Privacy policy

Last updated: July 29, 2025

This Privacy Policy explains how IRCSRX INC (DBA “Mailbox of Flushing”) (“Mailbox of Flushing”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit mailboxflushing.com or otherwise use our services (the “Services”). By using the Services, you agree to this Policy. If you do not agree, please do not use the Services.

Purpose. Our website exists to display and sell products. We do not operate with the primary purpose of collecting personal information.

1) Changes to This Policy

We may update this Policy from time to time for operational, legal, or regulatory reasons. We will post updates on this page and revise the “Last updated” date. Where required by law, we will provide additional notice or obtain consent.


2) What We Collect

Information you provide directly, such as:

  • Contact & account details (name, shipping/billing address, email, phone; username/password where applicable).

  • Order details (items ordered, payment confirmation, returns/exchanges, customer support messages).

  • Loyalty/reviews/referrals/gift cards information you choose to save in your account (if available).

Information collected automatically (“Usage Data”), such as:

  • Device, browser, IP address, approximate location derived from IP, pages viewed, actions taken, and interactions with emails.

  • Collected via cookies, pixels, and similar technologies. See “Cookies & Similar Technologies”.

Information from third parties, such as:

  • E‑commerce platform and vendors that support our store (e.g., Shopify), payment processors, analytics, fulfillment/shipping partners, and customer support tools.

You may choose not to provide certain information, but some features may not function without it.


3) How We Use Information

  • Provide the Services (process payments and orders, ship items, handle returns, operate accounts, and communicate about your purchases).

  • Customer support & Service improvement (respond to requests, maintain and enhance our Services).

  • Security & fraud prevention (detect and prevent fraudulent, illegal, or malicious activity; protect our rights and users).

  • Marketing & communications (send you product/service updates and offers where permitted by law and/or with your consent; you can opt out at any time—see “Your Rights”).

No sale of contact information or personal information. We do not sell your contact information or personal information, and we do not use your personal information or images for advertising without your consent.


4) Cookies & Similar Technologies

We use cookies and similar technologies to operate the store, remember preferences, and run analytics. Where required by law (e.g., in the EU/UK), we seek your consent for non‑essential cookies.

  • Learn about Shopify cookies: https://www.shopify.com/legal/cookies

  • You can manage cookies via your browser settings. Blocking cookies may affect site functionality.

  • Global Privacy Control (GPC). We recognize the GPC signal and treat it as a valid opt‑out for the browser/device that sends it. Other “Do Not Track” signals are not currently honored.

We do not “sell” or “share” personal information as defined by applicable law. If our practices change, we will update this Policy and provide appropriate opt‑out mechanisms.


5) Payments, Security & Storage

  • Secure transmission. Pages where you enter payment information are protected with TLS/SSL encryption.

  • Payment processing. Payments are processed by PCI DSS‑compliant payment processors (e.g., Shopify Payments or other providers). We do not store full credit/debit card numbers.

  • No security measures are perfect; do not use insecure channels to send sensitive information.

  • We retain personal information only as long as necessary to provide the Services, meet legal obligations, resolve disputes, and enforce agreements.


6) How We Disclose Information

We may disclose personal information:

  • To service providers acting on our behalf (e.g., IT, payments, analytics, cloud hosting, fulfillment/shipping, customer support).

  • To business partners solely to provide Services you request (e.g., shipping carriers). We do not permit partners to use your data for their own unrelated purposes.

  • With your direction or consent (e.g., social login/widgets, specific shipping requests).

  • Within our corporate group/affiliates to operate the Services.

  • For legal compliance (e.g., subpoenas, legal process), to enforce our terms, or to protect rights, safety, and property.

  • In a business transaction (e.g., merger or acquisition), subject to appropriate safeguards.

We do not sell personal information and do not sell contact information. We also do not “share” personal information for cross‑context behavioral advertising. We do not use your personal images or personal information in advertising without your consent.


7) User‑Generated Content (UGC)

If you post reviews or other content in public areas, it becomes publicly accessible. We will not use your UGC (including photos) in advertising without your consent.


8) Promotions, Incentives & Free Gifts

We do not offer incentives solely to collect personal information. From time to time, we may run promotions or free gifts:

  • When part of a purchase (e.g., bundled offer at checkout), or

  • As part of a marketing campaign whose primary purpose is not to collect personal information.
    Participation is optional, and any related data collection will be limited to what is necessary and explained at the point of entry.


9) Children’s Data

The Services are not intended for children. We do not knowingly collect personal information from children. If you are a parent/guardian and believe a child has provided personal information, contact us to request deletion. As of this Policy’s effective date, we have no actual knowledge of selling or sharing personal information of users under 16.


10) International Transfers

Your information may be transferred to and processed in countries other than your own. Where required (e.g., EU/UK), we rely on lawful transfer mechanisms, such as Standard Contractual Clauses.


11) Your Rights & Choices

Depending on your location, you may have rights such as access/know, delete, correct, portability, restrict/objection (EU/UK), withdraw consent, and the right to opt out of targeted advertising where applicable. We will not discriminate against you for exercising these rights.

  • Opt‑out of marketing emails: Use the unsubscribe link in our emails. We may still send non‑marketing messages (e.g., order updates).

  • Cookies/targeting: Manage via browser settings and cookie preferences; we honor GPC signals as an opt‑out preference.

  • Authorized agents (US states like CA/VA/CO/CT/UT): You may designate an agent; we will require proof of authorization and verify your identity.

  • Verification: We may ask for information to verify your request (e.g., email, order details).

  • EU/UK: You may have the right to lodge a complaint with your local data protection authority.