Back to home
Legal

Privacy Policy

This policy applies to all personal information collected through this website, including support requests and venue partner inquiries.

Operated by Bogey LLC · Effective date: April 2026

1. Who We Are

This website is operated by Bogey LLC ("we", "us", or "our"), doing business as Boudoir Boxes. We place and operate automated retail vending machines in nightlife venues. This policy explains how we collect, use, and protect personal information submitted through this website.

2. Information We Collect

Support form submissions

Name, email address, phone number (optional), description of the issue, and, when verifying a refund, a mailing address and photo upload. We also record which vending machine and venue location was involved.

Venue inquiry form submissions

Business name, contact name, email address, phone number, and any notes submitted through the partner inquiry form.

Server and infrastructure logs

Our hosting provider (Vercel, Inc.) automatically collects IP addresses, request paths, browser type, and timestamps as part of standard CDN and server operation. We do not control this collection.

Security and fraud signals

When you submit a form, Cloudflare Turnstile processes browser signals (including IP address) to detect automated bot activity. No persistent cookie is set by Turnstile.

3. How We Use Your Information

  • To respond to support requests and investigate vending machine issues
  • To process and verify refund requests, including sending refund payments
  • To follow up on venue partner inquiries
  • To send transactional email notifications related to your submission
  • To detect and prevent spam and fraudulent form submissions
  • To maintain records of resolved tickets for operational purposes

4. Data Retention

Support tickets

Retained until the issue is resolved, then kept for up to 12 months for recordkeeping and dispute resolution purposes, then deleted.

Mailing addresses (cash refunds)

Deleted automatically within 7 business days after the refund is confirmed. Never used for marketing or any other purpose.

Photo uploads

Retained alongside the ticket record and deleted on the same schedule.

Venue inquiry submissions

Retained for up to 24 months from submission to support ongoing partnership conversations.

Server logs

Retained for up to 90 days per Vercel's standard log retention policy.

5. How We Share Your Information

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We share data only with the service providers listed below, who are contractually bound to use it solely to provide services to us.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We share data only with the service providers listed below, who are contractually bound to use it solely to provide services to us.

Vercel, Inc.

Website hosting & edge network

Privacy policy ↗

Supabase, Inc.

Database & file storage

Privacy policy ↗

Resend

Transactional email delivery

Privacy policy ↗

Cloudflare, Inc.

Bot and fraud detection (Turnstile)

Privacy policy ↗

iubenda s.r.l.

Hosted legal document delivery

Privacy policy ↗

6. Cookies and Tracking

This website does not use advertising cookies or tracking pixels. We may use a minimal session cookie for security purposes when you interact with our forms. Cloudflare Turnstile may set a short-lived cookie to verify form submissions. We do not use analytics platforms that track you across websites. See our Cookie Policy for full details.

7. Data Security

We implement reasonable technical and organizational measures to protect personal information. Form submissions are encrypted in transit (HTTPS/TLS). Data stored in our database is access-controlled and not publicly accessible. Photo uploads are stored in a private, access-controlled bucket. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Children's Privacy

This website is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. Our vending machines are placed exclusively in nightlife venues that restrict entry to adults. If you believe we have inadvertently collected information from a minor, contact us immediately and we will delete it.

9. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information. To make a request, email us at boudoirboxes@yahoo.com with your name and what you'd like us to do. We will respond within 30 days (or 45 days for California residents as required by law). California residents also have specific rights under the CCPA/CPRA - see the next section.

10. California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA. We do not sell or share your personal information. For the full at-collection notice required by California law - including specific categories collected, purposes, and retention periods - please see our California Notice at Collection.

View California Notice at Collection →

11. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will update the date at the bottom of this page. Your continued use of this website after any changes constitutes acceptance of the revised policy.

12. Contact Us

Questions about this policy or your personal information? Reach us using any of the following:

Last updated: April 2026 · Bogey LLC