Privacy Policy

Last updated: July 29, 2026

Thank you for visiting Mystery FC (mysteryfc.com). We respect your privacy and want to protect your personal information. To learn more, please read this Privacy Policy.

Information Collection

We collect information from you in several different ways on this site. One goal in collecting personal information from you is to provide an efficient, meaningful, and customized experience. For example, we can use your personal information to:

  • help make the Site easier for you to use by not having to enter information more than once;
  • help you quickly find information, products, and services;
  • help us create content that is most relevant to you;
  • alert you to new information, products, and services that we offer.

(a) Registration and Ordering. Before using certain parts of the Site or ordering products, you may be asked to complete an online registration or checkout form. During checkout, you will be prompted to provide certain personal information, including but not limited to your name, shipping and billing address(es), phone number, email address, jersey size and style preferences, and payment information. Payment card details are processed securely by our third-party payment processors and are not stored on our servers. We may also ask for your country of residence so we can comply with applicable laws and regulations. This information is used for billing purposes, to fulfill your orders (including curating your surprise jersey selection based on the preferences you provide), to communicate with you about your order and the Site, and for internal marketing purposes. If we encounter a problem when processing your order, your personal information may be used to contact you.

(b) Email Addresses and Phone Numbers. Several locations on the Site permit you to enter your email address or phone number for purposes including but not limited to: requesting that we notify you of new products, restocks, styles, or sizes; signing up for email or SMS newsletters and special offers; or joining our loyalty or rewards program. Providing this information is completely voluntary. We use it to deliver the information and offers you requested. You may unsubscribe or opt out at any time (see the Opt Out section below).

(c) Cookies and Other Technology. Like many sites, the Site employs cookies and web beacons (also known as clear GIF technology or “action tags”) to speed your navigation of the Site, recognize you and your access privileges, and track your Site usage.

(i) Cookies are small pieces of information that are stored as text files by your Internet browser on your computer’s hard drive. Most Internet browsers are initially set to accept cookies. You can set your browser to refuse cookies or remove them from your hard drive, but if you do, you may not be able to access or use portions of the Site. We use cookies to enable you to select products, place them in an online shopping cart, and purchase those products. If you do this, we keep a record of your browsing activity and purchase. Our cookies do not and cannot gather confidential information from your device, and they are not spyware.

(ii) Web beacons assist in delivering cookies and help us determine whether a web page on the Site has been viewed and, if so, how many times.

(iii) We may use third-party advertising and analytics companies to help tailor site content to users or to serve ads on our behalf. These companies may employ cookies and web beacons to measure advertising effectiveness (such as which web pages are visited or what products are purchased and in what amount). Information collected by these third parties through their own technologies is governed by their respective privacy policies.

(d) Log Files. As is true of most websites, the Site server automatically recognizes the Internet URL from which you access the Site. We may also log your Internet protocol (IP) address, Internet service provider, and date/time stamp for system administration, order verification, fraud prevention, internal marketing, and system troubleshooting purposes.

(e) Age. We respect children’s privacy. We do not knowingly or intentionally collect personal information from children under age 13. By using the Site, you represent that you are either 18 years of age or older, or using the Site with the supervision of a parent or guardian. If you are under the age of 13, please do not submit any personal information to us.

Information Use and Disclosure

(a) Internal Use. We use your personal information to process your orders and provide you with customer service. We may internally use your personal information to improve the Site’s content and layout, to improve outreach and for our own marketing efforts (including marketing our services and products to you), and to determine general marketplace information about visitors to the Site. In order to facilitate such use, we may share your information with affiliates under our control.

(b) Communications with You. We will use your personal information to communicate with you about the Site and your orders and deliveries. We may send you a confirmation email when you register or place an order, and service-related announcements on the rare occasions when necessary. If you submit your email address or phone number for newsletters, restock alerts, or special offers, we use it to deliver that information to you. You may unsubscribe from marketing messages at any time. Because we must communicate with you about orders you place, you cannot opt out of transactional emails related to your orders.

(c) External Use. We do not sell, rent, trade, license, or otherwise disclose your personal or financial information to anyone other than affiliates under our control, except that:

(i) As do most Internet retailers, we sometimes use third parties to perform specific functions on our behalf, and disclose the information needed for them to perform their service. For example, to deliver products we share information with shipping partners (such as UPS, DHL, or USPS), including your name, shipping address, email, and phone number, and with order tracking and returns platforms used to service your order.

(ii) To help you buy products and provide customer service, payment is handled by financial-services corporations such as credit-card processors and issuers. When your payment is submitted for authorization, industry-standard encryption is used to protect your information.

(iii) We may disclose information in response to requests from law enforcement officials conducting investigations; subpoenas; a court order; or if we are otherwise required to disclose such information by law. We also will release personal information where disclosure is necessary to protect our legal rights, enforce our Terms of Use or other agreements, or to protect ourselves or others, such as to reduce the risk of fraud.

(iv) We will not sell, trade, or rent personally identifiable information to other companies as part of our regular course of business. However, if we acquire, merge with, or are acquired by another company, or dispose of some or all of our assets, your personal information may be disclosed to another company, subject to the Privacy Policy in effect.

(v) We may share aggregated, non-personal information (such as the number of daily visitors to a particular web page) with third parties such as advertising partners. This information does not personally identify you.

Data Security

The Site incorporates physical, electronic, and administrative procedures to safeguard the confidentiality of your personal information, including Secure Sockets Layer (SSL) encryption for all transactions through the Site. We also take steps to protect your personal information in our facilities and rely on reputable third-party service providers for the physical security of our computer infrastructure.

While we use industry-standard precautions to safeguard your personal information, we cannot guarantee complete security. 100% complete security does not presently exist anywhere online or offline.

Opt Out / Corrections

Upon your request, we will (a) correct or update your personal information; (b) stop sending emails or texts to you; and/or (c) disable your account to prevent future purchases through that account. You can make these requests by emailing [email protected]. Please do not email your credit-card number or other sensitive information.

Cookies

We use cookies and similar tracking technologies to enhance your browsing experience, analyze site traffic, and personalize content. You can manage your preferences at any time through your browser settings, or contact us at [email protected] with any questions about the cookies we use.

Offline Collection

The majority of information we collect is obtained through the Site, and this Privacy Policy applies to that online collection of personal information. We may also collect information offline. For example, if you call us to place an order or ask a question, we will ask only for the personal information needed to complete the request. When we need to store information, it is entered into our database over encrypted connections. We treat offline collection, use, and disclosure consistently with our online practices.

Promotional and Marketing Data

In addition to information collected for purchasing and general browsing, we may collect additional information when you participate in promotional activities such as discount code offers, referral programs, loyalty rewards, or email/SMS signup incentives.

(a) Information Collected Through Promotions. When you participate in a promotional offer, we may collect your email address, telephone number, IP address, browser and device information, approximate geolocation (country and region), and the date and time of your participation.

(b) Purpose of Collection. This information is collected to administer the promotion, deliver promotional rewards (such as discount codes or promo codes) via email or text message, verify eligibility, detect and prevent duplicate or fraudulent redemptions, comply with applicable legal obligations, and communicate with you about the promotion.

(c) Duplicate and Fraud Detection. To enforce redemption limits and protect the integrity of our promotions, we may use your email address, telephone number, IP address, device information, and browser cookies to identify duplicate or potentially fraudulent redemptions.

(d) Marketing Communications. We will only use your information for marketing purposes beyond a specific promotion if you have provided separate, affirmative opt-in consent. You may opt out of marketing communications at any time. Opting out of marketing does not affect communications directly related to a promotion you have joined (such as delivery of a discount code you requested) or transactional messages about your orders.

Data Retention

(a) General Customer Data. We retain your personal information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements.

(b) Promotional Data. Personal data collected solely in connection with a promotional offer will be retained for no longer than six (6) months after the conclusion of the applicable promotion, unless a longer retention period is required by law or is necessary to resolve a pending dispute.

(c) Promotional Codes. Records of promotional codes issued (including the associated email address, date of issuance, and redemption status) will be retained for up to twelve (12) months after the code’s expiration date for accounting and dispute resolution purposes.

(d) Deletion Requests. You may request the deletion of your personal data at any time by contacting us at [email protected]. We will honor such requests in accordance with applicable law, subject to any legal obligations that require us to retain certain information (such as order and tax records).

International Data Transfers

If you are located outside the United States, please be aware that the personal information we collect will be transferred to, stored in, and processed in the United States, where our servers and central database are operated. Data protection laws in the United States may differ from, and may not provide the same level of protection as, the laws of your country of residence.

By using our Site or placing an order, you consent to the transfer of your personal information to the United States. Where required by applicable law (such as the General Data Protection Regulation), we will implement appropriate safeguards for cross-border data transfers, including Standard Contractual Clauses approved by the European Commission.

Your Rights Under the General Data Protection Regulation (GDPR)

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have certain rights under the GDPR and equivalent UK data protection legislation. These rights include:

(a) Right of Access. You have the right to request a copy of the personal data we hold about you.

(b) Right to Rectification. You have the right to request that we correct any personal data that is inaccurate or incomplete.

(c) Right to Erasure. You have the right to request that we delete your personal data, subject to certain legal exceptions (such as where we are required to retain data for tax or legal compliance).

(d) Right to Restriction of Processing. You have the right to request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to our processing.

(e) Right to Data Portability. You have the right to request that we provide your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.

(f) Right to Object. You have the right to object to the processing of your personal data for direct marketing purposes at any time.

(g) Right to Withdraw Consent. Where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

(h) Right to Lodge a Complaint. You have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your personal data violates applicable law.

Legal Basis for Processing. We process your personal data on the following legal bases: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time; the performance of a contract with you (Article 6(1)(b) GDPR), such as processing an order; compliance with a legal obligation (Article 6(1)(c) GDPR); and our legitimate interests (Article 6(1)(f) GDPR), such as fraud prevention and promotion administration, where those interests are not overridden by your rights.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty (30) days, or within such other timeframe as required by applicable law.

Your Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a resident of California, you have certain rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA). These rights include:

(a) Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.

(b) Right to Delete. You have the right to request that we delete the personal information we have collected about you, subject to certain legal exceptions.

(c) Right to Correct. You have the right to request that we correct inaccurate personal information we hold about you.

(d) Right to Opt Out of Sale or Sharing. You have the right to opt out of the sale or sharing of your personal information. Mystery FC does not sell or share your personal information as those terms are defined under the CCPA/CPRA.

(e) Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA/CPRA rights. We will not deny you goods or services, charge you different prices, provide a different level or quality of goods or services, or suggest that you may receive a different price or level of service for exercising your rights.

Categories of Personal Information Collected. In the preceding twelve (12) months, we may have collected the following categories of personal information: identifiers (name, email address, phone number, IP address), commercial information (purchase history, products ordered, size and style preferences), internet or electronic network activity (browsing history, device information, cookies), and geolocation data (approximate location based on IP address).

To exercise any of these rights, please contact us at [email protected]. We will verify your identity before processing your request and will respond within forty-five (45) days, or within such other timeframe as required by applicable law.

Do Not Track Signals

Some browsers offer a “Do Not Track” feature that signals to websites that you do not want your online activity tracked. There is currently no uniform standard for how companies should respond to Do Not Track signals. At this time, our Site does not respond to Do Not Track signals. However, you may opt out of certain tracking by adjusting your cookie settings or by contacting us directly.

Updates to This Policy

If we change or update this Privacy Policy, we will post changes and updates on the Site so that you will always be aware of what information we collect, use, and disclose. We encourage you to review this Privacy Policy from time to time. If you have any questions about this Privacy Policy, please contact us at [email protected].