Privacy Policy

Effective Date: December 1, 2024
Last Updated: December 1, 2024

Introduction

Welcome to Toyva LLC (“we,” “us,” “our,” or “Toyva”). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website toyva.store (the “Site”) and make purchases from us.

Please read this Privacy Policy carefully. By accessing or using our Site, you acknowledge that you have read, understood, and agree to be bound by all the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Site.

Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our Site, and information from third-party sources.

Information You Provide to Us

Account and Order Information:

  • Full name
  • Email address
  • Shipping address
  • Billing address
  • Phone number
  • Payment information (processed securely through our payment processor)

Communications:

  • Information you provide when you contact customer service
  • Reviews, ratings, or feedback you submit
  • Responses to surveys or promotional communications
  • Any other information you choose to provide

Information We Collect Automatically

Device and Usage Information:

  • IP address
  • Browser type and version
  • Device type and identifiers
  • Operating system
  • Pages you view and links you click
  • Time spent on pages
  • Referring website addresses
  • Date and time of your visit

Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. For more information, see the “Cookies and Tracking Technologies” section below.

Information from Third-Party Sources

We may receive information about you from third-party sources, including:

  • Payment processors
  • Shipping carriers
  • Fraud prevention services
  • Analytics providers
  • Marketing partners

How We Use Your Information

We use the information we collect for the following purposes:

Order Processing and Fulfillment

  • Process and fulfill your orders
  • Send order confirmations and shipping notifications
  • Handle returns, exchanges, and refunds
  • Verify your identity and prevent fraud
  • Process payments and maintain payment records

Customer Service and Communication

  • Respond to your inquiries and provide customer support
  • Send important notices about your account or our services
  • Notify you of changes to our policies
  • Communicate with you about your orders

Marketing and Promotions (With Your Consent)

  • Send promotional emails about new products, special offers, and sales
  • Provide personalized product recommendations
  • Conduct surveys and gather feedback
  • Administer contests, sweepstakes, and promotions

You can opt out of marketing communications at any time by clicking the “unsubscribe” link in our emails or contacting us at contact@toyva.store.

Site Improvement and Analytics

  • Analyze how visitors use our Site
  • Improve our Site’s functionality and user experience
  • Develop new products and services
  • Monitor and analyze trends and usage patterns

Legal and Security Purposes

  • Comply with legal obligations and respond to legal requests
  • Protect our rights, property, and safety
  • Detect, prevent, and address fraud and security issues
  • Enforce our Terms of Service and other agreements

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information based on the following legal grounds:

  • Consent: When you have given us explicit permission to process your personal information for a specific purpose (e.g., marketing communications)
  • Contract Performance: When processing is necessary to fulfill our contractual obligations to you (e.g., processing and shipping your order)
  • Legitimate Interests: When we have a legitimate business interest that does not override your rights (e.g., fraud prevention, website security, business analytics)
  • Legal Obligation: When we must process your information to comply with applicable laws

You have the right to withdraw your consent at any time. However, this will not affect the lawfulness of processing based on consent before its withdrawal.

How We Share Your Information

We do not sell your personal information to third parties. We may share your information in the following circumstances:

Service Providers

We share information with third-party service providers who perform services on our behalf, including:

  • Payment processors
  • Shipping carriers and fulfillment services
  • Email service providers
  • Website hosting and maintenance providers
  • Customer service platforms
  • Analytics and marketing services
  • Fraud prevention and security services

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

Business Transfers

If Toyva LLC is involved in a merger, acquisition, asset sale, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

Legal Requirements

We may disclose your information if required to do so by law or in response to:

  • Valid legal processes (subpoenas, court orders, search warrants)
  • Governmental or regulatory requests
  • Requests from law enforcement or other government officials
  • When we believe disclosure is necessary to protect our rights, your safety, or the safety of others
  • To investigate fraud or other illegal activity

With Your Consent

We may share your information with third parties when you have given us explicit permission to do so.

Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit websites. They help websites remember your preferences and provide a better user experience.

Types of Cookies We Use

Essential Cookies: These cookies are necessary for the Site to function properly. They enable core functionality such as:

  • Shopping cart functionality
  • Secure login and authentication
  • Security and fraud prevention
  • Payment processing

Performance and Analytics Cookies: These cookies help us understand how visitors interact with our Site by collecting anonymous information:

  • Google Analytics
  • Pages visited and time spent
  • Referring sources
  • Click patterns and navigation

Functionality Cookies: These cookies remember your preferences and choices:

  • Language preferences
  • Currency selection
  • Previously viewed products

Marketing and Advertising Cookies: These cookies track your browsing habits to provide personalized advertising:

  • Retargeting campaigns
  • Social media integration
  • Email marketing tracking

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

  • View and delete cookies
  • Block third-party cookies
  • Block all cookies
  • Receive notifications when cookies are set

Please note that disabling cookies may affect the functionality of our Site and your ability to make purchases.

Browser-Specific Instructions:

  • Chrome: Settings > Privacy and Security > Cookies
  • Firefox: Options > Privacy & Security > Cookies
  • Safari: Preferences > Privacy > Cookies
  • Edge: Settings > Cookies and Site Permissions

Do Not Track Signals

Some browsers have “Do Not Track” (DNT) features. Currently, there is no universal standard for how DNT signals should be interpreted. We do not currently respond to DNT signals.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods:

  • Order Information: We retain order and transaction data for 7 years to comply with tax and accounting requirements
  • Account Information: We retain account information for as long as your account is active or as needed to provide services
  • Marketing Information: We retain marketing preferences and communication history until you opt out or request deletion
  • Legal and Compliance Records: We retain information as required by applicable laws and regulations

When we no longer need your information, we will securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

Security Measures Include:

  • SSL/TLS encryption for data transmission
  • Secure servers and databases with restricted access
  • Regular security assessments and updates
  • Employee training on data protection
  • Secure payment processing through PCI-DSS compliant processors
  • Multi-factor authentication for internal systems
  • Regular backups and disaster recovery procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

Rights for All Users

Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your personal information (subject to legal obligations)
Opt-Out: Unsubscribe from marketing communications
Complaint: Lodge a complaint with a supervisory authority

Additional Rights for EEA, UK, and Swiss Residents (GDPR)

Right to Restriction: Request that we limit how we use your information
Right to Data Portability: Receive your information in a portable format
Right to Object: Object to our processing of your information
Right to Withdraw Consent: Withdraw consent at any time (without affecting prior lawful processing)
Right to Lodge a Complaint: File a complaint with your local data protection authority

Additional Rights for California Residents (CCPA/CPRA)

Right to Know: Request information about what personal information we collect, use, and share
Right to Delete: Request deletion of your personal information
Right to Opt-Out: Opt out of the “sale” or “sharing” of your personal information
Right to Correction: Request correction of inaccurate information
Right to Limit Use of Sensitive Information: Limit our use of sensitive personal information
Right to Non-Discrimination: Exercise your privacy rights without discrimination

Do Not Sell or Share My Personal Information: We do not sell your personal information in the traditional sense. However, like many online businesses, we use cookies and similar technologies that may be considered a “sale” or “sharing” under California law. You can opt out using the link below or by contacting us.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

  • Email: contact@toyva.store
  • Phone: +1
  • Mail: Toyva LLC, 10765 N Mather Blvd, Rancho Cordova, CA 95670, USA

Verification Process: To protect your privacy, we will verify your identity before fulfilling your request. We may ask for additional information to confirm your identity.

Response Time: We will respond to your request within 30 days (45 days for California residents). If we need more time, we will notify you and explain the reason for the delay.

Children’s Privacy

Our Site is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children under these ages.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at contact@toyva.store. We will take steps to delete such information from our systems.

Age Verification for California Minors

If you are between 13 and 16 years old and a California resident, you have the right to opt in to the sale or sharing of your personal information. We do not knowingly sell or share information of minors without appropriate authorization.

International Data Transfers

Toyva LLC is based in the United States. If you access our Site from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States.

The United States and other countries may not have the same data protection laws as your home country. By using our Site, you consent to the transfer of your information to the United States and other countries where we operate.

For EEA, UK, and Swiss residents, we use appropriate safeguards to protect your information, including:

  • Standard contractual clauses approved by the European Commission
  • Ensuring service providers comply with GDPR requirements
  • Implementing appropriate technical and organizational measures

Third-Party Links

Our Site may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

Notice of Changes:

  • We will post the updated Privacy Policy on this page
  • We will update the “Last Updated” date at the top
  • For material changes, we may provide additional notice (e.g., email notification or prominent notice on our Site)
  • Continued use of the Site after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Toyva LLC
10765 N Mather Blvd
Rancho Cordova, CA 95670
United States

Email: contact@toyva.store
Phone: +1
Business Hours: Monday – Saturday, 9:00 AM – 5:00 PM Pacific Time

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at: contact@toyva.store

Supervisory Authority

If you are located in the EEA, UK, or Switzerland and have concerns about our privacy practices, you have the right to lodge a complaint with your local data protection supervisory authority.

Additional Information for Specific Jurisdictions

California Residents – Additional CCPA/CPRA Disclosures

Categories of Personal Information Collected (Last 12 Months):

  • Identifiers (name, email, address, phone, IP address)
  • Commercial information (purchase history, shopping behavior)
  • Internet activity (browsing history, interactions with our Site)
  • Geolocation data
  • Inferences (preferences, characteristics, behavior)

Categories of Sources:

  • Directly from you
  • Automatically through cookies and tracking technologies
  • From third-party service providers

Business or Commercial Purposes:

  • Fulfilling orders and providing services
  • Customer service and communication
  • Marketing and advertising
  • Site analytics and improvement
  • Fraud prevention and security

Categories of Third Parties We Share With:

  • Service providers (payment processors, shipping, hosting)
  • Analytics providers
  • Marketing partners
  • Legal and regulatory authorities (when required)

Sale or Sharing of Personal Information: We do not sell personal information for monetary consideration. However, we use cookies and analytics tools that may constitute “sharing” under CCPA. You can opt out using cookie settings or by contacting us.

Retention of Sensitive Personal Information: We do not collect or process sensitive personal information as defined by CCPA (e.g., precise geolocation, racial or ethnic origin, religious beliefs, genetic data).

California Shine the Light Law: California residents can request information about disclosures of personal information to third parties for direct marketing purposes. Contact us at contact@toyva.store to make such a request.

Nevada Residents

Nevada residents have the right to opt out of the sale of their personal information. We do not currently sell personal information as defined under Nevada law. If you have questions, contact us at contact@toyva.store.

European Economic Area, United Kingdom, and Switzerland Residents

Data Controller: Toyva LLC is the data controller responsible for your personal information.

Legal Basis Summary:

  • Consent: Marketing communications, cookies (where required)
  • Contract: Order processing and fulfillment
  • Legitimate Interest: Fraud prevention, analytics, business operations
  • Legal Obligation: Tax records, legal compliance

Cross-Border Transfers: We use standard contractual clauses and ensure appropriate safeguards when transferring data outside your jurisdiction.

Automated Decision-Making: We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Consent to this Privacy Policy: By using toyva.store, you consent to the collection, use, and sharing of your information as described in this Privacy Policy.