Open Mystery Boxes & Receive Shipped Real-World Items

We may obtain some of your personal information in order to provide our Services. The information we collect is necessary to provide our Services, and we shall not collect any information which is not required by the nature of our Services. We may collect some of the following personal information:

• Name
• E-mail address
• IP address and server log files
• Payment information
• Shipping address
• Other information which you choose to provide

In order to register to use our Services you have to provide your name. Lootie will only use this information to create an account for you and to address you whenever we contact you. We require your e-mail address when you register to use the Services or you may provide it when you subscribe to the newsletter or when you contact our support. We will only use your email address in accordance with this Privacy Policy, including the rules for the duration of the collection. We collect your email address to comply with our contractual obligation of providing our Services, or with your consent, depending on the purpose of collection. We will collect your email address in the following cases: - When you register for an account with us. We will collect your email address to create and manage an account for you and to send you notifications about your account such as when you want to recover your password, receive a message, we change our privacy policy, or if there is a data breach. An account is necessary to access some of our Services and if you do not provide us with your e-mail address for this purpose you will not be able to access these Services. - When you contact us. We will collect your email address whenever you contact us through our email support@lootie.com. Whenever we collect your email address this way, we will only use it in order to respond to your enquiry. - When you subscribe to the newsletter. We will collect your email address when you subscribe to receive more information about Lootie. By subscribing you provide your consent for receiving the emails with the latest news regarding Lootie and related products. We integrate security systems to prevent malicious attempts and exploits of the Site. We scan IP addresses and ban IP addresses that show malicious signs such as too many password failures, seeking exploits and similar. We process this information in the interest of protecting the integrity of the Site and of the databases connected with it. We collect your IP address on the basis of a legitimate interest to maintain the integrity and safety of our databases. The Site collects a series of general data and information when a person accesses the Site. This general data and information are stored in the server log files. Information that is collected includes (1) the software and browser types and versions used, (2) the operating system used by the accessing system, (3) the date and time of access to the Services, (4) the internet service provider of the accessing system, and (5) any other similar data and information that may be used in the event of attacks on our information technology systems. We collect this information for breach investigation purposes. When using this information, we may connect specific log files with specific Users provided that Users are logged in their Lootie accounts when accessing the Site. This information is needed to (1) troubleshoot problems and correct system bugs, (2) deliver the content of our Site correctly, (3) optimise the content of our Site as well as its advertisement, (4) ensure the long-term viability of our information technology systems and website technology, and (5) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack. We collect this information based on our legitimate interest. We may collect your physical address in order to deliver the items that you had requested. We may utilize third-party delivery services who need this information in order to successfully deliver the item. All payments on the Site are conducted through third party service provider ZEN.COM Limited with its registered office at 31/F, Tower Two, Times Square, 1 Matheson Street, Causeway Bay, Hongkong. You hereby accept that by making a purchase through our Site, your personal information is being processed and handled in accordance with ZEN’s privacy policy available herehttps://www.zen.com/privacy-policy. Some Services will not be available to you if you do not provide the requested information. We may keep records of any questions, complaints or compliments made by you and the response, if any. Whenever you contact us, we shall collect any information which you chose to provide. We shall store and use this information only for the purpose of responding to your enquiries. information contained within the enquiry, free from any personally identifiable information, will be stored on our servers for the purpose of improving our Services and providing the best customer support possible. We do not sell or rent personal information to any Third-Party. We use collected information for our internal and marketing purposes, as necessary by the nature of the Services, and only in accordance with this Privacy Policy. In some instances, we are obliged to comply with court orders and government requests and provide information or parts of it to authorized bodies. We may disclose your personal information to our partners, agents and operators under confidentiality or similar agreements, including payment processors and shipping companies who we believe reasonably need to come into contact with that information: (i) to provide Services per your request; (ii) to administer our business or the Site; (iii) to provide customer support; (iv) to update account information; (v) to forward updates, announcements, and newsletters; (vi) to respond to your communications, and communicate with you about the Site and other activities related to the Site; (vii) in the event of any reorganization, merger, sale, joint venture, assignment, transfer or disposition of all or any portion of the Site’s business or operations (including without limitation in connection with bankruptcy or any similar proceedings); or (viii) as otherwise authorized by you. We have implemented security procedures and measures in order to ensure appropriate protection of the information we process, against any misuse, unauthorized access, disclosure or modification. We will remove any information about you upon your request no later than fifteen (15) days after the request has been made. We acknowledge that the safety of your information is one of the highest priorities and therefore only authorized processors have access to your information. Although we take all appropriate measures in respect to keeping your information secure, you understand that no data security measures in the world can offer 100% protection. If we ever find or suspect a personal data breach we will without delay, within seventy-two (72) hours after becoming aware of it, notify the appropriate supervisory authority about the breach and Users where necessary. The processing of the information is being performed automatically, without human intervention. However, whenever you contact us through email, the information within the email will be handled and processed by a real person in order to provide you with the answer to the email.

Information will be stored on secure servers hosted by MongoDB, Inc. 5th Floor, 229 West 43rd Street, 11236 New York – USA (MongoDB). Hosted servers are controlled and maintained in accordance with sufficient privacy safeguards. MongoDB may store or transfer information to servers located in countries deemed adequate by the European Commission, or in countries which European Commission has not deemed inadequate, provided that such countries implement appropriate and suitable safeguards regarding the security of personal information. Information is stored on the servers only for the duration necessary for providing the Services and maintaining the integrity of our databases. We will maintain records of processing activities for the purpose of demonstrating compliance with EU GDPR. Some services require the use of third-party solutions. When you are redirected from our Site to the third-party website you are no longer interacting with our Site. Any information that you provide through third-party websites will be handled and processed in accordance with their Privacy Policies and other applicable terms.

If you register an account with us we will store your information for as long as you have an active account. As soon as you delete your account we will remove all information we have collected about you unless we have appropriate legal grounds for continuing their processing.

You may request to:

• Obtain confirmation if your information is processed, access information about you that we had stored as well as supplementary information.
• Receive a copy of information on you that is held by Lootie in a structured, commonly used and machine-readable format.
• Correct your information.
• Have your personal information deleted.
• Object to the processing of information by Lootie.
• Restrict the processing of your information by Lootie.
• File a complaint with a supervisory authority.

These rights might be limited if they are subject to Lootie’s own legitimate interests and regulatory requirements.

We reserve the right to change our Privacy Policy at any time. The current version of our Privacy Policy is available through the Site, indicating the effective date. You are encouraged to periodically check our Privacy Policy.