PRIVACY POLICY

This is our Privacy Policy, which explains how RIAB North America LLC, its personnel, and its contract service providers (the “Company,” “RIAB,” “ROOM IN A BOX”, “we,” “our,” “us”) process your information with our website (“Site”) and related to our products.

I. INFORMATION WE MAY COLLECT

We may have access to non-public information when you interact with our site and/or place an order. This information may include, depending on how you use and interact with us and with our site:

Identity: name, location, job title, employer

Contact: email address, physical address, mailing address, and telephone numbers

Financial: credit card, banking, and payment account details, and information about your orders

Account Profile: username and password, any responses to questionnaires, and interactions with the Site and customer support or other representatives or agents of RIAB

Additionally, by using the Services, you agree to our capture and storage of information regarding how you use the Site, your interactions with us, subject to your device settings and the ways in which you use the Site. You consent to such disclosure of this information to assist us in operating the Site or to meet the requirements of any law or regulation (as deemed by us).

We collect certain information automatically, including:

Location: We collect data about users’ geographic location and IP addresses used when interacting with the Site. We use this information to protect against fraud and to confirm geographical locations as needed to fulfill orders. We may use certain Google services to gather information about your location. Google uses various technologies to determine your location, including IP address, GPS, and other sensors that may, for example, provide Google with information on nearby devices, Wi-Fi access points, and cell towers (see Google’s Privacy Policy to learn more).

Tracking: For convenience and ease of use, as well as advertising purposes, RIAB and our third-party providers may automatically collect information when you visit or use our Services, read our emails, or otherwise engage with us. We typically use tracking technologies that include cookies, clear gifs, Flash objects, web beacons, embedded scripts, and similar technology (collectively, “Trackers”). For example, we may collect information about your preferences, your device and its operating system, your IP address, browser type, service provider, date and time stamp, and other similar information. We use Trackers to improve your experience and our Services. We also use Trackers to target advertising. You may adjust settings on your web browser, your devices, and in your email service to change the way certain Trackers work, or to disable them. Information provided by your browser developer and email provider will help you understand the limitations of these settings for you.

II. OUR USE OF YOUR INFORMATION

We use the information we collect for purposes described in this Privacy Policy and as described to you on our Terms of Service. This includes using the information to:

Make the Site and our products available to you, to handle billing and account management, fulfill our legal and regulatory obligations, and to complete other administrative matters;

Provide information to you including transaction confirmations, invoices, product information and announcements, support and administrative messages, payments and amounts owed, responses to comments and questions, newsletters or other content, customer service or feedback, or any other information related to the Site, your purchases, and our products;

Enhance the safety and security of our Site and investigate or provide notice of fraud or unlawful activity;

Perform audits and protect or exercise our legal rights or defend against legal claims, including to enforce and carry out contracts and agreements; and

Comply with laws, regulations, and legal obligations.

III. DISCLOSURES

Consistent with the practices and purposes described in this policy, we may share your personal information for certain purposes. We may share your personal information with:

Our third-party vendors and service providers. We share personal data with authorized and vetted contractors, subcontractors, third-party vendors, and service providers who help us run and protect the Site and our business. This includes messaging, business analytics, advertising data, marketing, hosting, shipping, fulfillment, reporting, and data processing.

Our business transactions. We may share personal data in connection as reasonably necessary in the event of a company business transaction, such as the sale of our assets, a merger, consolidation, reorganization, financing, change of control or acquisition between our company and another company or third party, an initial public offering, or bankruptcy or similar proceeding.

Otherwise, as you agree. We may share personal data for other purposes with your consent.

As legally required. We will disclose personal data to the extent reasonably necessary to respond to or process subpoenas, court orders, legal process, law-enforcement requests, legal claims, product recalls, or government inquiries and to protect and defend the rights, interests, safety, and security of RIAB, our related companies and integral third parties, users, or the public.

We may also share information with others in an aggregated or otherwise anonymized form that does not reasonably identify you directly as an individual.

For further information on your choices regarding your personal information, see the “Controlling Your Information” section of this policy, below.

IV. THIRD-PARTY PLATFORMS AND ACTIONS

Our site relies upon the interchange of data with you and with certain third-party services and processors. We work with third-party services to operate our Site, collect, and process payments and orders. We are not responsible for the privacy practices of these third parties or the content provided by third-party services, and the information practices of these third parties are not covered by this Policy. Please note that these third-party services have their own privacy policies, and we strongly recommend that you read their privacy policies as well as terms and conditions of use to understand how they collect, use, and share your information. The primary third parties with which we partner are:

Shopify e-commerce platform (hosting, shopping functions, payment processing)
Google (analytics and ads)
Meta (ads and traffic)
Amazon (hosting or backup)
Shipstation (shipping/logistics)
Yotpo (reviews)
Gorgias (customer support)
Back in Stock (backorder tracking)

By using our Site, you are agreeing that you are aware of and agree to be bound by the privacy policies of these service providers.

We may use Google Analytics in connection with the operation of our Site and your interactions with it. For information on Google Analytics, as well as how you can control information sent to Google and how these advertising practices affect you and your information, please review the information herehttp://www.google.com/policies/privacy/partners/ and herehttps://tools.google.com/dlpage/gaoptout/

V. CONTROLLING YOUR INFORMATION

We do not sell your personal information. We minimize the use of your data to only those purposes reasonably and practically necessary to provide our Services to you, and we collect only the amount and type of data necessary to provide these services.

We will honor your privacy requests, including by allowing you to manage or review your account information, marketing preferences, and user data. For any of these controls or opt-outs, please contact support here.

to edit your information and settings, including any account and contact data
to unsubscribe from marketing messages or newsletters
to access, manage, and remove geo-location information associated with your account
to request a machine-readable copy of your personal data

VI. TRANSFER OF PERSONAL INFORMATION

We are based in the United States, and our Site is designed for use only in the United States. If you are using our Site from another jurisdiction, your information collected through our Site may be stored and processed in the United States or any other country in which RIAB or its service providers maintain facilities or conduct business activities. If you are located in other regions with laws governing data collection and use that may differ from U.S. law, please note that we may transfer information, including personal information, to a country and jurisdiction that does not have the same data-protection laws.

VII. CALIFORNIA RESIDENTS

California residents have certain rights under the California Consumer Privacy Act (“CCPA”). Please note that the CCPA does not apply to non-public personal information collected by financial institutions, which is regulated by other laws.

Subject to limitations and exceptions, the CCPA provides California residents the right to request details about the categories and specific elements of personal information we collect, to delete their personal information, to opt out of any “sales” that may be occurring, and to not be discriminated against for exercising these rights. Choices available to you for the collection and handling of your information are addressed throughout this policy.

In the last 12 months, we collected the following categories of personal information subject to the CCPA: identifiers (such as email address and IP address), individual identity and contact information, approximate geolocation information, and Internet or other electronic network activity information (such as browsing history and related usage data).

For more details about the information we collect and the categories of sources of this information, please see the above sections of this policy. We share this information with the categories of third parties described in the “Disclosures” section above.

California residents may make a request for access to certain personal information subject to the CCPA, not otherwise exempted as non-public personal information collected by financial institutions, by requests here. We may verify any such request by asking you to provide information that matches information we have on file about you. You can also designate an authorized agent to exercise these rights on your behalf, but we will require proof that the person is authorized to act on your behalf and may also still ask you to verify your identity with us directly.

VIII. DATA RETENTION

We may maintain personal information in our databases until you ask us to remove your information. Without such a request, we will maintain information for a period of up to two years. Even after you ask that we remove your information from our databases, it may be impossible to remove some information, such as web server log files and information that may reside in backup files. We also may retain technical information for use in the aggregate and to analyze and improve the Site. Finally, we may maintain information as part of a document retention policy to comply with applicable laws, rules, guidelines, or regulations; to protect ourselves against liability; prevent fraudulent activity; to enforce our contracts; and to permit us to pursue available remedies and limit damages.

IX. CHILDREN’S PRIVACY

We do not knowingly solicit or collect information from anyone under the age of 13. In the event that we learn that we have inadvertently collected personal information from someone under age 13, we will take reasonable steps to delete that information. If you believe that we might have any information from a child under 13, please contact us here.

X. CHANGES TO THIS POLICY

This Privacy Policy will evolve with time, and when we update it, we will revise the "Effective Date" above and post the new Policy. To stay informed of our privacy practices, we recommend you review the Policy on a regular basis as you continue to use our Services.Your use of our Site following a revision to this Policy is your agreement to this Policy, as revised.

XI. CONTACT US

If you have any questions about this Privacy Policy or the Services, please contact us using this form.

Last updated: 1.31.2024