Privacy policy

Privacy Policy

Last updated: August 19, 2026

Milk & Cookies Arizona LLC, doing business as Milk & Cookies (“Milk & Cookies,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit cookiebox.com, place an order, subscribe to communications, submit a review, contact us, or otherwise interact with our services.

By using our website, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on how you interact with us, we may collect the following categories of information:

Information You Provide

  • Name

  • Email address

  • Telephone number

  • Billing and shipping addresses

  • Account or login information

  • Order details, product selections, and purchase history

  • Subscription information

  • Reviews, photographs, messages, and other content you submit

  • Marketing and communication preferences

  • Information included in customer-service inquiries

  • Any other information you voluntarily provide

Payment Information

Payments are processed by Shopify and other payment providers. We generally do not directly receive or store complete payment-card numbers. Payment providers may collect payment-card details, billing information, transaction information, and information needed to prevent fraud.

Device, Internet, and Usage Information

When you use our website, we and our service providers may automatically collect:

  • IP address

  • Browser type and version

  • Device type, operating system, and device identifiers

  • General location derived from an IP address

  • Referring and exit pages

  • Pages and products viewed

  • Links and buttons selected

  • Cart, checkout, and purchase activity

  • Dates, times, and duration of visits

  • Cookie identifiers and similar technical information

  • Information about interactions with our emails or text messages

Information From Other Sources

We may receive information from Shopify, payment processors, delivery providers, marketing platforms, review providers, subscription providers, fraud-prevention services, social-media platforms, and other business partners.

2. How We Use Information

We may use information to:

  • Operate, maintain, and improve our website and services

  • Process payments, orders, deliveries, returns, and refunds

  • Administer customer accounts and subscriptions

  • Communicate about orders and customer-service requests

  • Detect and prevent fraud, abuse, security incidents, and unlawful activity

  • Provide product recommendations and personalize customer experiences

  • Send promotional emails or text messages where permitted

  • Measure website traffic and understand customer interactions

  • Conduct analytics and evaluate business performance

  • Request, display, and manage product reviews

  • Maintain business and transaction records

  • Enforce our terms and protect our legal rights

  • Comply with legal, tax, accounting, and regulatory obligations

  • Carry out other purposes disclosed when information is collected

3. Cookies and Similar Technologies

We and our service providers use cookies, pixels, software development kits, server-side integrations, and similar technologies to operate the website, remember preferences, understand website activity, measure performance, prevent fraud, and support marketing.

These technologies may collect identifiers, device information, IP addresses, browsing activity, product interactions, cart activity, purchases, and information about interactions with marketing communications.

Where required, we obtain consent before using nonessential analytics or marketing technologies. You can use our cookie banner or Cookie Preferences link to accept, reject, or manage optional technologies. Necessary technologies may remain active because they are required for security, checkout, fraud prevention, and core website operation.

Changing browser settings alone may not block every technology, including server-side technologies. Your choices may apply only to the browser and device on which they are made.

4. Our Service Providers

We disclose information to vendors that help us operate our business. These currently include:

  • Shopify, which hosts our storefront, supports checkout and ecommerce functions, and provides analytics and customer-privacy tools

  • Klaviyo, which supports email and SMS marketing, customer communications, and related analytics

  • Judge.me, which provides product-review functionality and related analytics

  • Recharge, which supports subscription services when those services are enabled

  • Payment processors and fraud-prevention providers

  • Shipping, delivery, and fulfillment providers

  • Hosting, security, analytics, technical-support, accounting, and professional-service providers

These providers process information according to their own privacy notices and their agreements with us. Their services and our vendor list may change over time.

We may also disclose information:

  • To comply with applicable law, subpoenas, court orders, or lawful government requests

  • To investigate fraud, security incidents, or violations of our terms

  • To protect the rights, property, and safety of Milk & Cookies, our customers, or others

  • In connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of some or all of our business

  • With your direction or consent

5. Sale and Sharing of Personal Information

We do not sell personal information for money.

Certain disclosures involving analytics, marketing, cookies, or similar technologies may be considered a “sale,” “sharing,” or use for targeted advertising under some state privacy laws, even when no money is exchanged.

Where applicable, you may opt out through the Your Privacy Choices or Do Not Sell or Share My Personal Information link in our website footer. We also process legally recognized browser-based opt-out signals, such as Global Privacy Control, as required by applicable law.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

6. Marketing Communications

You may unsubscribe from promotional emails by selecting the unsubscribe link in an email.

If you receive promotional text messages from us, you may opt out by replying STOP. Message and data rates may apply. Opting out of marketing does not prevent us from sending non-promotional communications concerning transactions, accounts, subscriptions, security, or customer-service matters.

7. Privacy Rights

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • Know whether we process your personal information

  • Request access to personal information we maintain about you

  • Request correction of inaccurate information

  • Request deletion of personal information

  • Obtain a portable copy of certain information

  • Opt out of the sale or sharing of personal information

  • Opt out of targeted advertising

  • Limit certain uses of sensitive personal information

  • Withdraw consent where processing is based on consent

  • Appeal a decision concerning a privacy request

  • Receive equal service without unlawful discrimination for exercising privacy rights

To submit a request, email accounting@cookiebox.com or call 949-303-6830.

We may need to verify your identity before completing a request. Verification information will be used only to process and protect the request. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and identity verification.

If we deny a request, residents of jurisdictions providing an appeal right may appeal by replying to our decision or contacting us using the information below with “Privacy Appeal” in the subject line.

8. California Privacy Notice

This section supplements the rest of this Privacy Policy for California residents.

During the preceding 12 months, we may have collected the following categories of personal information:

  • Identifiers, including names, addresses, email addresses, telephone numbers, IP addresses, and online identifiers

  • Customer-record information, including contact and payment-related information

  • Commercial information, including purchases, subscriptions, products viewed, and transaction history

  • Internet or electronic-network activity, including browsing, interaction, cart, and advertising information

  • Approximate geolocation derived from an IP address

  • Audio, electronic, visual, or similar information that a customer voluntarily submits

  • Inferences derived from activity or purchase information, such as product interests

  • Sensitive personal information, such as account credentials or payment information, when necessary to provide requested services

We collect this information from consumers, their devices, our service providers, and business partners. We use and disclose it for the business and commercial purposes described in this Privacy Policy.

We may disclose these categories to Shopify, payment processors, marketing and communications providers, review and subscription providers, shipping providers, analytics and security providers, professional advisers, government authorities, and parties involved in a business transaction.

We use sensitive personal information only for purposes permitted by applicable law, including providing requested goods or services, processing transactions, maintaining security, and preventing fraud. We do not use sensitive personal information to infer characteristics about consumers.

California residents may exercise applicable rights through our website’s privacy-choice page or by contacting us using the information in Section 15.

9. Data Retention

We retain information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including completing transactions, providing customer service, maintaining business and tax records, resolving disputes, preventing fraud, and complying with legal obligations.

Retention periods vary depending on the type of information, the nature of our relationship with you, legal requirements, and operational needs. We delete or de-identify information when it is no longer reasonably necessary, unless continued retention is required or permitted by law.

10. Data Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information. However, no internet transmission, electronic-storage system, or security measure can be guaranteed to be completely secure.

11. Children’s Privacy

Our website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us, contact us so we can review and delete it as appropriate.

12. International Visitors

Our business and service providers are located primarily in the United States. If you access our services from another country, your information may be transferred to, processed in, and stored in the United States or other jurisdictions where privacy laws may differ.

Where applicable, we process information to perform a contract with you, comply with legal obligations, pursue legitimate business interests, or based on your consent. Visitors in the European Economic Area, United Kingdom, or other applicable jurisdictions may have additional rights, including the right to object to or restrict certain processing and to submit a complaint to their local data-protection authority.

13. Third-Party Websites and Services

Our website may contain links to third-party websites or services. We are not responsible for the privacy, security, or content practices of third parties. Review their privacy notices before providing information.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will post the updated version on this page and revise the “Last updated” date. Material changes may also be communicated through the website or by another appropriate method.

15. Contact Us

For questions, privacy requests, or concerns about this Privacy Policy, contact:

Milk And Cookies Arizona LLC
Doing business as Milk & Cookies
Website: cookiebox.com
Email: accounting@cookiebox.com
Phone: 949-303-6830

335 N Gilbert Rd, Gilbert AZ, 85234