Privacy Policy
Last updated: [April 1, 2026]
This Privacy Policy describes how toptoyau.com (the “Site”, “we”, “us”, or “our”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site. We are committed to protecting your privacy in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of the Laws of Hong Kong (“PDPO”) and, where applicable, the GDPR.
1. Collecting Personal Information
When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases.
- Device Information:
-
- Examples: Version of web browser, IP address, time zone, cookie information, viewed products, and search terms.
- Purpose: To load the Site accurately and perform analytics to optimize user experience.
- Source: Collected automatically via cookies, log files, web beacons, tags, or pixels.
- Disclosure: Shared with our processor Shopify.
- Order Information:
-
- Examples: Name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number.
- Purpose: To fulfill our contract (processing payments, shipping, invoices), communicate with you, screen for potential fraud, and provide marketing updates (where permitted).
- Source: Collected directly from you.
- Disclosure: Shared with Shopify and relevant shipping/logistics partners.
2. Minors (Important for Toy Category)
The Site is not intended for individuals under the age of 16. We do not intentionally collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at support@toptoyau.com to request deletion.
3. Sharing Personal Information
We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you. For example:
- We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.
- We may share your Personal Information to comply with applicable laws, respond to subpoenas, or protect our rights.
- We may share information with third-party tools for our Loyalty Program and marketing (e.g., Google Ads, Meta Pixel).
4. Behavioral Advertising
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.
- Opt-out: You can opt-out of targeted advertising by visiting the settings of the respective platforms (e.g., Facebook Ad Settings, Google Ads Settings).
5. Lawful Basis & Your Rights
If you are a resident of the European Economic Area (EEA) or Hong Kong, you have certain data protection rights:
- Access & Correction: You have the right to access the personal information we hold about you and to ask that it be corrected or updated.
- Erasure: You have the right to request that we erase your personal information.
- International Transfers: Your information may be transferred outside of Hong Kong (e.g., to Shopify servers in the US/Canada). We ensure these transfers comply with relevant privacy laws.
6. Cookies
A cookie is a small amount of information downloaded to your device. We use functional, performance, and advertising cookies to optimize your experience. You can control cookies through your browser settings, but please note that removing cookies may affect your access to certain services.
7. Retention
When you place an order through the Site, we will retain your Personal Information for our records unless and until you ask us to erase this information.
8. Changes
We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons.
9. Contact & Complaints
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us:
- Email: support@toptoyau.com
If you are not satisfied with our response to your complaint, you have the right to lodge your complaint with:
- In Hong Kong: The Office of the Privacy Commissioner for Personal Data (PCPD) at www.pcpd.org.hk.
- In the EEA: Your local data protection supervisory authority.