Vibecheckby Vibe Box StickersGet in touch

Privacy Policy

Last updated: June 19, 2026

2583076 Ontario Ltd., operating as Vibe Box Stickers (“Vibe Box Stickers”, “Vibecheck”, “we”, “us”) operates interactive promotional campaigns for brands — on the web and on WhatsApp. This Privacy Policy explains what personal information we collect, why we use it, and your choices.

Who this applies to

This policy applies to people who participate in a campaign (web or WhatsApp), join a waitlist, or contact us. It does not cover third-party brand websites linked from a campaign.

Who is responsible for your information

For each campaign, the brand running the drop decides why participant data is collected and how it will be used for that promotion. Vibe Box Stickers (Vibecheck) operates the technology platform on the brand's instructions and may access participant data to run, support, and secure the campaign.

Questions about a specific brand's use of your data may also be directed to that brand. Platform and privacy questions can be sent to us using the contact details below.

Information we collect

Web campaigns

  • Email address and verification status (when a campaign requires email)
  • Quiz and funnel responses you submit
  • Optional location or store-interest fields (when enabled by the campaign)
  • Device identifier stored in your browser to help prevent duplicate submissions
  • Session and technical data (timestamps, campaign progress, confirmation codes)
  • Cookies used to maintain your participation session (see Cookies below)

WhatsApp campaigns

  • Your WhatsApp phone number and WhatsApp user identifier
  • Messages you send us (keywords, quiz answers, button selections, and related text)
  • Timestamps, campaign progress, confirmation codes, and completion status
  • Whether you opt in to hear about future or nearby drops (when we ask after handoff)

WhatsApp is operated by Meta Platforms, Inc. When you message us on WhatsApp, Meta processes your messages under its own terms and privacy policy. We receive message content and metadata through the WhatsApp Business Platform API to run the campaign.

Operators and brands

Brand and agency users who sign in to the operator dashboard are authenticated through our identity provider. That login is separate from participant campaigns and is governed by the operator’s account settings.

How we use information

  • Run the campaign you joined (questions, codes, handoff instructions)
  • Prevent duplicate participation where limits apply (e.g. one completion per phone)
  • Provide confirmation or pickup codes and campaign-related messages on WhatsApp
  • Send optional updates about future or nearby drops if you opt in (web button or WhatsApp “Yes, keep me posted”)
  • Operate, secure, and improve the Vibecheck platform
  • Comply with law and respond to lawful requests

We do not sell your personal information.

Legal basis (Canada)

We rely on consent when you start a campaign, submit information, or opt in to future drop messages (including CASL-compliant consent for promotional email or WhatsApp). You may withdraw marketing consent as described below. Some processing is necessary to provide the service you requested (for example, delivering your confirmation code or verifying your email).

How we share information

  • Meta / WhatsApp — messaging infrastructure when you use WhatsApp (WhatsApp Privacy Policy)
  • Service providers — hosting (e.g. Vercel), database (e.g. Supabase), and email delivery, only to operate Vibecheck
  • Brand clients — campaign operators may access participant data for their own campaign (responses, email, phone, opt-in status) through the operator dashboard
  • Legal requirements — when required by law or to protect rights and safety

Storage and international transfers

Personal information may be stored and processed in Canada and the United States (and potentially other countries where our service providers operate). This includes hosting (e.g. Vercel), database services (e.g. Supabase), email delivery, and WhatsApp messaging through Meta Platforms, Inc.

Information stored outside Canada may be subject to access under foreign laws. We use contractual and technical safeguards appropriate to the sensitivity of the data. Contact us if you have questions about where your information is processed.

Retention

We keep participant session data for as long as needed to operate the campaign, support brands, honour opt-in preferences, and meet legal obligations. As a general guide:

  • Campaign participation data — typically for the duration of the campaign plus up to 24 months, unless a shorter or longer period is required by the brand or law
  • Marketing opt-ins — until you withdraw consent, then deleted or anonymized within a reasonable period (usually within 30 days)
  • Technical logs — for security and troubleshooting, usually 90 days or less

Retention may vary by campaign and client. Contact us to ask about deletion for a specific campaign.

Your choices and rights

Under Canadian privacy law (PIPEDA and applicable provincial laws), you may request access to, correction of, or deletion of your personal information, subject to legal exceptions.

  • Future drop messages (WhatsApp): reply STOP (or UNSUBSCRIBE, CANCEL, QUIT, or OPT OUT) anytime, reply NO when asked, or contact us
  • Future drop messages (web): use the opt-in control shown at handoff, or contact us
  • Data requests: email hello@vibeboxstickers.ca with the campaign name and email or phone number you used
  • General support: hello@vibeboxstickers.ca

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Cookies (web)

We use a session cookie to remember your progress in a web campaign. It is not used for third-party advertising. You can clear cookies in your browser; you may need to restart the campaign.

Security

We use industry-standard measures including encrypted connections (HTTPS), access controls, and signed session tokens. No method of transmission over the internet is 100% secure.

Children

Campaigns are intended for participants who meet the age requirements shown in each campaign. Many campaigns require you to be the age of majority in your province or territory (18 in Ontario; 19 in British Columbia, New Brunswick, Newfoundland and Labrador, Nova Scotia, and the territories). We do not knowingly collect personal information from children below these ages without appropriate consent.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change. Continued use after changes constitutes notice of the updated policy.

Contact

Privacy Officer
2583076 Ontario Ltd., operating as Vibe Box Stickers
Vibe Box Stickers
Website: vibecheck.vibeboxstickers.ca
Privacy: hello@vibeboxstickers.ca
See also our Contact page.