This notice applies to any online and mobile website, application and digital service ("Services") of Toyzz Ltd., trading as Toyzz, "we", "us" or "our").
It also describes your data protection rights, including a right to object to some of the processing which Toyzz carries out (e.g. direct marketing). More information about your rights, and how to exercise them, is set out in the “What rights do I have?” section. You can also learn about cookies and similar technology in this notice.
What information do we collect?
The following categories of personal data will be collected about you in connection with your interaction with us and use of our Services including, but not limited to, when you purchase products on our Services, you complete forms on our Services, submit user-generated reviews or ratings, and engage in any social media functions on our Services.
Sometimes we receive personal data about you from third parties when you engage with our Services through social media, or other non-Toyzz sites or applications, those sites will share personal data with us including, but not limited to:
The privacy notices for these sites and applications will contain more detail about this and how to change your privacy settings on those sites and applications.
How do we use this information, and what is the legal basis for this use?
We process your personal data for the following purposes:
To conduct our business and pursue our legitimate interests, in particular:
we will use your personal data to provide products and Services you have requested, and respond to any comments or complaints you may send us;
we monitor use of our Services, and use your personal data to help us monitor, improve and protect our products, content, Services and websites, both online and offline;
we use your personal data to personalise our products and Services for you;
to prevent, investigate and/or report fraud, misrepresentation, security incidents or crime, in accordance with applicable law;
we use information you provide to investigate any complaints received from you or from others, about our website or our products or services;
we will use data in connection with legal claims, compliance, regulatory and investigative purposes as necessary (including disclosure of such information in connection with legal process or litigation); and
Where you give us your consent, we will use your personal data:
to send you newsletters and other promotional material about our Services and to use technologies to check if these have been received and opened to help make our communications relevant to you;
to place cookies and use similar tracking technologies (as set out in the "Cookies" section and the information provided to you when those technologies are used) to personalise content and advertising for you and to make our content function better;
to invite you to take part in market research (where consent is required);
and on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
For purposes which are required by law:
in response to requests by government or law enforcement authorities conducting an investigation.
Relying on our legitimate interests
We have carried out balancing tests for all the data processing we carry out on the basis of our legitimate interests, which we have described above. You can obtain information on any of our balancing tests by contacting us using the details set out below.
Who will we share this data with, where and when?
With your consent (where required), we share your personal data with trusted third party service providers, suppliers, affiliates, divisions, partners, sponsors, agents and representatives we have engaged to perform business-related functions on our behalf. For example, to: (i) conduct research and analytics; (ii) create content; (iii) provide customer support services; (iv) conduct or support marketing; (v) fulfil orders; (vi) handle payments; (vii) host Services; (viii) administer contests; and (ix) maintain databases.
In all cases, the third party is acting on Toyzz’s express instructions and in accordance with this Policy, confidentiality and levels of security.
Without your consent, we share your personal data:
How long will you retain my data?
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
Where we process personal data in connection with performing a contract or for a competition, we keep the data for 6 years.
Where we process registration data, excluding in the circumstances outlined above, we retain your data for 6 years.
What rights do I have?
You have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this data to another controller.
You can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with us using the contact details set out below. If you have unresolved concerns, you have the right to complain to an EU data protection authority where you live, work or where you believe a breach may have occurred.
Where we require your personal data to comply with legal or contractual obligations, then provision of such data is mandatory: if such data is not provided, then we will not be able to manage our contractual relationship with you, or to meet obligations placed on us.
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests.
You have an absolute right to opt-out of direct marketing we carry out for direct marketing, at any time. You can do this by clicking on the unsubscribe link at the bottom of our emails, or by contacting us using the details set out below.
We have put in place physical, electronic, and managerial procedures designed to help prevent unauthorised access, to maintain data security, and to use correctly the personal data we collect online. These safeguards vary based on the sensitivity of the personal data that we collect and store.
Although we take appropriate measures to safeguard against unauthorised disclosures of personal data, we cannot assure you that your personal data will never be disclosed, altered or destroyed in a manner that is inconsistent with this privacy notice.
Our Services do not target and are not intended to attract children under the age of 16. We do not knowingly solicit personal data from children under the age of 16 or send them requests for personal information.
When you visit the Services we may store some information (commonly known as a "cookie" or similar technologies) on your device. Cookies are pieces of information that a website transfers to your hard drive to store and sometimes track information about you. Cookies are specific to the server that created them and cannot be accessed by other servers, which means that they cannot be used to track your movements around the web.
Cookies can be categorised in accordance with the categories found in the ICC UK Cookie guide as set out below:
Cookies can also be categorised in accordance with how long they are saved on your device. "Session cookies" are short-term cookies that are only saved on the computer's memory for the duration of a user's visit to the website, whereas "persistent cookies" remain saved in the computer's memory for a set period of time, even after the browser session has ended.
How to manage & remove cookies
If you are using our Services via a windows browser you can change your cookie preferences and withdraw your consent at any time by following the steps here.
If you are using our Services via a Macintosh/iOS browser you can change your cookie preferences and withdraw your consent at any time by following the steps here.
If you are using our Services via a browser other than above mentioned you can change your cookie preferences and withdraw your consent at any time by following the relevant browser’s direction.
If you are using our Services via an application, then you can change your consent by following the relevant application’s directions. In addition, the operating system for your device provides instructions on how to prevent tailored advertising and how to reset your device's advertising identifier.
Who is the data controller?
The data controller for your information is Toyzz which you have a relationship with or which manages the website you have visited. Please find our contact details below.
How do I get in touch with you?
We hope that we can satisfy queries you may have about the way we process your data. If you have any concerns about how we process your data, or would like to opt out of direct marketing, you can email firstname.lastname@example.org
Changes to this Privacy Notice
From time to time, we may update this notice. We will notify you about any upcoming material changes by either sending you an email to the email address you most recently provided to us or by prominently posting a notice on our Services. We encourage you to periodically check back and review this notice so that you know what personal data we collect, how we use it, and with whom we share it.