PRIVACY AND COOKIE POLICY

Last Updated: May 2026

Goblin Loot Liquidators (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. We understand that as a buyer in the wholesale and liquidation market, you entrust us with sensitive business and personal information. This comprehensive Privacy and Cookie Policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from), interact with our services, or make purchases from our facilities, and tell you about your privacy rights and how the law protects you.

1. IMPORTANT INFORMATION AND WHO WE ARE

Purpose of this Privacy Policy This policy aims to give you explicit information on how Goblin Loot Liquidators collects and processes your personal data through your use of this website. This includes any data you may provide through this website when you sign up for our newsletter, create a wholesale account, purchase a product (such as liquidation pallets, truckloads, or mystery boxes), or take part in a promotion or survey.

It is important that you read this Privacy Policy together with any other privacy notice or fair processing notice we may provide on specific occasions when we are collecting or processing personal data about you so that you are fully aware of how and why we are using your data.

Third-Party Links This website may include links to third-party websites, plug-ins, and applications (for example, links to our social media pages, shipping carrier tracking portals, or payment gateway interfaces). Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

Children’s Privacy Our website and commercial offerings are strictly intended for adults and business entities. Our website is not intended for children under 18 years of age, and we do not knowingly collect data relating to children. If we become aware that a child has provided us with personal information, we will take immediate steps to delete such information from our files.

2. THE DATA WE COLLECT ABOUT YOU

Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data). We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity Data: Includes first name, last name, maiden name, username or similar identifier, marital status, title, and date of birth. For business entities, this may include your business name, EIN/Tax ID, and resale certificate information.
  • Contact Data: Includes billing address, delivery address, business physical address, email address, and telephone/mobile numbers.
  • Financial Data: Includes bank account and payment card details. Note: We do not store your full credit card data on our servers. All credit card and payment transactions are securely encrypted and processed directly through compliant, PCI-DSS certified third-party payment gateways (e.g., Stripe, PayPal, Authorize.net).
  • Transaction Data: Includes specific details about payments to and from you, purchase history, invoices, chargeback records, and other details of products (pallets, blind lots, mystery boxes) you have purchased from us.
  • Technical Data: Includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
  • Profile Data: Includes your username and password, purchases or orders made by you, your interests in specific liquidation categories (e.g., electronics, general merchandise, apparel), preferences, feedback, and survey responses.
  • Usage Data: Includes information about how you use our website, products, and services, such as which pages you visited, how long you stayed, and the paths you took through our platform.

Aggregated Data We also collect, use, and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity.

3. HOW WE USE YOUR PERSONAL DATA

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances, based on specific lawful bases:

  • Performance of a Contract: Processing your data where it is necessary for the performance of a contract to which you are a party (e.g., processing your payment, arranging LTL freight shipping, and delivering your order).
  • Legitimate Interests: Processing your data where it is necessary for our legitimate business interests, and your interests and fundamental rights do not override those interests. This includes using data for:
    • Fraud Prevention: To verify your identity, assess transaction risk, and prevent fraudulent chargebacks or unauthorized transactions, utilizing advanced tracking tools and Google reCAPTCHA.
    • Business Operations: To study how customers use our products, to develop our business strategy, and to keep our website updated and relevant.
  • Consent: Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending third-party direct marketing communications to you via email.

Marketing and Newsletter Communications We strive to provide you with choices regarding certain personal data uses, particularly around marketing and advertising. If you have opted-in to our newsletter, we will send you alerts about new inventory manifests, warehouse restocks, and mystery box availability. You can ask us to stop sending you marketing messages at any time by following the “unsubscribe” or “opt-out” links at the bottom of any marketing message sent to you.

4. COMPREHENSIVE COOKIE POLICY

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a high-quality, personalized experience when you browse our website and also allows us to improve our site’s architecture.

What is a cookie? A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive. They can be “session” cookies (which are deleted when you close your browser) or “persistent” cookies (which remain on your device until they expire or you delete them).

We use the following categories of cookies:

  • Strictly Necessary Cookies: These are cookies that are required for the core operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart, securely proceed through checkout, or make use of e-billing services. (e.g., WooCommerce session cookies). The website cannot function properly without these.
  • Analytical or Performance Cookies: These allow us to recognize and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily (e.g., Google Analytics).
  • Functionality Cookies: These are used to recognize you when you return to our website. This enables us to personalize our content for you, greet you by name, and remember your preferences (for example, your choice of language or region).
  • Targeting/Advertising Cookies: These cookies record your visit to our website, the pages you have visited, and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

Third-Party Cookies Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.

How to Manage Cookies: You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Most web browsers allow some control of most cookies through the browser settings (e.g., Google Chrome, Mozilla Firefox, Apple Safari). If you disable or refuse cookies, please note that some parts of this website (especially the shopping cart, account login, and checkout process) may become completely inaccessible or not function properly.

5. DISCLOSURES OF YOUR PERSONAL DATA

We may share your personal data with external third parties solely for the purpose of fulfilling our legitimate business operations. We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

  • Service Providers: Acting as processors who provide IT, software, and system administration services (e.g., our hosting provider, Hostinger; our e-commerce platform, WooCommerce).
  • Marketing and CRM Platforms: Email marketing platforms (e.g., Brevo, MailPoet, Mailchimp) to securely manage our newsletter distribution and customer relationship management.
  • Logistics Partners: Shipping carriers, freight brokers, and 3PL providers (e.g., UPS, FedEx, USPS, LTL freight companies) to quote shipping rates and deliver your pallets or boxes.
  • Professional Advisers: Including lawyers, bankers, auditors, and insurers based in the US who provide consultancy, banking, legal, insurance, and accounting services.
  • Government and Law Enforcement: Regulatory bodies, tax authorities (such as the IRS or Florida Department of Revenue), and law enforcement agencies where we are required by law to report processing activities, combat fraud, or respond to lawful requests.
  • Corporate Restructuring: Third parties to whom we may choose to sell, transfer, or merge parts of our business or our assets. If a change happens to our business, then the new owners may use your personal data in the same way as set out in this privacy notice.

6. DATA SECURITY AND RETENTION

Security Measures We have put in place appropriate and robust security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. This includes the use of Secure Socket Layer (SSL/TLS) encryption technology across our entire site. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions, and they are subject to a strict duty of confidentiality.

Data Retention We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for. By law, for tax and accounting purposes in the United States, we are required to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for up to seven (7) years after they cease being customers.

In some circumstances, you can ask us to delete your data (see “Your Legal Rights” below for further information). In some circumstances, we may anonymize your personal data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

7. YOUR LEGAL RIGHTS (U.S. STATE PRIVACY LAWS)

Depending on your location and residency (such as residents of California under the CCPA/CPRA, Virginia, Colorado, or other states enacting comprehensive privacy laws), you may have specific rights under data protection laws in relation to your personal data. Goblin Loot Liquidators extends these general rights to our users where reasonably feasible:

  • The Right to Access / Know: You have the right to request a copy of the personal data we hold about you and to know the categories of personal information we have collected, the sources, and the business purpose for collecting it.
  • The Right to Correction: You have the right to request that we correct any incomplete or inaccurate data we hold about you, though we may need to verify the accuracy of the new data you provide to us.
  • The Right to Erasure (Right to be Forgotten): You have the right to ask us to delete or remove personal data where there is no good reason for us continuing to process it. Note: We may not always be able to comply with your request of erasure for specific legal reasons (e.g., maintaining records for IRS tax audits, active fraud investigations, or chargeback defense) which will be notified to you, if applicable, at the time of your request.
  • The Right to Opt-Out of Sale or Sharing: You have the right to direct us not to sell or share your personal information to third parties for cross-context behavioral advertising.
  • The Right to Non-Discrimination: We will not discriminate against you (e.g., by denying goods or services, or charging different prices) for exercising any of your privacy rights.

How to Exercise Your Rights: If you wish to exercise any of the rights set out above, please contact our privacy compliance team via our official support email or through the contact form on our website. We try to respond to all legitimate requests within 45 days. Occasionally it may take us longer if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.