This Privacy Policy explains how Florida Toy Traders, Inc. (“Florida Toy Traders,” “we,” “us” or “our”) collects, uses, shares and protects information about the people who use floridatoytraders.com (the “Site”) and our wholesale program, including applicants, account holders, buyers and visitors. Our online store is for businesses, so most of the information we hold is about people in their business roles. Please read this policy together with our Terms & Conditions.
The short version. This summary is for convenience only. The full policy below controls.
- We collect what we need to review applications, run wholesale accounts, fill orders and keep the Site secure: business and contact details, order details, the messages you send us, and basic technical data.
- Payments are handled by Stripe. We never see or store your full card number.
- We do not sell your personal information. The Site does not use advertising pixels, social-media pixels or Google Analytics.
- We share information with the service providers that help us run the Site and deliver orders (payments, hosting and security, email, shipping and translation), in a business sale, and where the law, fraud prevention or your request calls for it (Section 4).
- You can ask to see, correct or delete your information. Some order and tax records we must keep (Section 8).
1. Who we are and what this policy covers
Florida Toy Traders, Inc. is a Florida corporation that distributes trading cards, toys and collectibles at wholesale. We are the business responsible for the information described in this policy.
This policy covers information we collect through the Site, through your wholesale account, through the Contact page and by email, and through our sales outreach to businesses. It does not cover other websites that the Site may link to.
2. Information we collect
2.1 Information you give us
- Application and account details. Company name; your name and, if you choose, your role; work email; business phone; store address (street, city, state or province, postal code and country); how you heard about us and, if you choose, the name of the representative, referrer or platform; any offer code you enter on your application or on the Site, which we save on your account so that your offer prices show; and the password you choose. Passwords are stored in a scrambled (hashed) form that we cannot read.
- Order and checkout details. Billing and shipping names, company names and addresses; email and phone; the products and quantities you order; your account number; any order notes you add; and the status of your payment. Payment card and wallet details are entered into Stripe’s secure fields or your wallet, not onto our servers. We receive limited details, such as the card brand, the last four digits and Stripe’s transaction reference, so that we can match payments to orders.
- Messages. What you send us through the Contact page (name, company, email, optional account number, topic and message) and in emails or calls with us.
- Account notes. Our team may keep private notes about your account, such as notes about your orders, support requests or fraud and eligibility checks.
If you give us information about someone else, such as a colleague, you confirm that you have the right to do so.
2.2 Information we collect automatically
- Device and usage data. IP address, browser and device type, operating system, language settings, the pages you request, the date and time, and the page that referred you. Our hosting provider keeps this in server logs.
- Cookies and similar technologies. See Section 5.
- Order source data. When you place an order, WooCommerce, the store software we use, records how you reached the Site. That can include the referring website or a campaign tag in the link you clicked, the first page you visited, when your visit began, how many pages you viewed, and your device type.
- Security and abuse-prevention data. Our firewall and security tools log sign-in attempts, blocked requests, IP addresses and browser details. To limit repeated form submissions, we also use a scrambled, one-way version of your IP address for up to one hour.
- Records of your agreement. When you accept our Terms, for example by submitting an application or placing an order, we may record the date, time, IP address and the version of the Terms you accepted.
2.3 Information from other sources
- Payment and fraud-prevention providers. Stripe tells us whether a payment succeeded and may share risk signals about it.
- Carriers. Delivery status and tracking events for your orders.
- Referrals and public sources. Our sales team may find business contact details on public sources such as company websites and listings, at trade shows, or through referrals from other customers and industry contacts, and may contact you about our wholesale program.
2.4 What we do not collect
We do not ask for sensitive personal information such as health information or precise location, and we do not store full payment card numbers. Please do not send us that information. If we ask for a resale certificate or business license, that document may contain a tax or registration number. We use it only to verify eligibility and tax treatment, and we keep it as tax rules require.
3. How we use information
- To run our wholesale program. To review applications, approve or deny accounts, issue account numbers, and manage your account, order history and support.
- To fill orders. To process and ship orders, take payments, calculate taxes, send order and shipping updates, and handle claims and other order issues.
- To communicate with you. To reply to your messages, send emails about your application, account and orders, and send important notices about the Site or our policies.
- To tell you about our wholesale program. To let you know about new arrivals, restocks and offers, including sales outreach to businesses. You can opt out at any time (Section 8).
- To keep the Site and our business safe. To prevent fraud, abuse, unauthorized access and misuse of promotions, to investigate suspicious activity, and to enforce our Terms.
- To keep records and follow the law. For accounting, tax, audit and insurance purposes, and to respond to lawful requests.
- To run and improve the Site. To fix problems, measure how the Site performs, understand how customers find us, and make the Site easier to use.
- For other purposes we tell you about when we collect the information, or with your consent.
4. How we share information
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We share information in the following ways.
4.1 Service providers
These companies help us run the Site and fill orders. They may use the information only to provide their services to us, or as their own privacy policies describe.
| Provider | What they do for us | What they may receive |
|---|---|---|
| Stripe, Inc. and the wallet or pay-later provider you choose (such as Apple Pay, Google Pay, Link, Klarna, Affirm or Amazon Pay) | Payment processing, fraud prevention and, when enabled, sales-tax calculation | The payment details you enter, billing and shipping details, order amounts, and device and browser data that Stripe’s scripts collect on product, cart and checkout pages |
| WP Engine | Website hosting, backups and server logs | The data stored on or sent to the Site, including account and order data |
| Cloudflare | Network delivery, caching and security, including bot filtering | IP address, request data and a security cookie whenever you load the Site |
| Microsoft (Microsoft 365 and Outlook) | Sending and storing our email, including emails the Site sends to you | Names, email addresses and the content of messages we send and receive |
| Security tools (including the Wordfence firewall) | Blocking attacks and monitoring sign-in attempts | IP addresses, browser details, requested pages and sign-in attempts |
| Google (Google Fonts and Google Translate) | Fonts that make the Site display correctly, and the translation itself when you choose another language | Your IP address and browser details when a page loads its fonts. If you choose Spanish, the text of the pages you view (on that visit and on later visits, until you switch back to English) is sent to Google for translation, and Google may receive your IP address and browser details |
| GTranslate (the Site’s language switcher) | The language switcher in the top bar and the script that connects it to Google Translate | Your IP address and browser details when the switcher’s script loads from GTranslate’s servers. It loads when you hover over or open the language switcher, even if you do not choose another language, and on later visits if you chose another language before |
| Shipping carriers and delivery services | Delivering your orders | Recipient name and company, address, phone number, email and package details |
| Accountants, attorneys and insurers | Professional services | The information needed for the service, under duties of confidentiality |
4.2 Legal and safety reasons
We may disclose information when we believe in good faith that the law or a legal process requires it, or that it is needed to protect the rights, property or safety of us, our customers or others, to enforce our Terms, or to detect, prevent or address fraud, security or technical problems. This includes giving records to card networks, banks and payment processors to respond to a payment dispute.
4.3 Business changes
If we are involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of that transaction. We will require the new owner to honor this policy for existing information, or we will tell you about any change.
4.4 With your direction
We share information when you ask us to, or when you give us your consent.
5. Cookies and similar technologies
Cookies are small files that a website stores in your browser. We use a few, mostly to keep you signed in, remember your cart, protect the Site and understand how orders reach us. We do not use cookies for advertising.
| Cookie | Set by | Purpose | How long it lasts |
|---|---|---|---|
wordpress_logged_in_*, wordpress_sec_* |
The Site (WordPress) | Keeps you signed in and secures your session | Until you close your browser, or up to 14 days if you choose “Keep me signed in” |
wp-settings-*, wp-settings-time-* |
The Site (WordPress) | Remembers display preferences while you are signed in | 1 year |
wp_woocommerce_session_*, woocommerce_items_in_cart, woocommerce_cart_hash |
The Site (WooCommerce) | Keeps your cart and checkout working | Until you close your browser, or up to 2 days |
sbjs_* (several) |
The Site (WooCommerce Order Attribution) | Records how you reached the Site, such as the source and the pages you viewed, so it can be saved with your order | 30 minutes for the visit cookie, up to 6 months for the others |
__cf_bm |
Cloudflare | Tells people from bots and protects the Site from abuse | 30 minutes |
__stripe_mid, __stripe_sid |
Stripe | Fraud prevention and payment security on product, cart and checkout pages | 1 year and 30 minutes |
The Site may also store some data in your browser’s local storage, such as your cart contents and your language choice.
Your choices. Most browsers let you block or delete cookies. If you block the cookies the Site needs, you may not be able to sign in or use your cart. We do not currently change how the Site works in response to “Do Not Track” signals. Because we do not sell or share personal information, there is nothing for a Global Privacy Control signal to opt you out of.
6. How long we keep information
We keep information for as long as we need it for the purposes in this policy and to meet legal, tax, accounting and dispute-resolution requirements. In general:
- Account and application records: while your account is open, and afterward for as long as we reasonably need them to handle new applications, prevent abuse and resolve disputes.
- Orders, invoices and payment records: for at least seven years after the transaction, because of tax and accounting rules. If you ask us to delete your account, we keep these records.
- Contact messages and emails: for as long as we need them to answer you and keep a business record.
- Security logs, server logs and system email logs: for a limited time, then they are deleted or overwritten.
- Backups: backups of the Site may contain this information for a limited time until they expire.
When we no longer need information, we delete it or remove the details that identify you, unless the law requires us to keep it.
7. How we protect information
We use reasonable administrative, technical and physical safeguards. These include encrypted (HTTPS) connections, a firewall and security monitoring, restricted staff access, hashed passwords, and a payment partner (Stripe) that is certified at the highest level of the Payment Card Industry Data Security Standard. A person must approve every account before it can see prices or order.
No method of transmission or storage is completely secure, so we cannot promise absolute security. Please keep your password private. If a data breach affects you, we will notify you and the authorities as the law requires.
8. Your choices and rights
- See and update your details. Sign in and open My Account to review and change your business details, addresses and password.
- Ask for access, correction or deletion. Ask us what we hold about you, ask us to correct it, or ask us to delete it. We will delete what we can. We must keep some records (Section 6), and we may keep information needed to prevent fraud or enforce our Terms.
- Close your account. Ask us to close your account at any time.
- Opt out of marketing. Tell us if you do not want wholesale updates or sales outreach, for example by replying “stop” to an email or by using the Contact page. We will stop. We will still send service messages about your account and orders.
How to make a request. Use our Contact page, choose “Something else,” and start your message with “Privacy request.” Include your name, your company and the email address on your account so that we can confirm it is you. We may ask you to reply from that email address. We aim to respond within 45 days. If we cannot honor a request, we will tell you why.
9. State privacy rights
Privacy laws in some states give residents the right to know whether we process their personal information and to access it, to correct it, to delete it, to get a portable copy, and to opt out of the sale or sharing of personal information, targeted advertising and certain kinds of profiling. We honor the requests described in Section 8 for everyone, whether or not a state law applies to you.
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for targeted advertising or for automated decisions that have legal or similarly significant effects. We do not use or disclose sensitive personal information except as needed to provide what you ask for. We will not treat you differently for using your rights. Every account application is reviewed by a person. Our payment provider uses automated tools to detect fraud, which can cause a payment to be declined. If that happens, contact us and we will review the order.
To use your rights, follow the steps in Section 8. You may also use an authorized agent, with proof of their authority. If we deny a request, you can reply to our decision and ask us to reconsider.
California residents. In the past 12 months we collected the kinds of personal information described in Section 2: identifiers such as name, email address, phone number and address; commercial information such as your orders; internet and network activity; approximate location from your IP address; professional or business information; and records of your communications and agreements. We disclosed them for business purposes to the service providers listed in Section 4.
10. Children
The Site is for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe we have, contact us and we will delete it.
11. Visitors from outside the United States
We are based in the United States, and the Site and our service providers process information in the United States. If you use the Site from another country, your information will be transferred to and processed in the United States, where privacy laws may differ from those where you live.
12. Links to other websites
The Site may link to other websites. We do not control them and are not responsible for their privacy practices. Please read their privacy policies.
13. Changes to this policy
We may update this policy from time to time. We will post the new version on the Site and change the effective date at the top. If we make a material change, we will give additional notice, such as a notice on the Site or an email to the address on your account. If you keep using the Site after a change, you accept the updated policy.
14. Contact us
Questions or requests about privacy? Use our Contact page, choose “Something else,” and start your message with “Privacy request.” Please do not include sensitive information, such as payment card numbers, in your message.
