Privacy Policy

Last Updated: March 2026

Welcome to Toy & Craft. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

1. Information We Collect

When you interact with Toy & Craft, we may collect and process the following data about you:

• Identity Data: includes first name, last name, username, or similar identifier.
• Contact Data: includes billing address, delivery address, email address, and telephone numbers.
• Transaction Data: includes details about payments to and from you and other details of products you have purchased from us.
• Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Usage Data: includes information about how you use our website, products, and services.

2. How We Collect Your Data

We use different methods to collect data from and about you including through:

• Direct interactions: You may give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise (e.g., placing an order in our shopping cart).
• Automated technologies or interactions: As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions, and patterns. We collect this personal data by using secure storage such as cookies, server logs, and similar technologies.

3. Third-Party Services

Our application infrastructure relies on several third-party services to deliver a fast and secure experience:

• Google Firebase: We utilize Firebase to securely store our core product catalog, categories, user carts, and checkout information.
• Google Drive: Product images and assets are hosted via Google Drive infrastructure.
• Social Messengers: Our floating chat widget links out to public platforms (WhatsApp, Messenger, Instagram). Interacting with those links subjects you to the privacy policies of Meta platforms.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and they are subject to a duty of confidentiality.

5. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to request access, correction, erasure, restriction, transfer, to object to processing, to portability of data, and (where the lawful ground of processing is consent) to withdraw consent.

6. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us via our social channels (WhatsApp or Messenger) accessible via the chat widget on the main page.