W² Cards & Hobbies

Privacy Policy

1. Scope

This Policy explains what personal information we collect, how we use and share it, how long we keep it, the choices you have (including cookies), and how to contact us. It applies to visitors, account holders, and customers of our website.

2. Information We Collect

  • Information you provide – name, billing/shipping address, email, phone, account credentials, messages you send us, and order/payment details processed via our payment providers.
  • Information collected automatically – IP address, device/browser identifiers, pages viewed, actions on site (via cookies and similar technologies).
  • Communications & marketing preferences – subscription status, consent, and opt-out choices.

3. How We Use Your Information

  • Process and fulfill orders; provide shipping, returns, and customer support.
  • Operate and secure our website (fraud prevention, abuse prevention, and diagnostics).
  • Send transactional messages (order confirmations, shipping updates) and, with your consent, marketing emails (you can unsubscribe anytime).
  • Improve our products, services, and website performance.
  • Comply with legal, tax, and regulatory obligations.

4. CASL (Marketing Communications)

We send marketing communications only with your express consent under the Canadian Anti-Spam Legislation (CASL). Every marketing email includes an unsubscribe link. Transactional emails (e.g., order updates) are not affected.

5. Children

Our site is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has provided data to us, please contact us and we will remove it.

6. Cookies & Similar Technologies

We use cookies and similar technologies to make our website work, remember your cart, secure checkout, analyze usage, and (if enabled) deliver marketing content. Some cookies are set by us (first-party) and some by third parties (third-party). You can manage your choices as explained in Section 10.

6.1 Categories

  • Strictly Necessary / Functional – required for core features like cart, checkout, security, login, and payment; cannot be switched off.
  • Analytics / Statistics – help us understand site usage and improve services.
  • Marketing / Social – used for advertising/retargeting and to display embedded social media content.

Note: We use Independent Analytics for basic traffic statistics without cookies and without sending personal data off-site.

6.2 Cookies in Use (by service)

The names and retention periods below are common examples and may vary by vendor/version. We review and update them periodically. For the most precise list, we recommend running a consent/cookie scan tool (e.g., Complianz) on your live site.

WooCommerce (Strictly necessary / Functional)

  • woocommerce_cart_hash (session), woocommerce_items_in_cart (session) — keep cart state
  • wp_woocommerce_session_* (~2 days) — associates cart with a session

WordPress / Ultimate Member (Strictly necessary / Functional)

  • wordpress_logged_in_*, wordpress_sec_* (session) — keep you logged in
  • wp-settings_*, wp-settings-time_* (~1 year) — UI preferences

Elementor (Functional)

  • elementor (~1 year) — remembers whether certain front-end components/animations should load

Payments – Stripe & PayPal (Strictly necessary / Functional & Fraud prevention)

  • Stripe: __stripe_mid (~1 year), __stripe_sid (~30 minutes) — security & fraud prevention
  • PayPal: ts, ts_c, x-pp-s, l7_az, etc. (varies up to 2 years) — checkout & security

Analytics

  • Independent Analytics — server-side, no cookies.
  • (If enabled) Google Analytics 4: _ga, _ga_* (2 years), _gid (24h) — usage statistics (with IP anonymization where available).

(If enabled) Sourcebuster JS (Analytics/Attribution)

  • sbjs_current, sbjs_first, sbjs_session, etc. (30 min–6 months) — tracks traffic sources

(If used) MailPoet

  • mailpoet_* (various) — newsletter performance & automation

Google reCAPTCHA (Security / Functional)

  • _GRECAPTCHA and related (session/persistent) — protects forms from abuse; set by Google

Google Maps (Functional / Marketing, depending on region)

  • NID, SID, HSID, etc. (varies) — renders interactive maps; set by Google

Social media embeds (Marketing / Social) — keep only the networks you actually embed

  • Facebook: _fbp (3 months) — ad delivery & retargeting
  • Instagram (Meta): cookies set when embedded posts load
  • TikTok: _ttp (up to 13 months) — ad performance
  • Twitter/X: personalization_id, guest_id (up to 2 years) — embeds & analytics
  • Pinterest: cookies set when “Pin” widgets load
  • YouTube: cookies set by YouTube (consider youtube-nocookie.com mode via our consent tool)

Miscellaneous

Other cookies may appear temporarily while testing new features; we keep this list updated.

7. Third-Party Providers & International Transfers

We use reputable providers to process payments, host and secure our website, analyze traffic (if enabled), and enable features. These providers may process personal data in Canada, the United States, or other countries; such data may be subject to foreign laws and lawful access requests. See their policies:

8. How Long We Keep Your Information

We retain personal information only as long as necessary for the purposes described above, to comply with legal/tax requirements, or to resolve disputes and enforce our agreements. We apply minimization and periodic review.

9. Security

We use reasonable technical and organizational safeguards (TLS encryption, access controls, least-privilege, monitoring). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

10. Your Choices & Cookie Controls

  • Use the Cookie Preferences link in our footer/banner to change consent at any time.
  • Manage/delete cookies in your browser settings (see your browser’s Help).
  • For interest-based advertising choices in Canada: YourAdChoices.ca.

If you disable all cookies, parts of the site (e.g., cart/checkout) may not work properly. For more details, see our dedicated Cookie Policy.

11. Your Rights (PIPEDA)

Subject to legal/contractual restrictions and reasonable notice, you may request access, correction, or deletion of your personal information, withdraw consent (where applicable), or object to certain processing. If your concern is not resolved, you may file a complaint with the Office of the Privacy Commissioner of Canada.

12. Pricing, Fraud, and Abuse

We may correct pricing/availability errors and cancel orders suspected of fraud/abuse (with a refund as applicable). See our Terms & related store policies for details.

13. Changes to This Policy

We may update this Policy from time to time. The updated version will be posted with a new Effective Date. Your continued use of the site constitutes acceptance of changes.

0

Your Cart Is Empty

No products in the cart.