Privacy Policy

Creature Cabinet is operated by BK Ventures, LLC – Privacy Policy
Effective Date: March 25, 2026

At Creature Cabinet (“we,” “us,” or “our”), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website creaturecabinet.com (the “Site”), shop with us, or interact with our services.

By using the Site, you consent to the practices described here. This policy complies with the Maryland Personal Information Protection Act (Md. Code Ann., Com. Law § 14-3501 et seq.), the Maryland Online Data Privacy Act (MODPA), and other applicable laws. If you do not agree, please do not use the Site.

1. Information We Collect

We collect only what is reasonably necessary and proportionate to provide our services (data minimization under MODPA).

1.1 Personal Information (voluntarily provided)

• Name
• Email address
• Billing and shipping addresses
• Phone number
• Payment information (processed securely by third-party processors; we do not store full card details)
• Account credentials (if you create an account)

1.2 Automatically Collected Information

• IP address, browser/device details
• Cookies and tracking technologies (session and persistent)
• Usage data (pages visited, actions taken)

1.3 Information from Third Parties

• Delivery status from suppliers/carriers

We do not collect sensitive data (e.g., health, biometric, racial, or precise geolocation data) beyond what is strictly necessary for order fulfillment.

2. How We Use Your Information

• Order processing and fulfillment (via third-party suppliers)
• Customer support
• Personalization and cart retrieval
• Marketing (with consent/opt-in)
• Site improvement and security
• Legal compliance

All uses are limited to what is reasonably necessary.

3. How We Share Your Information

We do not sell your personal information and never will. We share data only as necessary:

• With service providers (payment processors, shipping carriers, IT support) under strict contracts.
• With drop-shipping suppliers and carriers (e.g., USPS, FedEx) for order fulfillment only.
• For legal obligations (including Maryland data-breach laws).
• In business transfers (with notice where feasible).

We disclose the categories of third parties (fulfillment partners, carriers) and the type of processing they perform (order delivery).

4. Data Security

We use encryption (SSL/TLS), firewalls, and restricted access, as required by Maryland law. In case of a breach, we notify affected individuals and the Maryland Attorney General as mandated. No system is 100% secure.

5. Your Choices and Rights (Including MODPA Rights)

Under MODPA and Maryland law, you have the right to:

• Access and obtain a copy of your personal data (in portable format where feasible).
• Correct inaccurate data.
• Delete your personal data (subject to legal exceptions).
• Opt out of:
  • Targeted advertising
  • Sale of personal data (we do not sell)
  • Profiling that produces legal or similarly significant effects
• Withdraw consent (where applicable).

We do not use automated decision-making that produces legal or similarly significant effects on consumers except as strictly necessary for order fulfillment.

How to exercise these rights: Email us at [email protected] with a verifiable request (we may ask for ID confirmation). We respond within 45 days (extendable by another 45 days if needed). You may appeal any denial by replying to our response.

We also honor universal opt-out preference signals (e.g., Global Privacy Control / GPC browser signals) for targeted advertising.

Cookies and Marketing Opt-Out

• Manage cookies in your browser settings (may affect functionality).
• Unsubscribe from promotional emails via the link in any email or by contacting us. Transactional emails cannot be opted out of.

6. Email Communications

Compliant with CAN-SPAM. Promotional emails include unsubscribe options.

7. Data Retention

We retain data only as long as necessary for the purposes above or as required by law (e.g., 7 years for tax records). Account data is deleted upon request or closure (except legally required retention).

8. Third-Party Links

We are not responsible for third-party privacy practices.

9. Children’s Privacy (COPPA)

The Site is not for children under 13. We delete any unknowingly collected data from children under 13 promptly.

10. International Users

Data of international users is processed in the United States under U.S. and Maryland law.

11. Data Protection Assessments

For any high-risk processing (e.g., targeted advertising or profiling), we conduct and document data protection assessments as required by MODPA.

12. Maryland Online Data Privacy Act (MODPA) Disclosures

Effective for processing on or after April 1, 2026, we fully comply with MODPA. This policy serves as our required privacy notice and discloses:

• All categories of personal data collected and processed.
• Purposes of processing.
• All third-party suppliers and carriers are contractually bound to use the data solely for order fulfillment.
• Your full rights and how to exercise them.

We do not process sensitive data except as strictly necessary, and we do not sell any data.

13. Changes to This Privacy Policy

We may update this policy. Changes will be posted with a new effective date. Your continued use constitutes acceptance. Material changes will be notified via email or prominent Site banner where required.