Privacy Policy

Who is responsible for your data?

For personal information collected through this website, BuyToysOnline.co.uk acts as the data controller. Our contact address is 56 Carisbrooke Drive, Southport, Merseyside, PR9 7JD. You can contact us through our contact page.

Information we may collect

• Your name, billing and delivery address, email address and telephone number.
• Order, payment-status and transaction information. Card or PayPal credentials are handled by the relevant payment provider and are not stored by us as full payment-card details.
• Account information if you create a customer account.
• Messages you send through our contact form or in relation to an order.
• Technical information such as IP address, browser/device information, security logs and cookie identifiers.

How and why we use it

• To process orders, take payment, arrange delivery and deal with returns or refunds.
• To provide customer service and respond to enquiries.
• To maintain customer accounts and order history.
• To prevent fraud, protect the website and keep checkout secure.
• To meet accounting, tax and other legal obligations.
• Where consent is required, to use non-essential analytics or marketing cookies.

Our legal bases may include performance of a contract, compliance with legal obligations, our legitimate interests in operating and securing the store, and consent where the law requires it.

Who we share information with

We only share information where it is needed to run the store. This can include website/hosting providers, WooCommerce service providers, payment providers such as PayPal, delivery carriers, professional advisers and technology/security providers. We do not sell your personal information.

How long we keep information

We keep information only for as long as it is needed for the purpose collected. Order and accounting records may normally be retained for up to six years where required for tax, accounting or legal purposes. Customer-account information is retained while the account remains active or until it is no longer reasonably required.

Your rights

Under UK data-protection law you may have rights to access, correct or delete personal data, restrict or object to certain processing, request portability and withdraw consent where processing is based on consent. You may also complain to the Information Commissioner's Office (ICO).

Cookies and website security

We use essential cookies required for shopping-basket, checkout, account and security functions. Other cookies are explained in our Cookie Policy.