Privacy Policy

1. Who we are

Tonie Rentals is an independent rental club, not affiliated with, endorsed by, or sponsored by tonies GmbH. We rent Tonie audio figurines, and Tonieboxes as an add-on, to families by mail in the United States. Argo 34, Inc., doing business as Tonie Rentals, is the business responsible for the personal information described in this policy. The policy covers our website (https://tonierentals.com), our rental service, and our refer-a-friend program.

You can reach us at hello@tonierental.com or by mail at Argo 34, Inc., doing business as Tonie Rentals, 770 Mays Blvd #3558, Incline Village, NV 89451.

2. Information we collect

Information you give us. When you sign up, manage your plan, or contact us, you may give us:

• contact details: your name, email address, and phone number (if you provide one);
• addresses: your shipping address, plus billing details you enter on Stripe's checkout, such as your billing ZIP code;
• your plan and lineup: the plan and number of slots you choose, any Toniebox rental (including the model and color you pick), the Tonies you pick, and your "Surprise me" months;
• messages: anything you send us, such as questions, feedback, reports of a lost or damaged item, or an advertisement you send us for a price match; and
• cancellation feedback: your reasons for leaving, if you choose to tell us.

Payment information, handled by Stripe. You enter payment details on Stripe's secure checkout, not on our website, both for your membership and for any Tonie you buy. We never see or store your full card number or security code. Stripe shares limited details with us, such as your card brand, the last four digits, the expiration date, your billing ZIP code and country, and whether a payment succeeded. Stripe also stores your subscription for us, saving details like your lineup choices, your referral details, and which version of our Rental Agreement you accepted and when, as subscription metadata.

Referral codes. Our website gives every visitor a personal referral code for their share link. It's a random code that doesn't include your name or contact details. If you arrive through a friend's link, we also remember the code in that link. Both codes are saved in your browser's local storage. When you sign up, we save them on your Stripe subscription, along with a count of the friends who have joined using your link and the free months you've earned.

Information we create while serving you. We keep records of your orders, shipments, tracking numbers, returns, the condition of returned Tonies and Tonieboxes, purchases, fees, refunds, free months, the emails we send you, and our messages with you. If you rent a Toniebox, we also keep track of its shipment and return, and whether it's ready for the next family.

Information collected automatically. When you visit our website or get email from us:

• Server logs. Our hosting provider, Vercel, automatically records technical details such as your IP address, browser and device type, the pages you request (including the referral code in the address, if you arrived through a share link), the page that referred you, and the date and time. We use these logs to keep the site running and secure.
• Local storage. Our site saves your lineup and your referral codes in your browser's local storage, so they're still there if you leave and come back. This stays on your device. We receive your picks and referral codes only when you start checkout.
• Email delivery. When we send you an email, our email service provider records delivery information, such as whether the message was delivered or bounced.
• Stripe's pages. When you check out or use the customer portal, Stripe may collect device and connection information to process payments and prevent fraud, under Stripe's privacy policy.

Information from others. Shipping carriers tell us about delivery and return status. Stripe tells us about payment status and may flag possible fraud.

What we don't collect. We never collect your friends' contact details. When you share your link, you send it through your own apps, and we don't see who you send it to. We don't ask for information about your children, and we don't need any, so please don't send us your child's name, photo, or other details. We don't receive any data from your Toniebox (including one you rent from us), the tonies app, or your tonies account.

3. How we use information

We use personal information to:

• run the service: set up your plan, ship your picks and any rented Toniebox, choose "Surprise me" Tonies, handle swaps and returns, and keep track of the items in your care;
• handle payments and purchases: collect subscription charges, process Keep-it purchases and price-match requests, issue refunds, and charge any replacement fees described in our Rental Agreement;
• send you automatic emails: order and welcome confirmations (with your renewal terms and how to cancel), swap and return reminders (including reminders to remove a rented Toniebox from your tonies account before you return it), renewal reminders, receipts for Tonies you keep, referral reward updates, and notices about price or policy changes;
• answer you: reply to your questions and requests;
• run the referral program: give you a share link, count paid sign-ups that used your code, apply free months, and prevent abuse;
• keep things safe: prevent fraud and abuse, protect our Tonies, Tonieboxes, and systems, and enforce our Rental Agreement;
• improve and plan: understand which Tonies families enjoy, plan our inventory, and improve the service, using combined or de-identified information where we can; and
• meet legal obligations: keep tax and accounting records and respond to lawful requests.

Marketing emails. We may occasionally email you about new Tonies, features, or offers. Every marketing email includes an unsubscribe link. Even if you unsubscribe, we'll still send the automatic emails about your plan, shipments, purchases, and billing.

We don't use your information for targeted advertising or to build advertising profiles. Stripe uses automated fraud checks that may occasionally decline a payment. If that happens to you, contact us and we'll help.

4. How we share information

We share personal information only as described below:

• Stripe processes payments and Keep-it purchases, stores your subscription, lineup, and referral details, and runs the customer portal you reach through your manage link.
• Shipping carriers (USPS or UPS), and any shipping-label service we use, receive the name and address needed to deliver your Tonies, any rented Toniebox, and return mailers or labels, and sometimes your email or phone number for delivery updates.
• Our email service provider sends our automatic emails, such as order confirmations, reminders, receipts, and referral updates, on our behalf.
• Other service providers that help us run the business, such as Vercel (website hosting).
• Professional advisers, such as lawyers, accountants, and insurers, when needed.
• For legal reasons: when we believe in good faith that the law requires it (for example, a subpoena or court order), or to protect the rights, property, or safety of our customers, ourselves, or others, including to investigate fraud or collect amounts owed.
• In a business transfer: if we're involved in a merger, acquisition, financing, reorganization, or sale of all or part of our business, personal information may be transferred as part of that deal. The new owner will have to honor this policy, or we'll tell you before your information becomes subject to a different one.
• With your permission, or at your direction.

Our service providers may use personal information only to provide their services to us.

Referrals stay private. We don't give the person who referred you, or the friends you refer, any of your personal information. We may tell you how many friends have joined using your link, but not who they are.

5. Children's privacy

Tonie Rentals is made for families, but our website and service are for adults. You must be at least 18 to sign up.

Our website isn't directed to children under 13, and we don't knowingly collect personal information from children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If we learn we've collected personal information from a child under 13, we'll delete it promptly. If you believe a child has given us personal information, please contact us at hello@tonierental.com.

We don't receive any information about how your child uses a Tonie or Toniebox. Tonieboxes and the tonies app are operated by tonies GmbH under its own privacy policy.

6. Cookies, local storage, and browser signals

No ad trackers. Our website doesn't use advertising cookies, tracking pixels, or third-party share buttons, and we don't use analytics tools. If we ever add analytics, we'll update this policy before we start.

Local storage. We use your browser's local storage only to remember your lineup before checkout, your own referral code, and the referral code of the friend whose link brought you here (if any). It isn't used to track you, and it stays on your device until it's cleared. You can delete it anytime by clearing your browser's data for our website. If you do, any picks you haven't checked out will be lost, and if you haven't signed up yet, a friend's referral may no longer be credited.

Sharing your link. When you share your referral link, our site uses your device's built-in share menu, copies the link for you to paste, or opens your own email or text-messaging app. Those apps send the message, and we don't see who receives it.

Stripe's pages. Checkout and the customer portal run on Stripe's own pages, where Stripe may use cookies and similar technologies to process payments, prevent fraud, and remember you if you use Link. Stripe explains this in its privacy policy.

Global Privacy Control. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of the sale or sharing of your personal information. We don't sell or share personal information in the first place, so there's nothing else you need to do.

Do Not Track. Some browsers send "Do Not Track" (DNT) signals. There's no common standard for responding to them. Because we don't track visitors across other websites, our site works the same way whether or not DNT is turned on.

7. How long we keep information

We keep personal information only as long as we need it for the purposes in this policy. After that, we delete it or de-identify it. Typical periods:

• Plan, lineup, rental, purchase, and referral history: while your plan is active, and for 3 years after it ends and all rented items are returned or settled, so we can answer questions, honor or reverse referral rewards, and resolve fees or disputes;
• Payment, billing, and tax records: 7 years after the transaction, to meet tax and accounting requirements;
• Messages with us, including price-match requests: 3 years after our last contact, unless they're part of a record we must keep longer;
• Email delivery records: as long as our email service provider keeps them, and no longer than we keep your other records;
• Server logs: generally no more than 30 days, unless we need them longer to investigate a security issue or misuse;
• Your saved lineup and referral codes in your browser: until you or our site clears them; and
• Unsubscribe requests: we keep your email address on a do-not-email list so we can keep honoring your choice.

We may keep information longer when the law requires it, or when we need it to resolve a dispute, enforce our agreements, or prevent fraud. Stripe keeps payment records as required by its own legal obligations.

8. How we protect information

We use reasonable administrative, technical, and physical safeguards to protect personal information. Our website uses encrypted (HTTPS) connections. Payments are handled by Stripe, which is certified under the Payment Card Industry Data Security Standard (PCI DSS). We limit access to personal information to people who need it to run the service.

Keep your manage link private. Your manage link works like a key to your plan: anyone who has it can view and change your plan. Don't share or post it. If you think someone else has it, contact us right away. (Your referral link is different: it's meant to be shared, and it doesn't give anyone access to your plan.)

No website or storage system is perfectly secure, so we can't guarantee absolute security. If a data breach affects your personal information, we'll notify you as the law requires.

9. Your rights and choices

Choices you always have:

• Update your information: change your billing details through your manage link, or email us to change your shipping address or anything else.
• Stop marketing emails: use the unsubscribe link in any marketing email.
• Clear your saved lineup and referral codes: clear your browser's data for our website.

State privacy rights. Depending on where you live, state privacy laws (such as those in California, Colorado, Connecticut, Virginia, and a growing number of other states) may give you the right to:

• access the personal information we have about you, and get a copy in a portable format;
• correct inaccurate personal information;
• delete personal information we have about you;
• opt out of the sale of personal information, sharing for targeted advertising, and profiling that produces legal or similarly significant effects, none of which we do; and
• be treated equally: we won't deny you service, charge you more, or give you a lower level of service because you used these rights.

Some of these laws apply only to businesses above certain size thresholds. Whether or not a particular law applies to us, we'll honor access, correction, and deletion requests from any customer, subject to the exceptions below.

Exceptions. We may keep information we need to finish a rental (for example, a Tonie or Toniebox that hasn't come back), collect amounts owed, honor or reverse referral rewards, prevent fraud, meet legal or tax obligations, or defend legal claims. If you ask us to delete your information while you have an active plan or rented items at home, we'll need to end your plan and complete your returns first.

Categories of information. In the past 12 months, we've collected these categories of personal information: identifiers (such as your name, email address, shipping address, IP address, and referral codes); customer records (such as your phone number, billing details, and limited payment card details); commercial information (such as your plan, lineup, rentals, purchases, payments, fees, and referral rewards); and internet activity (such as server logs). We collect them from the sources described in Information we collect, use them for the purposes in How we use information, and disclose them only to the recipients listed in How we share information.

California "Shine the Light." We don't share personal information with third parties for their own direct marketing purposes.

10. How to make a privacy request

How to ask. Email hello@tonierental.com with the subject line "Privacy request," or write to us at the address in Contact us. Tell us what you'd like us to do (for example, send you a copy of your information or delete it), and include the email address you used with us.

Verification. To protect your information, we'll check that the request really comes from you by matching details you give us with our records. Usually that means confirming the request from the email address on your plan. For more sensitive requests, we may also ask for something like your shipping ZIP code or a recent order date. We'll use those details only to verify and handle your request, and we'll never ask for your full card number or Social Security number.

Authorized agents. You can ask someone else to make a request for you. We'll need proof that you gave them signed permission, and we may ask you to confirm your identity with us directly, unless they hold a valid power of attorney.

Timing and cost. We'll confirm we've received your request within 10 business days and respond within 45 days. If we need more time (up to another 45 days), we'll tell you why. Requests are free, but where the law allows, we may decline, or charge a reasonable fee for, requests that are clearly unfounded or excessive.

Appeals. If we decline your request in whole or in part, we'll explain why. You can appeal by replying to our decision, or by emailing hello@tonierental.com with the subject line "Privacy appeal." We'll respond in writing within 45 days and explain the outcome. If you're not satisfied, you can contact your state attorney general.

11. Other companies' services

Some parts of the Tonie Rentals experience are run by other companies under their own privacy policies:

• Stripe: checkout, payment processing, Link, and the customer portal (stripe.com/privacy);
• Apple Pay and Google Pay, if you choose to pay with them;
• tonies GmbH: Tonieboxes (including one you rent from us), the tonies app, your tonies account, and the audio content;
• your own apps: the email, messaging, or social apps you use to share your referral link; and
• USPS or UPS: delivery and tracking.

We aren't responsible for how these companies handle personal information, so please review their policies.

12. A US-only service

Tonie Rentals serves customers in the United States only, and our website is intended for people in the United States. We store and process personal information in the United States. Some of our service providers may also process it in other countries where they operate.

If you visit our website from outside the US, your information will be handled in the US under this policy.

13. Changes to this policy

We may update this policy as our service or the law changes. We'll post the new version on this page with a new "Last updated" date.

If we make a material change, especially to how we use or share personal information, we'll email current customers before it takes effect. If a change would let us use personal information we've already collected in a materially different way, we'll ask for your consent where the law requires it.

14. Contact us

Questions, requests, or concerns about privacy? Contact us:

• Email: hello@tonierental.com (subject line: "Privacy")
• Mail: Argo 34, Inc., doing business as Tonie Rentals, Attn: Privacy, 770 Mays Blvd #3558, Incline Village, NV 89451