Legal

PRIVACY POLICY

Last updated: February 6, 2026 · STR Surplus LLC · Fort Lauderdale, FL 33304

STR Surplus LLC ("we", "us", "our") operates strsurplus.com. This Privacy Policy explains what personal information we collect, how we use it, how we share it, and the choices you have.

By using the site or placing an order, you agree to this policy. If you do not agree, please do not use the site.

1. Information we collect

We collect only the data needed to fulfill orders, run the site, and communicate with buyers:

Contact info — name and email address you provide at checkout or on the contact form.
Shipping info — mailing address, city, state, ZIP, and phone number (optional).
Payment info — collected and processed directly by Stripe. We never see, store, or transmit full credit-card numbers. We store only Stripe's transaction ID and the last four digits of the card for order records.
Account info — if you register, we store your email and a hashed (bcrypt) password. We cannot recover a lost password; you must reset it.
Order history — line items you purchased, prices, dates, shipping status, tracking numbers.
Analytics & advertising cookies — set by our analytics partners to record pages viewed, products viewed, items added to cart, and purchases. These are set only if you accept our cookie banner (see §5).
Device data — IP address, browser type, and OS. Used for fraud prevention and site-performance monitoring.

2. How we use your information

To process and fulfill your orders (packing, shipping, tracking).
To send transactional email: order confirmation, shipping notice, review request, cart-abandonment reminder.
To provide customer service and answer replies to orders@strsurplus.com.
To improve the site — anonymous browsing analytics, best-seller detection.
To detect and prevent fraud.
If you have accepted marketing cookies, to show you relevant ads on Facebook, Instagram, and other Meta properties.

3. Third parties we share with

We only share the minimum data each partner needs to do their job:

Stripe — payment processing. Governed by Stripe's Privacy Policy.
UPS — shipping (name and address only).
Resend / DreamHost — transactional and reply-to email delivery.
Analytics partners — including Meta (Facebook / Instagram) via its pixel — but only if you accept marketing cookies. Governed by Meta's Privacy Policy.
Emergent — our web hosting provider.
Law enforcement — if compelled by a valid subpoena, court order, or fraud investigation.

We do not sell, rent, or trade your personal information. Ever.

4. Data retention

Order records: kept 7 years for tax and warranty compliance.
Account data: kept until you request deletion.
Analytics cookies: kept up to 24 months (Meta Pixel default).
Cart-abandonment records: kept 90 days after checkout, then anonymized.

5. Cookies & tracking

The site uses two categories of cookies:

Strictly necessary — session, cart, login (cannot be disabled).
Analytics & marketing — set by our analytics partners (including Meta / Facebook, Pixel ID 680716584907420). These do not load until you click Accept on the cookie banner. You can withdraw consent at any time via the Cookie Preferences link in the footer.

6. Your rights

Regardless of where you live, you may request:

A copy of the personal data we hold about you.
Correction of inaccurate data.
Deletion of your account and associated data (subject to legal record-keeping requirements above).
To opt out of marketing cookies at any time (Cookie Preferences in footer).
To unsubscribe from marketing email via the footer link on any email we send.

California residents have additional rights under the CCPA, including the right to know what personal information we collect and the right to opt-out of the "sale" of personal information (we do not sell personal information).

To exercise any right, email orders@strsurplus.com with the subject "Privacy Request". We respond within 30 days.

7. Data security

The site uses HTTPS encryption for all traffic. Passwords are stored using bcrypt hashing. Payments run through Stripe's PCI-DSS Level-1 environment. We audit third-party access quarterly.

No online service is 100% secure. If we ever become aware of a data breach affecting your information, we will notify you within 72 hours.

8. Children

STR Surplus is not directed to children under 16. We do not knowingly collect data from anyone under 16. If you believe we have, contact us and we will delete it.

9. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top of the page reflects the latest change. Material changes will also be announced at the top of the homepage for at least 14 days.

10. Contact

Questions or requests about this Privacy Policy:

STR Surplus LLC
Fort Lauderdale, FL 33304
FL Sunbiz Doc No. L26000449383
orders@strsurplus.com