Privacy and cookies

Who we are

Toylo is the controller of the personal data described in this notice.

Email: toyharborservice@gmail.com

What we collect

• Your name, email address, delivery and billing addresses and, if you give it, your phone number.
• What you order, and your order and returns history.
• Your account details, if you create an account. Passwords are stored securely and we cannot read them.
• Messages you send us.
• Technical information such as your IP address and browser type, which our hosting providers record to keep the site running and secure.

Card payments are handled by our payment provider. We never see or store your full card number.

How we use it

• To take, deliver and support your orders, including order and delivery emails. This is necessary to perform our contract with you.
• To run your account, answer your questions and handle returns.
• To keep the site secure and prevent fraud, which is in our legitimate interests.
• To keep financial records, which the law requires.

We do not send marketing emails unless you have asked us to, and we never sell your personal data.

Who we share it with

• Delivery companies, so they can deliver your order.
• Our payment provider, to take payment securely.
• The service providers that run our shop: Cloudflare (website hosting), Railway (order system and database) and Google (email).

Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is protected by UK adequacy regulations or approved contractual safeguards.

How long we keep it

We keep order and payment records for six years to meet tax and accounting rules. We keep your account until you ask us to close it, and other information only for as long as we need it for the purposes above.

Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to how we use it, and to receive a copy in a portable format. To use any of these rights, email toyharborservice@gmail.com. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We only use cookies that are essential for the shop to work: to keep your basket, remember your region and keep you signed in. We do not use analytics or advertising cookies. If that ever changes, we will ask for your consent first.

Children

Our shop is for adults buying for children. We do not knowingly collect personal data from children.

Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed.