At My Mineral Box, we handle your data with the same honesty and care we apply to every mineral specimen we curate. This policy explains what we collect, why we collect it, who we share it with, and the choices you have. Last updated: July 2026.
Information We Collect 01
We only collect the data needed to run the shop and serve you:
- Order and contact details — your name, email address, shipping address, phone number (when the carrier requires one), and your order history.
- Account data — your email address and a securely hashed password if you create an account, plus saved preferences, favorites, and messages you send to our team.
- Payment data — handled entirely by our payment processors. We never see or store your full card number.
- Support and review content — messages, chat conversations, offer requests, and any review text or photos you choose to submit.
- Technical data — IP address, browser and device information, and site-usage events collected through cookies and similar technologies, only with your consent where consent is required.
Why We Collect It 02
- Order fulfillment — processing your payment, packing and shipping your order, sending delivery updates, and preparing standard shipping and export documents.
- Customer support — answering questions and handling returns, refunds, payment plans, and special requests.
- Communication — order confirmations, shipping notifications, review invitations, and replies to your inquiries. Marketing messages are sent only if you ask for them.
- Site improvement — understanding how the site is used (analytics, with consent) so we can improve it.
- Legal obligations — tax, accounting, and fraud-prevention records we are required to keep.
Our legal bases under the GDPR are contract performance (order processing), legitimate interest (fraud prevention and site improvement), and consent (analytics and marketing cookies).
Who We Share It With 03
We never sell your personal information. We share data only with service providers who need it to do their job for you:
- Payment processors — Stripe and PayPal process your payment. Your card or account details go directly to them and are protected under their own privacy policies.
- Shipping carriers — receive your name, address, and phone number to deliver your parcel and to prepare standard export and shipping documents.
- Email service — a transactional email provider sends order confirmations, shipping updates, and review invitations on our behalf.
- Hosting and storage — our website, database, and images run on cloud infrastructure providers such as Cloudflare and Supabase.
- Analytics and advertising — Google Analytics and the Pinterest tag run only after you consent through our cookie banner.
- Anti-spam — Cloudflare Turnstile, a privacy-friendly check, protects our support chat.
Cookies & Consent 04
We use the following categories of cookies and similar storage:
- Essential — cart, session, and security storage. Always active, because the shop cannot work without it.
- Preferences — remembers settings such as your currency and language on your device.
- Analytics — helps us understand how the site is used (Google Analytics). Used only after consent where consent is required.
- Marketing — measures ad performance (Pinterest tag). Used only after consent where consent is required.
For visitors in regions where cookie consent is required, non-essential cookies are used only after consent through our cookie banner or preference settings. You can withdraw consent at any time by deleting this site's cookies in your browser — the consent banner will ask again on your next visit — and you can also disable cookies entirely in your browser settings.
Data Retention 05
- Order records — kept as long as needed for warranty, tax, and accounting obligations.
- Account data — kept until you delete your account or ask us to remove it.
- Support conversations — kept while your inquiry or order is active and for a reasonable period afterwards.
- Analytics data — retained on the provider's standard schedule and aggregated wherever possible.
Your Rights (GDPR & CCPA) 06
If you live in the European Union, the United Kingdom, the European Economic Area, or California, applicable privacy law gives you specific rights over the personal information we hold about you:
- Access and portability — request a copy of the personal data we hold about you.
- Correction — ask us to fix inaccurate or incomplete information.
- Deletion — ask us to delete your data where we have no legal obligation to keep it.
- Objection and restriction — object to or limit certain processing, including analytics and marketing.
- No selling — we do not sell personal information. California residents may still submit a 'Do Not Sell or Share' request.
- Complaint — if you are in the EU, UK, or EEA, you may also lodge a complaint with your local supervisory authority.
How to Update or Delete Your Data 07
Email support@mymineralbox.com from the address associated with your order or account and tell us what you would like us to access, update, or delete. We may need to verify your identity before acting on a request. We respond to privacy requests within the timeframe required by applicable law, including generally within one month for GDPR requests and within 45 calendar days for applicable CCPA requests.
Security & Payments 08
All traffic to our site is encrypted with HTTPS, account passwords are stored only as secure hashes, and access to customer data is limited to the people who need it to serve you. Payments are processed by PCI-DSS-compliant processors (Stripe and PayPal); we never store your full card number on our systems.
Minors 09
Our shop is not directed to children, and we do not knowingly collect personal information from anyone under 16 (or the higher minimum age your local law sets). If you believe a minor has provided us personal data, contact us and we will delete it.
International Data Transfers 10
We serve collectors worldwide, so your data may be processed in countries other than your own — including the United States, where our hosting and payment providers operate, and the countries our fulfillment locations ship from. Where the law requires it, we rely on appropriate safeguards such as our processors' standard contractual clauses.
Changes to This Policy 11
We may update this policy to reflect legal or operational changes. The latest version, with its date, will always be posted on this page.
Contact Us 12
For any privacy-related question or request, reach out directly: support@mymineralbox.com.
Data controller: My Mineral Box LLC, 1420 FM 1960 East Bypass, Humble, TX 77338, United States.
Your privacy is as important to us as the authenticity of every mineral we offer.