Privacy Policy

1. Information We Collect

Depending on how you interact with our website and services, we may collect the following categories of information.

Personal and business information

• Full name and business name.
• Email address and telephone number.
• Billing and transaction information.
• Information submitted through forms, inquiries, or customer support communications.

Instagram account information

• Instagram username and profile URL.
• Account targeting preferences and competitor usernames.
• Account configuration and automation settings.
• Authentication information or verification codes provided during onboarding, where necessary.
• Account performance information and engagement metrics.

Website and technical information

• IP address and approximate location derived from it.
• Browser, device, and operating system information.
• Website usage information and referral sources.
• Cookies and similar tracking technologies, where implemented.

We seek to collect only information reasonably necessary for our identified business purposes.

2. How We Use Your Information

We may use collected information to:

• Respond to inquiries and communicate with customers.
• Set up, configure, operate, and manage requested automation services.
• Connect authorized Instagram accounts to relevant systems.
• Process payments, maintain transaction records, and administer subscriptions.
• Deliver technical assistance and customer support.
• Monitor service reliability, investigate errors, and improve website functionality.
• Detect unauthorized activity, fraud, and security threats.
• Comply with applicable legal and regulatory obligations.
• Send promotional communications where permitted by law and applicable consent requirements.

We will not use personal information for materially unrelated purposes without an appropriate legal basis or consent.

3. Instagram Account Authorization

Certain services may require you to provide account access credentials, authentication codes, or other information necessary for configuration.

By submitting this information, you confirm that you own the account or are authorized to grant access.

You authorize ToyBox.Marketing and authorized service providers to use the information for the specific purpose of providing your requested services.

We recognize that authentication credentials are sensitive information and will apply safeguards appropriate to their sensitivity.

We will not intentionally use your account access to publish unrelated content or perform activities outside the agreed scope of service.

You may request that account access be discontinued by contacting our support team. Revoking access may prevent us from continuing to provide some or all of the requested services.

4. Third-Party Service Providers

We may engage third-party companies to assist with:

• Payment processing.
• Website hosting and infrastructure.
• Customer relationship management.
• Form submissions and customer communications.
• Automation software and account management.
• Website analytics and operational monitoring.

These service providers may process information necessary to perform services on our behalf or as otherwise disclosed at the time of collection.

We take reasonable steps to ensure that service providers handling personal information are subject to appropriate privacy and security obligations.

Third-party services may maintain their own privacy policies and practices.

We do not control the independent data practices or enforcement decisions of Instagram, Meta, or other external platforms.

5. Payment Information

Payments may be processed through third-party payment service providers.

Depending on the payment method, financial and transaction details may be collected and processed by the applicable provider.

ToyBox.Marketing may receive information such as payment status, transaction references, billing information, and amounts paid for customer support, accounting, and administrative purposes.

Payment information is handled according to the relevant provider's security practices and applicable legal requirements.

6. Cookies and Website Analytics

Our website may use cookies or similar technologies to support functionality, maintain preferences, understand website traffic, and evaluate marketing performance.

Where required, we will obtain consent before using non-essential cookies or tracking technologies.

You may be able to control cookies through your browser settings or any consent controls provided on our website.

Disabling certain cookies may affect website functionality.

7. Information Security

We take reasonable administrative, technical, and organizational measures designed to safeguard personal information against unauthorized access, disclosure, loss, misuse, and alteration.

Access to sensitive customer information is restricted to personnel and service providers who require it for authorized business purposes.

However, no internet-based service, electronic transmission, or storage system can be guaranteed to be completely secure.

We cannot guarantee absolute protection against every potential cybersecurity incident or unauthorized third-party action.

This statement does not limit our obligations to protect personal information under applicable privacy laws.

8. Data Retention

We retain personal information only for as long as reasonably necessary to provide services, fulfill identified business purposes, meet legal requirements, resolve disputes, and maintain appropriate business records.

When information is no longer required, we will securely delete, destroy, or anonymize it, subject to applicable legal and operational requirements.

Customers may contact us to request information about the retention or deletion of their personal information.

9. Sharing and Disclosure of Information

We do not sell customer personal information to data brokers.

We may disclose personal information:

• To authorized service providers supporting our operations.
• When necessary to provide a service specifically requested by the customer.
• To professional advisers who are subject to appropriate confidentiality obligations.
• When legally required by a court, regulator, or applicable law.
• Where reasonably necessary to investigate fraud, security incidents, or unlawful activity.
• In connection with a business transaction, subject to applicable privacy requirements.

We will not disclose personal information for unrelated third-party marketing purposes without appropriate authorization or another lawful basis.

10. International Processing

Some of our service providers, infrastructure, or authorized personnel may operate outside British Columbia or Canada.

Where personal information is processed internationally, it may be subject to the laws of the jurisdiction in which it is stored or accessed.

We take reasonable steps to protect information transferred to or processed by external service providers, consistent with applicable privacy requirements.

11. Your Privacy Rights

Subject to applicable law, you may request:

• Access to personal information we hold about you.
• Correction of inaccurate or incomplete information.
• Information about how your personal information has been used or disclosed.
• Withdrawal of consent where legally permitted.
• Deletion of personal information where applicable.
• Information about our privacy practices or a review of a privacy complaint.

Certain information may need to be retained for legal, accounting, security, or contractual reasons.

We will respond to requests in accordance with applicable privacy legislation.

12. Marketing Communications

If you provide your contact information, we may contact you regarding an inquiry, requested service, onboarding process, payment, or customer support matter.

Promotional emails or commercial electronic messages will only be sent where permitted by applicable law, including Canada's Anti-Spam Legislation where relevant.

Where required, promotional communications will include a method for withdrawing consent or unsubscribing.

You may opt out of promotional communications without affecting essential communications relating to an active service.

13. Children's Privacy

Our services are intended for individuals who are at least 18 years old and legally able to enter into a contract.

We do not knowingly offer our services to children or intentionally collect personal information from individuals under 18.

If we become aware of such collection without an appropriate legal basis, we will take appropriate steps to address it.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, technologies, business practices, or legal obligations.

The updated version will be published on our website with a revised effective date.

Where required by law, we will provide additional notice or obtain consent before making material changes to how personal information is handled.

15. Contact and Privacy Officer

For questions, concerns, privacy requests, or complaints, please contact:

You may also contact the Office of the Information and Privacy Commissioner for British Columbia regarding privacy concerns within its jurisdiction.