Schedule a Call

← Back to policies

Privacy Policy

Last updated: July 15, 2026

David Castillo Plays ("we," "us," or "our") operates this website (the "Services") to help independent toy and game retailers browse product lines, request wholesale accounts, and place orders. This Privacy Policy describes how we collect, use, and disclose personal information when you visit or use the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used, and disclosed.

Personal Information We Collect

Depending on how you interact with the Services, we may collect:

  • Contact details — your name, business name, address, phone number, and email address.
  • Account information — login email, wholesale account status, and store/business details you provide when applying for an account.
  • Order and transaction information — products viewed, added to cart, or purchased, and your order history. Payment card numbers are never collected or stored by us directly — see "Payments" below.
  • Communications with us — anything you send us via a contact form, email, or scheduling request.
  • Device and usage information — IP address, browser type, and how you interact with the Services.

Where This Information Comes From

  • Directly from you — creating an account, applying for wholesale access, placing an order, or contacting us.
  • Automatically through your use of the Services.
  • From our service providers, described below, who process information on our behalf.

Payments

All payment processing is handled by Stripe, Inc. When you pay by card, your payment card details are sent directly to Stripe and are never transmitted to or stored on our own servers. Card payments are made to the vendor whose products you are ordering: each vendor receives payment through its own Stripe account, and that vendor's name appears on your card statement. For card orders your card is saved with Stripe at checkout and charged for the final order total when your order is submitted to the vendor — not at the time you place it. Saved payment methods are stored by Stripe — not by us. Stripe acts as an independent data controller for the payment information it collects; see the Stripe Privacy Policy for details on how Stripe handles that data. Orders placed on net terms involve no online payment: the vendor invoices you directly.

How We Use Your Information

  • Providing the Services. Processing orders, maintaining your account, evaluating wholesale account applications, and communicating with you about your orders or account.
  • Improving the Services. Understanding how the site is used so we can make it better.
  • Security. Detecting and preventing fraud, abuse, or unauthorized access.
  • Legal compliance. Responding to legal process and enforcing our Terms of Service.

We do not use your personal information for third-party targeted advertising, and we do not sell or share personal information as those terms are defined under applicable state privacy laws.

How We Disclose Information

We disclose personal information only to the service providers who help us run the Services, and only as needed for them to perform that function:

  • Stripe — payment processing (see "Payments" above).
  • Supabase — our database provider; account, order, and catalog data is stored in a Supabase-hosted database.
  • Vercel — our web hosting provider, which also provides privacy-preserving, cookie-free web analytics (aggregate page-view counts; it does not track you individually across sites).

We may also disclose information when required by law, to enforce our Terms of Service, or in connection with a business transaction such as a merger or sale of assets.

Children's Data

The Services are intended for business use by toy and game retailers and are not directed to children. We do not knowingly collect personal information from children.

Security and Retention

We use reasonable technical and organizational measures to protect personal information, but no method of transmission or storage is completely secure. We retain personal information for as long as needed to maintain your account, provide the Services, comply with legal obligations, and resolve disputes.

Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to opt out of certain processing. To exercise any of these rights, contact us using the details below. We will respond as required by applicable law.

International Transfers

Our service providers may process and store information outside the country where you live. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for any such transfer.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy here and update the "Last updated" date above.

Contact

Questions about this Privacy Policy or your personal information can be sent to admin@makingtimetoplay.com or +1 801-259-3426, or by mail to David Castillo Plays, 129 E 13800 S, Suite B2 #376, Draper, UT 84020, United States.