Privacy Policy

Welcome to My Old Toy Box! Your privacy is of utmost importance to us. We are committed to protecting your personal information and ensuring that all data collected when you purchase toys through our website or use our services is handled transparently and securely. This Privacy Policy explains how we collect, use, disclose, and protect your personal information, and your rights regarding your data. Please read carefully.

1. Effective Date

This Privacy Policy will be effective from April 29, 2026, and applies to all users who visit our website, make purchases, or create accounts.

2. What Information We Collect

We collect necessary personal information to provide you with toy products and services, improve your shopping experience, and fulfill our legal obligations. The information we collect includes:

Personally Identifiable Information: Name, email address, phone number, mailing address, date of birth (if you provide this, for example, when purchasing age-specific toys for children), and account login credentials (username and password).

Payment Information: Credit card or debit card information (securely processed through third-party payment service providers; we do not store complete card information), billing address, and payment confirmation information.

Shopping and Order Information: Toy products you browse, purchase history, order details (including toy type, quantity, and shipping preferences), and order status.

Device and Usage Information: IP address, device type, browser type, operating system, browsing history on our website, pages viewed, time spent on our website, and click behavior (automatically collected when you visit our website).

Communication Information: Records of communications between you and us (e.g., emails, phone calls, or messages regarding toy orders, returns, or customer support).

Optional Information: Toy category preferences, marketing licenses, and your feedback on our products or services.

3. Data Controller

The data controller responsible for your personal information is: My Old Toy Box

Address: 15 Smithfield Market, Winetavern Street, Belfast, BT1 1JE, United Kingdom

Email: info@myoldtoybox.shop

If you have any questions about how we process your personal data, please contact us using the details above.

Lawful Basis for Processing (UK GDPR Article 6)

We process your personal data under the following lawful bases as set out in Article 6 of the UK General Data Protection Regulation:

Performance of a contract: Processing necessary to fulfil your toy orders, process payments, and deliver products.

Legal obligation: Processing required to comply with UK tax, accounting, and consumer protection laws.

Legitimate interests: Processing to improve our products, prevent fraud, and ensure website security, where these interests are not overridden by your rights.

Consent: Processing for marketing communications, which you may withdraw at any time.

4. Sources of Personal Information

We may collect personal information from the following sources:

Directly from you: This includes when you create an account on our website, order toys, subscribe to our newsletter, contact our customer support, fill out forms (e.g., return or exchange forms), or otherwise voluntarily provide us with your personal information (e.g., feedback).

Automatically collected through the Service: We collect information from your device when you use our website, browse our toy products, or interact with our online services. This includes data collected through the use of cookies and similar tracking technologies (see Section 10 for details).

From our service providers: When we engage third-party service providers to help us operate our business (e.g., payment processors, logistics partners such as UPS, IT management, data analytics, and customer support), they may collect or process your personal information on our behalf.

From our partners or other third parties: Trusted partners (e.g., marketing platforms, toy suppliers, or social media platforms if you log in to our website using a social media account) will provide information with your consent or in accordance with their own privacy policies.

5. How We Use Your Information

We will use your personal information for legitimate business purposes related to our toy store, including:

Processing and fulfilling your toy orders, including verifying your identity, processing payments, arranging delivery (through UPS or other partners), and sending order confirmations and logistics updates.

Providing customer support, including assisting you with toy returns, exchanges, refunds, and answering your questions about our products (e.g., toy safety, age suitability, or stock availability).

To improve our products and services, including analyzing browsing and purchasing behavior to understand which toys are popular, optimizing our website, and enhancing the online and offline shopping experience.

To send you marketing messages (if you have consented), including information on new arrivals, special offers, discounts, and promotions related to our products.

To maintain the security of our website and services, detect and prevent fraud, and prevent unauthorized access to or misuse of personal information.

To comply with legal obligations, including tax, accounting, and consumer protection laws applicable to UK toy retailers.

To personalize your shopping experience, including recommending toys based on your browsing and purchasing history.

6. How We Disclose Personal Information

We will never trade, sell, or otherwise disclose your personal information to third parties for our own marketing purposes without your explicit consent, except in the following circumstances:

Service Providers: We may share your personal information with reputable third-party service providers to assist us in operating our toy business, provided they agree to keep your information confidential. These service providers include:

Payment processors (for securely processing toy order payments);

Logistics partners (such as UPS, including trucking for large toys) for fulfilling and delivering your orders;

IT management and cloud storage service providers (for maintaining our website and securely storing data);

Customer support and data analytics service providers (for improving our services and assisting you with your questions);

Logistics partners (for managing our toy inventory and processing orders).

Business and marketing partners: We may share non-identifiable or aggregated information (such as popular toy categories, browsing trends) with our business and marketing partners to help us promote our products. We may also share your information with marketing partners if you have consented to receive targeted advertising about our toys (you can opt out at any time; see Section 8).

Your consent: When you instruct, request, or otherwise consent to us disclosing certain information to third parties (for example, to ship toys to an address you specify, or through your use of social media plugins or login integrations).

Corporate Groups: Information may be shared with our affiliates or within our corporate groups (where applicable) for business purposes in accordance with this Privacy Policy.

Legal Compliance and Protection: To comply with any applicable legal obligations (including responding to subpoenas, search warrants, or other legal requirements of public authorities), enforce our Terms of Service or this Privacy Policy, and protect the rights, property, or safety of us, our users, or others. This may include disclosing information to prevent fraud or damage related to toy orders or our services.

Business Transactions: In business transactions such as mergers, acquisitions, asset sales, or bankruptcy, your personal information may be transferred to the acquiring party (who will be bound by this Privacy Policy).

7. Data Security And Retention

Data Security

We attach great importance to data security and take appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

Encrypting sensitive data (such as payment information) using industry-standard encryption technologies;

Storing data securely on protected and restricted-access servers;

Conducting regular security audits and updates to our website and systems;

Providing employees with data protection training, particularly regarding sensitive information related to children's toy purchases;

Requiring third-party service providers to maintain the same security standards.

While we take all reasonable steps to protect your information, no data transfer or storage method is 100% secure. We cannot guarantee absolute security, but we will always uphold the principle of good faith in protecting your personal information.

Data Retention

We retain your personal information only for the time necessary to achieve the purposes for which it was collected or as required by law. Specifically:

Order and payment information: Your information is retained to comply with UK tax and accounting laws;

Account information: Retained while your account is active or after your last interaction with us;

Marketing information: Retained until you opt out of marketing communications or after your last marketing interaction;

Device and usage information: Unless required for security or legal purposes.

After the retention period, we will securely delete or anonymize your personal information so that it can no longer be identified as your personal information.

8. Third Party Links

Our website may contain links to third-party websites, including toy suppliers, payment processors, or social media platforms. This Privacy Policy does not apply to these third-party websites. We are not responsible for the privacy practices or content of these websites. We recommend that you read the privacy policies of any third-party websites you visit to understand how they collect and use your information.

9. International Data Transfers

Your personal information may be transferred to, and processed in, countries outside the United Kingdom. Where we transfer data outside the UK, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the UK Government for transfers to countries without adequacy decisions;

• Transfers to countries recognised by the UK Secretary of State as providing adequate data protection;

• Where applicable, reliance on binding corporate rules or approved certification mechanisms.

These safeguards ensure your personal data receives an equivalent level of protection regardless of where it is processed. You may request a copy of the safeguards we apply to international transfers by contacting us at info@myoldtoybox.shop.

10. Your Rights

Under UK data protection laws (including the General Data Protection Regulation (GDPR) and the Data Protection Act 2018), you have the following rights regarding your personal information:

Right of Access: You have the right to request a free copy of the personal information we hold about you.

Right of Correction: You have the right to request that we correct any inaccuracies or incompleteness in your personal information.

Right of Erasure: You have the right to request that we erase your personal information (also known as the "right to be forgotten") provided that we have no legitimate reason to retain your personal information. Retaining Your Personal Information.

Right to Restrict Processing: You have the right to request that we restrict the processing of your personal information (e.g., if you dispute the accuracy of the data).

Right to Data Portability: You have the right to request that we provide your personal information in a structured, machine-readable format so that you can transfer it to other service providers.

Right to Object: You have the right to object to our processing of your personal information for marketing or other legitimate business purposes (we will review your request and will stop processing if there is no overwhelming reason to continue).

Right to Withdraw Consent: If you have consented to our processing of your information (e.g., for marketing purposes), you may withdraw your consent at any time. This will not affect the legality of the processing prior to your withdrawal of consent.

This Privacy Policy also complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For data protection inquiries, you may contact the Information Commissioner's Office (ICO):

Website: https://ico.org.uk

Phone: 0303 123 1113

11. Children's Privacy

Our toys are designed for children, but we do not knowingly collect personal information from children under the age of 13 without the consent of a parent or guardian. If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately. We will immediately remove the child's personal information from our records.

We may collect limited information about children (e.g., age range) to recommend age-appropriate toys, but this information is collected only with the consent of a parent or guardian and will not be used for marketing purposes without explicit permission.

12. Cookies

We use cookies and similar tracking technologies (e.g., web beacons, pixels) to improve your shopping experience on our website. Cookies are small text files stored on your device that help us remember your preferences, track browsing behavior, and improve our website and services.

Necessary Cookies: Cookies necessary for the website to function properly (e.g., processing toy orders, managing your account, and enabling secure checkout). These cookies cannot be disabled.

Analytics Cookies: Used to track how you use our website (e.g., the toy pages you visit, the time you spend on the site) to improve our website and services.

Marketing Cookies: Used to send you targeted advertising about our toys and promotions on our website and third-party platforms. You can choose to disable these cookies at any time.

You can control or delete cookies through your browser settings. However, disabling certain cookies may affect the functionality of our website (for example, you may not be able to process toy orders or access your account).

13. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal obligations, or technology. Any changes will be posted on our website, indicating the new effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

If we make significant changes to this policy (for example, changing how we collect or disclose your information), we will notify you before the changes take effect by email (if you have provided an email address) or by posting a prominent notice on our website.