-out preference signals, such as Global Privacy Control.

7. International Transfers

We are based in the United States, and your personal information may be processed in countries other than where you live. These countries may have data protection laws that differ from those in your jurisdiction.

Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses, data processing agreements, adequacy decisions, or other lawful transfer mechanisms.

8. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Services, process orders, maintain business records, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and protect our rights.

Retention periods may vary depending on the type of information and the reason we collected it. For example:

• Account information may be retained while your account remains active.
• Order and transaction records may be retained as required for tax, accounting, chargeback, and legal compliance purposes.
• Marketing information may be retained until you unsubscribe or opt out, subject to reasonable suppression-list retention.
• Security and fraud prevention logs may be retained for a reasonable period to protect the Services.

When personal information is no longer needed, we will delete, anonymize, or otherwise handle it in accordance with applicable law.

9. Your Privacy Rights

Depending on where you live, you may have certain rights regarding your personal information. These rights may include the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of personal information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request portability of certain personal information.
• Opt out of marketing communications.
• Opt out of the sale or sharing of personal information, targeted advertising, or certain profiling activities.
• Limit the use or disclosure of sensitive personal information, where applicable.
• Lodge a complaint with a data protection authority.

To exercise your rights, please contact us at:

E-mail: privacy@shadowboxmerch.com

We may need to verify your identity before responding to your request. Depending on your location, you may also have the right to appeal our decision regarding your privacy request.

We will not discriminate against you for exercising your privacy rights.

10. California Privacy Notice

This section applies to California residents and supplements the rest of this Privacy Policy.

A. Categories of Personal Information We Collect

In the past 12 months, we may have collected the following categories of personal information:

We do not use or disclose sensitive personal information for purposes that would require a right to limit unless we provide the required notice and choice.

B. Categories of Personal Information Disclosed for Business Purposes

In the past 12 months, we may have disclosed the categories of personal information listed above to service providers, contractors, and other recipients for business purposes, including payment processing, fulfillment, shipping, customer support, analytics, fraud prevention, security, hosting, marketing services, and legal compliance.

C. Sale or Sharing of Personal Information

We do not sell personal information for money. However, some of our advertising, analytics, and tracking activities may be considered a "sale" or "sharing" of personal information under California law.

In the past 12 months, we may have sold or shared the following categories of personal information for cross-context behavioral advertising or similar purposes:

• Identifiers, such as cookie IDs, device IDs, IP address, or email-derived identifiers.
• Internet or electronic network activity information.
• Commercial information, such as product views, cart activity, or purchase activity.
• Inferences, such as product or artist interests.

We may disclose this information to advertising networks, social media platforms, analytics providers, and marketing partners.

You may opt out by clicking:

We also honor legally recognized opt-out preference signals where required.

D. California Privacy Rights

California residents may have the right to:

• Know what personal information we collect, use, disclose, sell, or share.
• Access specific pieces of personal information.
• Delete personal information, subject to exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information.
• Limit the use and disclosure of sensitive personal information, where applicable.
• Not be discriminated against for exercising privacy rights.

To exercise these rights, contact us at:

E-mail: privacy@shadowboxmerch.com

You may designate an authorized agent to submit a request on your behalf. We may require proof of authorization and may ask you to verify your identity directly with us.

11. European, UK, and Swiss Privacy Rights

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have rights under applicable data protection laws, including the right to:

• Access your personal information.
• Correct inaccurate personal information.
• Request deletion of your personal information.
• Restrict or object to certain processing.
• Request portability of your personal information.
• Withdraw consent where processing is based on consent.
• Object to processing based on legitimate interests.
• Object to direct marketing.
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us at:

E-mail: privacy@shadowboxmerch.com

12. Marketing Communications

You may opt out of marketing emails by clicking the unsubscribe link in any marketing email. You may opt out of SMS messages by following the instructions in the message, such as replying "STOP."

Even if you opt out of marketing communications, we may still send you transactional or service-related messages, such as order confirmations, shipping notices, account notices, or updates about our legal terms.

13. Children's Privacy

The Services are not intended for children under 18 years old, and we do not knowingly collect personal information from children under that age. If we learn that we have collected personal information from a child in violation of applicable law, we will take appropriate steps to delete it.

If you believe a child has provided us with personal information, please contact us at:

E-mail: privacy@shadowboxmerch.com

14. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you believe your account has been compromised.

15. Third-Party Websites and Services

The Services may contain links to third-party websites, artist pages, social media platforms, payment services, shipping services, or other third-party services. We are not responsible for the privacy practices of third parties. You should review their privacy policies before providing personal information to them.

16. Artist, Label, and Partner Storefronts

Some merchandise stores, campaigns, or promotions may be operated in collaboration with artists, labels, brands, venues, festivals, or other partners. When you interact with a partner storefront or campaign, both we and the relevant partner may receive certain information about your interaction, such as order details, contact information, product interest, or campaign engagement.

Where a partner independently determines how to use your personal information, that partner is responsible for its own privacy practices. We encourage you to review the partner's privacy policy where available.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date above. If we make material changes, we may provide additional notice, such as by posting a notice on the Services or sending you an email where appropriate.

Your continued use of the Services after an updated Privacy Policy becomes effective means you acknowledge the updated Privacy Policy.

18. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

E-mail: privacy@shadowboxmerch.com

Website: www.shadowboxmerch.com