Privacy Policy

Who we are

apdcollectibles.com is run by APD Collectibles, a sole proprietorship based in California. Questions about this policy go to sales@apdcollectibles.com.

What we collect

• When you buy: your name, email, shipping address and, if you give it, phone number. Your card details are entered on Stripe's checkout page and go straight to Stripe. We never see or store your full card number.
• When you email us: your email address and whatever you write.
• When you browse: anonymous visit counts (pages viewed, rough country, device type) through Cloudflare Web Analytics, which does not use cookies or track you across sites. Our host, Cloudflare, also keeps standard security logs such as IP address and browser type.
• In your own browser only: your cart and which social link you came from, saved in your browser's local storage so your cart is still there when you come back. This never leaves your device unless you check out.

We don't use advertising cookies, tracking pixels or retargeting, and we don't create customer accounts.

How we use it

• To process your payment, ship your order or arrange local pickup, and send your receipt and tracking.
• To answer your questions and handle returns or problems with an order.
• To keep records required for sales tax and bookkeeping.
• To see, in total, which pages and social links bring visitors, so we can improve the site.

We don't send marketing emails unless you ask to hear from us.

Who we share it with

Only the services needed to run the shop, and only what each one needs:

• Stripe: payment processing, fraud prevention and receipts (Stripe's privacy policy).
• Shipping carriers (such as USPS, UPS or FedEx): your name, address and, if needed for delivery, phone number on the shipping label.
• Cloudflare: website hosting, security and anonymous analytics.
• Government agencies: only when the law requires it, for example tax records.

We never sell or rent your personal information, and we don't share it for advertising.

How we protect it

The whole site runs over HTTPS. Payments are handled by Stripe, a PCI DSS Level 1 certified processor. The accounts we use to run the shop are protected by passwords, and access is limited to the owner. No system is perfectly secure, but we keep as little information as we can.

How long we keep it

Order records (name, address, what you bought and what you paid) are kept as long as tax and bookkeeping rules require, usually up to 7 years. Emails are kept as long as they're useful for helping you.

Your choices and rights

You can ask us to show you what information we have about you, correct it, or delete it where the law allows (for example, we must keep tax records). Email sales@apdcollectibles.com and we'll reply within 30 days. California residents have these rights under the CCPA, and we will never treat you differently for using them.

Children

This site is not directed at children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update the date at the top. See also our Terms.