Privacy policy

CHEERFUL CHILDREN TOYS LIMITED – PRIVACY NOTICE
Last updated 11 June 2025

1. WHO WE ARE
   Cheerful Children Toys Limited, registered in England and Wales (company number 12032621).
   Registered/trading address: 4 Branksome Road, Norwich, Norfolk NR4 6SN, United Kingdom.
   Privacy contact: support@cheerfulchildrentoys.com.
   We do not currently appoint a formal Data-Protection Officer; please use the email above for any privacy query.

2. WHAT DATA WE COLLECT
   • Identity and contact details such as name, email address, telephone number, billing address and delivery address.
   • Payment information such as card details or PayPal ID (handled securely by Shopify Payments).
   • Account information such as login email, hashed password, wish-lists and order history.
   • Marketing preferences such as newsletter opt-in status and cookie choices.
   • Device and usage information such as IP address, browser type, pages visited, referring site and cookies.
   • Age or child-related details only if you voluntarily provide them (for example a child’s name in a gift note).

3. WHY WE USE YOUR DATA AND OUR LEGAL GROUNDS
   • To process and deliver your order (lawful basis: contract).
   • To provide customer service, returns and warranty support (lawful basis: contract).
   • To detect and prevent fraud or keep our platform secure (lawful basis: legitimate interests).
   • To improve our website, products and services through analytics and feedback (lawful basis: legitimate interests).
   • To send marketing emails or SMS messages when you have opted in (lawful basis: consent).
   • To show you personalised advertising on Facebook, TikTok, Google or Amazon ads after you accept cookies (lawful basis: consent obtained via our cookie banner).
   • To meet legal and tax requirements such as HMRC record keeping (lawful basis: legal obligation).

4. WHO WE SHARE YOUR DATA WITH
   • Shopify, which hosts our online store and acts as our primary data processor.
   • Payment processors including Shopify Payments and PayPal.
   • Couriers and fulfilment partners who deliver or collect your parcels.
   • Email and marketing software providers such as Mailchimp or Klaviyo.
   • Advertising networks including Meta (Facebook and Instagram), Google, TikTok and Amazon.
   • Accountants and professional advisers for statutory reporting and auditing.
   All suppliers are contractually required to protect your data and use it only for the agreed purpose. We store all primary data on UK servers; where a supplier stores data overseas, we ensure equivalent protection under UK law.

5. COOKIES AND ONLINE ADVERTISING
   When you first visit our site we show a cookie banner. We only place analytics or advertising cookies if you actively accept them. You can change or withdraw your cookie choices at any time by clicking “Cookie Settings” at the bottom of any page.

6. HOW LONG WE KEEP YOUR DATA
   • Completed orders: seven years (tax and warranty purposes).
   • Abandoned carts: twelve months.
   • Marketing list: until you unsubscribe, then twelve additional months to keep a suppression record.
   • Customer-service emails: two years.
   • Analytics records: up to twenty-six months.
   • Cookies: up to thirteen months, depending on the cookie.
   After these periods the data is deleted or anonymised.

7. HOW WE KEEP YOUR DATA SAFE
   We use Transport Layer Security (TLS) encryption on every page, and payments are processed to PCI-DSS standards so staff never see full card numbers. Data is stored on secure UK servers protected by firewalls, strict access controls and two-factor authentication for staff. We run regular security updates, backups and penetration testing to ensure we are always using the highest security standards available.

8. YOUR RIGHTS
   You can at any time:
   • Access the personal data we hold about you.
   • Ask us to correct or update inaccurate information.
   • Request deletion of data we no longer need.
   • Restrict or object to certain processing.
   • Receive a copy of your data in a portable format.
   • Withdraw any consent you have given, including for marketing emails or optional cookies.
   We aim to respond to all requests within one month. To exercise any right, email support@cheerfulchildrentoys.com. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) if you feel your concerns are not resolved.

9. AGE LIMITS
   Our website and services are intended for adults aged 18 and over. We do not knowingly collect data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it.

10. CHANGES TO THIS NOTICE
    We may update this privacy notice to reflect changes in law or our business practices. The latest version is always available on this page.

If anything here is unclear or if you need more information, please contact us at support@cheerfulchildrentoys.com.