Privacy Policy

1. Who We Are

Manna Kingdom Inc. ("Manna Kingdom," "we," "us," or "our") operates mannakingdom.com, a Florida-based e-commerce retailer specializing in trading card games, comics, and collectibles. Our mailing address is in Florida, USA. You can contact us at admin@mannakingdom.com.

2. Information We Collect

Information you provide:

• Account registration: name, email address, password (hashed, never stored in plaintext)
• Order checkout: billing/shipping address, phone number
• Payment processing: handled entirely by Stripe - we never see or store raw card numbers
• Communications: emails, contact forms, support requests
• Membership sign-up: name, email, payment method (via Stripe)

Information collected automatically:

• IP address, browser type, operating system, referring URL
• Pages visited, time spent, click patterns (via privacy-respecting analytics)
• Device identifiers for fraud prevention

Cookies and similar technologies: We use essential cookies for session management (HTTP-only, secure), functional cookies for cart persistence, and optional analytics cookies. You can opt out of non-essential cookies via our cookie banner.

3. How We Use Your Information

• Process and fulfill your orders, including shipping notifications
• Manage your account, membership, and store credit balance
• Send transactional emails (order confirmations, shipping updates, password resets)
• Send marketing emails if you have opted in - you can unsubscribe at any time
• Prevent fraud and maintain security
• Improve our website and product offerings
• Comply with legal obligations including Florida sales tax reporting

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your data under these legal bases:

• Performance of a contract - to fulfill your orders and manage your account
• Legitimate interests - fraud prevention, security, improving our services
• Consent - marketing emails (you can withdraw consent at any time)
• Legal obligation - sales tax records, consumer protection laws

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only with:

• Stripe (payment processing) - governed by Stripe's Privacy Policy
• Shipping carriers (USPS, UPS, FedEx) - name and address for delivery
• Email service providers (Resend) - for transactional and marketing emails
• Analytics providers - in anonymized or aggregated form only
• Law enforcement - only when legally required by valid legal process

6. Your Rights

Florida Digital Bill of Rights (FDBR) / CCPA rights:

• Right to know what personal data we collect and why
• Right to access a copy of your personal data
• Right to correct inaccurate personal data
• Right to delete your personal data (subject to legal retention requirements)
• Right to opt out of the sale of personal data - we do not sell data
• Right to non-discrimination for exercising privacy rights

GDPR additional rights: portability, restriction of processing, objection to processing. To exercise any right, email admin@mannakingdom.com with subject "Privacy Request." We will respond within 30 days.

7. Data Retention

We retain your data as long as your account is active, or as needed to provide services. Order records are retained for 7 years to comply with Florida and federal tax law. You may request deletion of your account at any time; we will delete all personal data except what is legally required to retain.

8. Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us immediately at support@mannakingdom.com and we will promptly delete it.

9. Security

We implement industry-standard security measures: TLS encryption in transit, bcrypt password hashing, HTTP-only cookies for session management, and PCI-compliant payment processing via Stripe. No system is 100% secure; notify us immediately if you suspect unauthorized access to your account.

10. Third-Party Links

Our site links to Whatnot, YouTube, and other platforms. These sites have their own privacy policies and we are not responsible for their practices. We encourage you to review their policies before providing personal information.

11. Changes to This Policy

We may update this policy. Material changes will be communicated by email to account holders at least 30 days before taking effect. Continued use of the site after changes constitutes acceptance.

12. Contact Us

For privacy questions, requests, or complaints: admin@mannakingdom.com - Subject: "Privacy Request". We respond within 30 days.