Privacy Policy

This Privacy Policy describes how this storefront (“we”, “us”) handles personal information when you visit https://www.buildabearca.it.com/, create an account, place an order, or email buildabear@gmail.com. It is written for this WordPress and WooCommerce installation. It is not a copy of another company’s policy and it does not claim to describe systems we do not operate.

We collect account data you type (name, email, password hash, billing and shipping addresses, phone), order data WooCommerce stores (line items, Item No./SKU, prices, coupons, order notes), messages you send through the contact form, and technical logs that the host and security plugins already record (IP address, user agent, pages requested). Payment card numbers are entered on the payment gateway that WooCommerce has enabled. We do not ask you to email card numbers, and this theme does not store PAN, CVV, or magnetic-stripe data in WordPress post meta.

We use that information to fulfill orders, answer guest-service questions, prevent fraud, keep the shop running, and—only if you opt in on the newsletter form—send marketing email. We do not sell personal information. We do not operate a separate advertising ID graph. Cookies used for the cart, checkout, and login are described in the Cookie Policy. Analytics cookies, if a merchant later enables them, must be listed in that policy before they are turned on.

Service providers that may process data on our behalf include the hosting company for this BaoTa server, WooCommerce and its payment and shipping extensions, email delivery for transactional mail, and SSL certificate services. Each provider should receive only what they need. We do not forward your order to an unrelated store, and we do not import customer lists from other websites.

Retention: order records stay as long as tax and consumer-law recordkeeping requires, which is an operations field: [ORDER RETENTION PERIOD — EDIT IN WP ADMIN]. Account data stays until you ask us to close the account, subject to those recordkeeping rules. Contact-form mail is kept long enough to resolve the request: [CONTACT FORM RETENTION — EDIT IN WP ADMIN]. Server logs follow the host default unless a shorter window is configured.

You may request access, correction, or deletion of personal information we hold, subject to legal exceptions (for example we may keep an order that a tax authority still requires). Write to buildabear@gmail.com or mail 415 S. 18th Street, Suite 200, St. Louis, MO 63103 and include the email address on the account. We may need to verify that you control that inbox. We will not honor a deletion request that is actually a request to unwind a payment dispute; use the Refund Policy for money movement.

Children: this catalog is family-friendly, but checkout is intended for adults. We do not knowingly collect personal information from children under 13 through the account form. If you believe a child created an account, email buildabear@gmail.com and we will delete it. Licensed characters and toys aimed at children are still purchased by a parent or guardian.

Security: the site is served over HTTPS. Access to wp-admin is limited to store operators. No security measure is perfect. If we learn of a breach that affects your personal information, we will notify you and any regulator the law requires, using the timeline: [BREACH NOTICE TIMELINE — EDIT IN WP ADMIN].

International visitors should know the store is operated from the contact address in St. Louis, Missouri, United States. If you shop from another country, your information is processed in the United States. Shipping abroad, if enabled, does not move the store’s administration out of that address.

We may update this policy. The updated text will appear on this page. Continued use of the storefront after a posted change means you have read the new version. Questions: buildabear@gmail.com, 877-789-2327, 415 S. 18th Street, Suite 200, St. Louis, MO 63103.