Privacy Policy

Last updated: July 28, 2026

Costumes-R-Us ("we", "our", "us") respects the privacy of your information. This policy explains what we collect when you shop with us, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it. It applies to this website and to the orders and customer service that follow from it.

If this policy changes we will post the amended version on this page with a new "last updated" date. If a change is significant we will say so on the site. Please check back from time to time.

1. Personal information we collect

Information you give us

When you place an order — your name, email address, phone number and shipping address. We need the address to deliver, and the phone number because carriers use it for delivery problems and it is how we reach you about your order.
When you create an account — your name, email address, phone number and a password. Passwords are stored only as a one-way hash; nobody here can read yours.
When you sign up for emails — your email address.
When you contact us — whatever you choose to put in your message, along with your name and email address or phone number so we can reply.

Information collected automatically

Session information — a cookie that remembers what is in your basket and, if you sign in, that you are signed in. See Cookies below.
Server logs — our web server records the usual technical details of a request, such as IP address, browser type and the page requested. These are used to keep the site running and secure.

Information from other sources

If you buy from us on Amazon or Walmart rather than on this site, that marketplace passes us the order details we need to pack and ship it. What they collect from you, and what they pass on, is governed by their own privacy policies. If you buy in person, our point-of-sale system records the transaction.

2. How we use it

To take payment for, pack and deliver your order, and to keep you updated about it.
To handle returns, refunds, warranty questions and customer service.
To maintain your account and show you your order history.
To send you marketing email, if — and only if — you asked us to.
To keep the site working, diagnose faults, and protect it and our customers against fraud and abuse.
To meet our legal, accounting and tax obligations.

We share your information only with the businesses needed to complete your order, and only with what they need:

Our payment provider, to take and refund payment.
Delivery carriers, to ship your parcel and give you tracking.
The marketplace you ordered through, if you bought from us on Amazon or Walmart — their own privacy policy also applies to that order.
Service providers that host or support our systems, under terms that restrict them to working on our behalf.

We may also disclose information where the law requires it, to establish or defend legal claims, to investigate fraud or threats to safety, or as part of a sale or reorganisation of the business.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not rent or exchange mailing lists.

4. Payment details

We never see or store your card number. Card details are entered directly with our payment provider and exchanged for a one-time token; the number itself does not pass through our systems and is not stored on them. We keep a record that a payment was made, its amount, and the provider's reference for it, so that we can match it to your order and refund it if needed.

5. Cookies and similar technologies

We use as little as we can get away with. Specifically:

A session cookie that remembers your basket and, if you sign in, that you are signed in. Without it the site cannot work. It expires after a period of inactivity.
A single value stored in your browser recording that you dismissed our email sign-up box, so we do not show it to you again straight away. It contains no personal information.

We do not use advertising trackers or third-party marketing pixels, and we do not share visit data with anyone. We load our fonts from Google Fonts, which means Google receives your IP address when a page loads; we do not send them anything else.

How we count visits

We keep a simple count of which pages are viewed, so we know what to stock and what to fix. This is done on our own server — no third-party analytics service is involved and no cookie is used for it. For each page view we record the page, the site that linked you to us (its name only, never the full address, which can contain your search terms), whether you were on a phone, and any search term you typed into our own search box.

We do not store your IP address. To count how many people visited rather than how many pages were opened, we turn your IP address and browser into a short scrambled code. The code cannot be turned back into you, is never shared, and changes every month — so it lets us see how many different people came in a month, and nothing beyond that. We cannot follow anyone from one month to the next, link you to an order, or identify anyone at all. These counts are deleted after 400 days.

6. Marketing and your choices

We only send marketing email to people who asked for it. Every message has an unsubscribe link, and unsubscribing takes effect straight away. Unsubscribing does not stop emails about an order you have actually placed — you will still get those, because they are part of the service you bought. We do not send marketing text messages.

7. Security

We maintain reasonable administrative, technical and physical safeguards for the information we hold: the site is served over encrypted connections, passwords are stored only as one-way hashes, card numbers never reach our systems, staff access is limited by role, and inactive sessions are signed out automatically. No method of transmission or storage is completely secure, so while we work to protect your information we cannot guarantee absolute security.

8. How long we keep it

We keep your information for as long as we need it for the purpose we collected it — to provide the service you asked for — and afterwards for as long as required to satisfy legal, accounting, tax and reporting obligations, and to handle returns, warranty claims or disputes. When we no longer need it, we delete it or render it anonymous. If you ask us to delete your information we will do so except where we are required to keep it.

9. Links to other sites

Our site may link to sites we do not control, and our products are also listed on marketplaces that have their own policies. We are not responsible for the privacy practices of those sites, and we would encourage you to read their policies.

10. Children's privacy

We sell costumes and party goods for children, but this site is intended to be used by adults. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, please contact us and we will delete it.

11. Your privacy rights

Depending on where you live, you may have some or all of the following rights over the personal information we hold about you:

to know what we have collected about you, and to get a copy of it;
to have inaccurate information corrected;
to have your information deleted, subject to the exceptions in section 8;
to obtain your information in a portable format;
to opt out of marketing at any time;
to opt out of the sale or sharing of your information for targeted advertising — noting that, as stated above, we do neither;
not to be treated differently for exercising any of these rights.

To exercise any of them, contact us using the details below. We will ask you for enough information to be confident that we are talking to the right person before we act on a request about someone's data — usually details from an order you have placed. If someone is making a request on your behalf, we will need to verify their authority to do so. If we cannot agree to a request, we will tell you why.

12. Accessibility

If you need this policy in another format, contact us and we will provide it.

13. How to contact us

Questions about this policy, or about the information we hold, should go to orders@costumes-r-us.com or call us on (346) 794-5715. You can also write to us at Costumes-R-Us, 18107 North Eldridge Parkway, Suite 410, Houston TX 77377.