Privacy Policy

Last Updated: July 23, 2026

This Privacy Policy explains how RIZMOS LIMITED, trading as Marktox ("we", "us", "our"), collects, uses, discloses, and protects personal information when you visit www.marktox.com or buy from us.

Reading time: about 8 minutes. If you want only the California section, jump to section 10. If you want to opt out of the sale or sharing of your data, go to Do Not Sell or Share My Personal Information.

1. Who We Are

Data controller / business RIZMOS LIMITED
Trading as Marktox
Address Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, Hong Kong
Privacy contact contact@marktox.com
Phone +1 (628) 895-8056

2. Notice at Collection — What We Collect and Why

We collect the categories of personal information listed below. This table also serves as our Notice at Collection under California law.

Category Examples Source Why we collect it Who we disclose it to How long we keep it
Identifiers Name, billing and shipping address, email, phone number, account ID You, at checkout or sign-up Process and deliver orders, send order and tracking updates, provide support, prevent fraud Payment processors, carriers, order-management and email providers 7 years after your last order (tax and accounting records)
Commercial information Order history, items viewed, returns, refunds Your activity on the Site Fulfill orders, handle returns, recommend products, keep accounting records Order-management, accounting, analytics providers 7 years after your last order
Payment information Card type, last four digits, billing ZIP, authorization result Your bank, via our payment processor Take payment, issue refunds, investigate chargebacks Payment processors only Token and last four digits for 7 years; we never receive or store the full card number or CVV
Internet and device activity IP address, browser and device type, operating system, pages viewed, referring URL, session duration Automatically, via cookies and similar technologies Operate the Site, measure performance, diagnose faults, protect against fraud and abuse Hosting, analytics, security, and advertising providers 26 months
Geolocation (approximate) City and region derived from IP address Automatically Calculate sales tax and shipping, detect fraud, choose site language and currency Hosting, tax-calculation, analytics providers 26 months
Communications Emails, chat messages, call notes, reviews You Answer questions, resolve disputes, improve service, publish verified reviews Helpdesk and email providers 3 years after the last contact
Inferences Product interests and audience segments derived from browsing and purchase behavior Derived by us and our advertising partners Personalize the Site and advertising Advertising platforms 26 months, or until you opt out

Sensitive personal information. We do not collect Social Security numbers, driver's licence or passport numbers, precise geolocation, racial or ethnic origin, religious beliefs, union membership, genetic or biometric data, health information, or the contents of your mail, email, or messages other than those you send to us. Because we do not collect it, we do not use or disclose it for any purpose that would require a "Limit the Use of My Sensitive Personal Information" link.

3. How We Use Personal Information

  • Process, fulfill, and deliver your order, and send order confirmations and tracking updates
  • Handle cancellations, returns, exchanges, and refunds
  • Provide customer support and respond to your messages
  • Verify payments, detect fraud, and manage chargebacks
  • Maintain accounting, tax, and legal records
  • Operate, secure, and improve the Site
  • Send marketing email where you have opted in, and measure whether it worked
  • Show and measure advertising on other platforms
  • Comply with law and enforce our Terms and Conditions

We do not use your personal information to make decisions producing legal or similarly significant effects about you without human involvement.

4. Information Collected at Checkout

At checkout we collect your name, shipping and billing address, email address, and phone number. Each has a specific purpose:

  • Email address — order confirmation, shipping confirmation, tracking link, and any message we need to send about your order. Order-related email is transactional; you receive it whether or not you subscribe to marketing.
  • Phone number — passed to the carrier so that they can contact you about a delivery, and used by us if we cannot reach you about a problem with your order.

Marketing email is separate and requires your opt-in. You may unsubscribe at any time using the link in any marketing message, or by emailing contact@marktox.com. Unsubscribing from marketing does not stop transactional email about an order you have placed.

5. Cookies and Similar Technologies

Type Purpose Can you refuse it?
Strictly necessary Cart contents, checkout, login session, fraud prevention, load balancing No — the Site cannot function without these
Performance and analytics Aggregate page views, traffic sources, error rates Yes
Functional Remembering language, currency, and display preferences Yes
Advertising and targeting Measuring ad performance and showing relevant ads on other sites Yes

You can manage non-essential cookies through the cookie banner shown on your first visit, and change your choice at any time through the "Cookie Preferences" link in our footer. You can also block or delete cookies in your browser settings; blocking strictly necessary cookies will prevent checkout from working.

Global Privacy Control. We recognize and honor the Global Privacy Control (GPC) signal. When your browser or extension sends a GPC signal, we treat it as a valid request to opt out of the sale and sharing of personal information for that browser, and we apply it without requiring you to take any further step. If you are signed in, we apply it to your account as well.

6. How We Share Personal Information

We share personal information only with service providers who need it to perform work for us, and only under contracts that require them to protect it and prohibit them from using it for their own purposes:

  • Payment processors — to take payment and issue refunds
  • Shipping carriers (USPS, UPS, and FedEx) — to deliver your order
  • Ecommerce platform and hosting providers — to run the Site
  • Email and helpdesk providers — to send order updates and answer your messages
  • Analytics providers — to measure how the Site performs
  • Advertising platforms — to run and measure advertising
  • Accountants, auditors, and legal advisers — where required

We also disclose personal information where the law requires it, in response to a valid legal process, to protect our rights, property, or safety or those of others, and to a buyer or successor in the event of a merger, acquisition, or sale of assets.

We do not sell your personal information for money. Some sharing with advertising platforms may be treated as a "sale" or "sharing" under California and other state privacy laws because it involves cross-context behavioral advertising. You can opt out at Do Not Sell or Share My Personal Information.

7. How We Protect Your Information

  • All pages, including checkout, are served over HTTPS with TLS encryption.
  • Payment data is captured and processed by payment providers that maintain PCI DSS compliance. Card numbers and CVV codes are transmitted directly to the processor and never reach our systems.
  • Access to customer data by our staff is limited to those who need it, and is protected by unique accounts and multi-factor authentication.
  • We keep audit logs and review access periodically.

No method of transmission or storage is completely secure. If a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by the breach-notification laws of your state.

International Data Transfers

RIZMOS LIMITED is incorporated in Hong Kong and our fulfillment operations are in China. Personal information you provide is transferred to, stored, and processed in Hong Kong, mainland China, and the United States, and in other countries where our service providers operate, including our ecommerce platform, payment processors, and shipping carriers.

The shipping information needed to deliver your order — your name, address, and phone number — is transferred to our fulfillment facility in China and to the carrier handling your parcel. This is necessary to perform the contract you entered into when you placed your order.

We handle personal information in accordance with the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) and, for customers in the United States, in accordance with the state privacy laws described in sections 10 and 11 of this policy. Those rights apply to you regardless of where we are located or where your data is stored.

8. Data Retention

We keep personal information for the periods stated in the table in section 2. In summary: order and transaction records for 7 years to meet tax and accounting obligations; support communications for 3 years; analytics and advertising data for 26 months. When a retention period ends, we delete the data or irreversibly de-identify it. Data in encrypted backups is deleted on the backup rotation cycle.

9. Children's Privacy (COPPA)

Our products are for children. Our website is for adults.

www.marktox.com is an ecommerce site intended for parents, guardians, and other adults buying on a child's behalf. It is not directed to children, we do not market to children, and we do not knowingly collect, use, or disclose personal information from anyone under 13. This is our obligation under the Children's Online Privacy Protection Act (COPPA).

  • We do not offer child accounts, child profiles, chat, forums, or any feature designed for a child to use.
  • We do not ask a child for personal information at any point.
  • If we learn that we have collected personal information from a child under 13, we delete it promptly.

Information you give us about a child. To help you choose a size, you may tell us a child's age, height, or measurements. That information is given to us by you, an adult, not collected from the child. We use it only to answer your sizing question and to fulfil your order. We do not build a profile of a child, we do not use a child's details for advertising or personalisation, and we do not share them with advertising platforms. We delete sizing enquiries within 12 months.

Parents and guardians. If you believe we hold information about your child, email contact@marktox.com with the subject "COPPA Request". We will confirm, delete the information, and reply within 30 days. We do not condition any purchase or service on your providing more information about a child than is reasonably necessary.

10. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you the following rights:

  • Right to know — what categories and specific pieces of personal information we have collected about you, where we got them, why we collected them, and to whom we disclosed them, covering the 12 months before your request and, where feasible, beyond.
  • Right to delete — to have us delete personal information we collected from you, subject to legal exceptions such as completing a transaction, security, and record-keeping required by law.
  • Right to correct — to have inaccurate personal information corrected.
  • Right to opt out of sale or sharing — including cross-context behavioral advertising. Use Do Not Sell or Share My Personal Information or send a GPC signal.
  • Right to limit use of sensitive personal information — we do not collect sensitive personal information, so this right does not currently apply.
  • Right to non-discrimination — we will not deny you goods or services, charge you a different price, or provide a different level of quality because you exercised a privacy right.
  • Right to data portability — to receive your data in a portable, readily usable format.

How to make a request. Email contact@marktox.com with the subject "California Privacy Request", or call +1 (628) 895-8056, or use the form on our Do Not Sell or Share page.

Verification. To protect you, we verify your identity before acting on a request to know, delete, or correct. We ask you to confirm the email address on file and two pieces of information matching our records, such as an order number and order date. We do not ask for sensitive documents to verify a request.

Authorized agents. An agent may submit a request for you with your written, signed permission. We may still contact you to confirm the authorization.

Timing. We acknowledge a request within 10 business days and respond within 45 calendar days. Where more time is needed, we may extend by a further 45 days and will tell you why. Opt-out requests are honored within 15 business days.

Financial incentives. We do not offer financial incentives, loyalty programs, or price differences in exchange for personal information.

Metrics. We do not meet the threshold that requires publishing annual request metrics. If that changes, we will publish them here.

11. Privacy Rights in Other U.S. States

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, and other states with comprehensive privacy laws have rights to access, correct, delete, and obtain a copy of their personal information, and to opt out of targeted advertising, sale, and certain profiling.

Submit a request to contact@marktox.com with the subject "State Privacy Request". We respond within 45 days, extendable once by a further 45 days where reasonably necessary.

Right to appeal. If we decline your request, we will tell you why in writing. You may appeal by replying to that decision within 60 days with the subject "Privacy Appeal". We respond to appeals within 45 days with a written explanation. If your appeal is denied, you may contact your state Attorney General to submit a complaint.

13. Your Choices

  • Marketing email — unsubscribe using the link in any marketing message, or email contact@marktox.com.
  • Cookies — use the cookie banner or the "Cookie Preferences" link in our footer.
  • Targeted advertising — use our Do Not Sell or Share page, or send a GPC signal.
  • Account data — sign in to review and update your address book and order history, or email contact@marktox.com.
  • Do Not Track — browsers send DNT signals inconsistently and there is no common standard for responding to them. We do not respond to DNT. We do honor GPC, which is a recognized standard.

14. Third-Party Sites

This policy covers only www.marktox.com. Sites we link to have their own privacy practices, which we do not control.

15. Changes to This Policy

We may update this Privacy Policy. Material changes are announced on this page and, where the law requires it, notified to you by email. The "Last Updated" date at the top always reflects the current version. We review this policy at least once every 12 months, as California law requires.

16. Contact Us

RIZMOS LIMITED — Privacy Team

Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy, Central, Hong Kong

Email: contact@marktox.com | Phone: +1 (628) 895-8056

Hours: Monday - Friday, excluding US public holidays