Effective Date: March 4, 2026
Introduction
Welcome to squishmallowsofficial.com (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your personal information. This Privacy Policy explains our practices regarding data collection and processing when you visit our website, purchase our products, or interact with our services.
By accessing or using squishmallowsofficial.com, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our website or services. We encourage you to review this policy periodically as we may update it from time to time to reflect changes in our practices or legal requirements.
Our commitment extends beyond mere compliance with privacy regulations. We believe in earning and maintaining your trust through responsible data stewardship, clear communication, and respect for your privacy choices. This policy applies to all visitors, users, and customers of our website, regardless of their geographic location.
What Information We Collect
We collect various types of information to provide you with an optimal shopping experience and to improve our services. The information we collect falls into several categories:
Personal Information You Provide: When you create an account, make a purchase, sign up for our newsletter, or contact customer service, you may provide information such as your name, email address, mailing address, phone number, payment information, and billing address. If you create a wishlist or leave product reviews, we also collect that content and associated information.
Automatic Information Collection: When you visit our website, we automatically collect certain technical information through cookies and similar technologies. This includes your IP address, browser type and version, device identifiers, operating system, referring URLs, pages viewed, time spent on pages, links clicked, and general geographic location based on your IP address. We also collect information about your browsing behavior and shopping patterns on our site.
Purchase and Transaction Information: When you make a purchase, we collect details about your order, including products purchased, quantities, prices, shipping preferences, and transaction history. This information helps us process your orders, provide customer support, and prevent fraudulent transactions.
Communications: We maintain records of your communications with us, including emails, chat messages, phone calls, and social media interactions. This helps us provide better customer service and resolve any issues you may encounter.
User-Generated Content: If you participate in contests, surveys, product reviews, or other interactive features, we collect the information and content you submit, along with associated metadata.
Use of Information
We use the collected information for various legitimate business purposes designed to enhance your experience and operate our business effectively:
Order Processing and Fulfillment: We use your personal and payment information to process your orders, arrange shipping, send order confirmations, provide tracking information, and handle returns or exchanges. This is essential to our contractual obligation to deliver the products you purchase.
Customer Service and Support: Your information enables us to respond to your inquiries, resolve problems, provide technical support, and communicate about your orders or account. We may reference your purchase history and previous interactions to provide more personalized and efficient assistance.
Marketing and Promotional Communications: With your consent where required, we send you newsletters, promotional offers, product announcements, and information about new Squishmallows collections. We use your browsing and purchase history to personalize these communications and make them more relevant to your interests. You can opt out of marketing communications at any time.
Website Improvement and Analytics: We analyze usage patterns, user behavior, and technical data to improve our website’s functionality, design, and user experience. This helps us identify and fix technical issues, optimize page loading times, and develop new features that better serve our customers.
Fraud Prevention and Security: We use information to detect, prevent, and investigate fraudulent transactions, unauthorized access, and other illegal activities. This protects both our business and our customers from security threats and financial losses.
Legal Compliance: We process information as necessary to comply with legal obligations, enforce our terms of service, protect our rights and property, and respond to legal processes such as court orders or government requests.
Business Operations: We use aggregated and anonymized data for business intelligence, reporting, and strategic planning purposes. This helps us understand market trends, inventory management, and business performance.
Third-Party Disclosure
We understand the importance of protecting your information and limit its disclosure to third parties. However, we may share your information in the following circumstances:
Service Providers: We work with trusted third-party service providers who perform functions on our behalf, including payment processors, shipping carriers, email service providers, marketing platforms, web hosting services, analytics providers, and customer service platforms. These providers have access only to the information necessary to perform their specific functions and are contractually obligated to maintain confidentiality and security.
Business Transfers: If we undergo a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding involving all or a portion of our business, your information may be transferred as part of that transaction.
Legal Requirements: We may disclose information when required by law, court order, or government regulation, or when we believe disclosure is necessary to protect our rights, property, or safety, or that of our users or the public.
With Your Consent: We may share information with third parties when you explicitly consent to such sharing, such as when you choose to connect your account with social media platforms or participate in third-party promotions.
We do not sell your personal information to third parties for their marketing purposes. Any data sharing occurs under strict confidentiality agreements and complies with applicable privacy laws.
Cookie Usage
Our website uses cookies and similar tracking technologies to enhance your browsing experience and collect information about how you use our site. Cookies are small text files stored on your device that help us remember your preferences and understand user behavior.
Essential Cookies: These cookies are necessary for the website to function properly. They enable core functionality such as security, network management, shopping cart functionality, and payment processing. You cannot opt out of essential cookies while using our website.
Analytics Cookies: We use analytics cookies to understand how visitors interact with our website, which pages are most popular, and how users navigate through our site. This information helps us improve our website’s performance and user experience. We may use services like Google Analytics for this purpose.
Marketing Cookies: These cookies track your browsing habits to deliver personalized advertisements and marketing messages. They help us show you relevant products and offers based on your interests and previous interactions with our website.
Preference Cookies: These cookies remember your settings and preferences, such as language preferences, region, and display settings, to provide a more personalized experience on future visits.
You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies or delete cookies already stored on your device. However, disabling certain cookies may limit your ability to use some features of our website or affect your user experience.
External Links
Our website may contain links to third-party websites, social media platforms, partner sites, or other external resources. These links are provided for your convenience and informational purposes. When you click on these links, you will leave our website and be directed to third-party sites that are not under our control.
We are not responsible for the privacy practices, content, or security of these external websites. Each third-party website has its own privacy policy and terms of use, which may differ significantly from ours. We strongly encourage you to review the privacy policies of any third-party websites you visit before providing any personal information.
The inclusion of links to external websites does not imply endorsement, sponsorship, or recommendation of those sites or their content. We do not guarantee the accuracy, relevance, timeliness, or completeness of information found on linked websites.
Security Measures
We take the security of your personal information seriously and implement industry-standard technical, administrative, and physical safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction.
Technical Security: Our website uses Secure Socket Layer (SSL) encryption technology to protect sensitive information during transmission, such as payment details and personal information. We employ firewalls, intrusion detection systems, and regular security monitoring to protect our systems from cyber threats.
Access Controls: We restrict access to personal information to employees, contractors, and service providers who need access to perform their job functions. All individuals with access to your data are bound by confidentiality obligations and receive training on data protection practices.
Data Storage Security: Your personal information is stored on secure servers with limited access. Payment information is processed through PCI-DSS compliant payment processors and is not stored on our servers.
Regular Security Assessments: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential security weaknesses in our systems.
Despite our security measures, no method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect any unauthorized access to your account.
User Rights and Choices
You have certain rights and choices regarding your personal information, and we are committed to honoring these rights in accordance with applicable laws:
Access and Portability: You have the right to request access to the personal information we hold about you and receive a copy of that information in a structured, commonly used, and machine-readable format.
Correction and Updates: You can request corrections to any inaccurate or incomplete personal information. You may also update your account information directly through your account settings on our website.
Deletion: You have the right to request deletion of your personal information, subject to certain exceptions where we must retain information for legal, accounting, or security purposes.
Marketing Opt-Out: You can opt out of receiving marketing communications at any time by clicking the “unsubscribe” link in our emails, adjusting your account preferences, or contacting us directly. Note that even if you opt out of marketing communications, we may still send you transactional messages related to your orders or account.
Cookie Preferences: You can manage your cookie preferences through your browser settings or our cookie consent tool. You may refuse all non-essential cookies without affecting your ability to make purchases or use basic website functions.
To exercise these rights, please contact us using the information provided in the “Privacy Questions” section. We will respond to your request within a reasonable timeframe as required by applicable law.
Protection of Minors
Our website and services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13 without verifiable parental consent. While Squishmallows products are enjoyed by people of all ages, including children, we require that purchases be made by adults or with adult supervision.
If we become aware that we have inadvertently collected personal information from a child under 13 without proper parental consent, we will take immediate steps to delete that information from our systems. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately so we can take appropriate action.
For users between 13 and 18 years of age, we encourage parental involvement in online activities and recommend that minors seek parental guidance before providing personal information online.
CCPA Compliance
For California residents, the California Consumer Privacy Act (CCPA) provides additional rights regarding personal information. Under the CCPA, you have the right to:
Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
Delete: Request deletion of your personal information, subject to certain exceptions.
Opt-Out: Opt out of the sale of your personal information. We do not sell personal information as defined by the CCPA.
Non-Discrimination: Exercise your CCPA rights without receiving discriminatory treatment, such as being denied goods or services, charged different prices, or receiving a different level of service.
To exercise your CCPA rights, you or your authorized agent may submit a request through our website contact form or by emailing us at the address provided below. We will verify your identity before processing your request and respond within 45 days, with a possible extension of an additional 45 days if necessary.
GDPR Compliance
For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we comply with the General Data Protection Regulation (GDPR) and related data protection laws. Under the GDPR, we process your personal information based on the following legal grounds:
Contractual Necessity: Processing is necessary to fulfill our contract with you, such as processing orders and delivering products.
Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and conducting analytics, provided these interests do not override your fundamental rights and freedoms.
Consent: For certain activities like marketing communications, we rely on your explicit consent, which you can withdraw at any time.
Legal Obligations: Processing is necessary to comply with legal requirements.
In addition to the rights described elsewhere in this policy, GDPR provides you with the right to object to processing based on legitimate interests, the right to restrict processing in certain circumstances, and the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.
When we transfer personal information outside the EEA, UK, or Switzerland, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
How Long We Keep Your Information
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, and reporting obligations. Retention periods vary depending on the type of information and the purposes for which it is processed:
Account Information: We retain your account information for as long as your account remains active or as needed to provide you services. If you close your account, we may retain certain information for a period necessary to resolve disputes, enforce our agreements, and comply with legal requirements.
Transaction Records: Purchase history and transaction records are retained for accounting, tax, and legal compliance purposes, typically for seven years or as required by applicable law.
Marketing Data: If you opt out of marketing communications, we maintain a suppression list with minimal information to honor your opt-out preference.
Technical and Analytics Data: Most technical data and analytics are aggregated and anonymized within a short period and retained for analytical purposes. Raw log files are typically retained for a limited period for security and troubleshooting purposes.
When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention and deletion policies.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. When we make material changes to this policy, we will notify you by updating the “Last Updated” date at the top of this page and, where appropriate, through email notification or a prominent notice on our website.
We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your information. Your continued use of our website after any changes to this Privacy Policy constitutes your acceptance of those changes.
For significant changes that materially affect your rights or how we process your personal information, we may seek your explicit consent where required by law.
Privacy Questions
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, we encourage you to contact us. We are committed to addressing your privacy concerns promptly and transparently.
Contact Information:
Email: privacy@squishmallowsofficial.com
Mailing Address: 4811 S Alameda St, Los Angeles, CA 90058, United States
When contacting us, please provide sufficient detail about your inquiry or request so we can respond effectively. For data subject requests, we may need to verify your identity before processing your request to protect your personal information from unauthorized access.
We aim to respond to all privacy inquiries and requests within 30 days or as required by applicable law. Thank you for trusting squishmallowsofficial.com with your personal information.