Privacy Policy

Last updated: 4 September 2026

At AC TOYZ, we take the privacy of our customers and website visitors seriously. This Privacy Policy explains what personal information we collect, why we use it, who we may share it with, and the rights you have in relation to your personal information.

This policy applies when you visit www.actoyz.uk, place an order with us, contact us, use a customer account, sign up for marketing, or otherwise interact with AC TOYZ.

1. Who We Are

AC TOYZ is responsible for the personal information described in this Privacy Policy and acts as the data controller where applicable.

For privacy enquiries, contact:

AC TOYZ
Email: contact@actoyz.uk

2. Information We Collect

Depending on how you interact with us, we may collect information including:

• your name;
• billing and delivery address;
• email address and telephone number;
• order and transaction information;
• products purchased or viewed;
• customer account information;
• communications you send to us;
• marketing preferences;
• information about how you use our website;
• device, browser and technical information, such as your IP address; and
• cookie and similar technology information where applicable.

Payment information is processed through the payment services available through our online store. We do not need to store your complete payment card details ourselves to process an ordinary online card payment.

3. How We Use Your Information

We may use your personal information to:

• process, fulfil and deliver orders;
• take and administer payments;
• provide order confirmations and delivery information;
• manage returns, refunds and cancellations;
• respond to customer service enquiries;
• operate customer accounts;
• prevent and investigate fraud, misuse and security incidents;
• operate, maintain and improve our website and services;
• understand how customers use our website;
• comply with legal, accounting and regulatory obligations; and
• send marketing communications where permitted.

We do not sell your personal information.

4. Our Lawful Bases

Under UK data protection law, we need a lawful basis for processing personal information.

Depending on the circumstances, we may rely on:

Contract — where processing is necessary to take steps before entering into a contract with you or to perform our contract with you, including accepting, fulfilling and delivering your order.

Legal obligation — where processing is necessary to comply with legal requirements, including applicable tax, accounting and consumer-law obligations.

Legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests. This may include protecting our business against fraud and misuse, securing and improving our services and maintaining appropriate business records.

Consent — where we have asked you to make a genuine choice and you have agreed to particular processing, including where consent is required for certain marketing or non-essential cookies and similar technologies.

Where we rely on consent, you may withdraw it at any time. This does not affect processing that was lawful before consent was withdrawn.

5. Orders and Payments

When you place an order, we use the information you provide to process your purchase, take payment, arrange delivery, communicate with you about your order and provide customer service.

We use third-party ecommerce and payment service providers to operate our online store and securely process transactions.

The payment provider involved may depend on the payment method you choose at checkout.

6. Marketing

We may use your contact details to send marketing communications where you have consented or where we are otherwise permitted to do so by law.

We use third-party email marketing service providers to help manage and send these communications.

You can unsubscribe from marketing emails at any time using the unsubscribe option included in our marketing emails.

Stopping marketing communications will not prevent us from sending necessary non-marketing messages relating to your orders or customer service enquiries.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies for purposes such as operating the website, remembering choices and, where permitted, providing website functionality, analytics and marketing.

Where consent is required for non-essential cookies or similar technologies, these should only be used in accordance with the choices you make through our cookie consent controls.

More information about the technologies we use and the choices available to you is provided in our Cookie Policy.

8. Who We Share Information With

We only share personal information where there is an appropriate reason to do so.

Depending on your interaction with us, recipients may include:

• ecommerce platform and website service providers;
• payment providers used to process transactions;
• delivery and postal providers used to fulfil orders;
• email marketing service providers;
• website functionality, analytics and consent-management service providers;
• professional advisers and other service providers where reasonably necessary;
• fraud-prevention, security and technical service providers where applicable; and
• regulators, courts, law-enforcement bodies or other authorities where disclosure is required or permitted by law.

Service providers may process personal information on our behalf or, in some circumstances, for their own purposes under their own privacy information.

We do not share personal information with third parties simply for them to use for their own unrelated marketing.

9. International Transfers

Some organisations and technology providers we use may process personal information outside the United Kingdom.

Where this involves a restricted international transfer, appropriate steps are taken to protect the information in accordance with UK data protection law. Depending on the circumstances, this may include UK adequacy regulations or appropriate safeguards recognised under UK data protection law.

10. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer service, maintaining appropriate business and transaction records, resolving disputes and meeting legal, tax, accounting and regulatory requirements.

Different types of information may therefore be kept for different periods.

When information is no longer required, it will be deleted or anonymised where appropriate, subject to any continuing legal or legitimate requirement to retain it.

11. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

12. Your Data Protection Rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

• request access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase your information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to certain processing;
• receive certain information in a portable format where the right to data portability applies; and
• withdraw consent where we rely on consent.

You have the right to object to the use of your personal information for direct marketing at any time.

Some rights are subject to conditions and exemptions and therefore do not apply in every situation.

To exercise a data protection right, contact us at contact@actoyz.uk. We may need to verify your identity before completing a request.

13. Complaints

If you have a concern about how AC TOYZ has used your personal information, please contact us at contact@actoyz.uk so that we can look into it.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's data protection regulator.

Further information about your data protection rights and making a complaint is available from the ICO.

14. Children's Privacy

Our products may be intended for children, but our online store and purchasing services are intended to be used by adults or by people legally able to enter into the relevant transaction.

We do not intentionally use our website to collect personal information directly from children for profiling or marketing purposes.

If you believe a child has provided personal information to us in circumstances that require attention, please contact us.

15. Changes to This Privacy Policy

We may update this Privacy Policy where necessary to reflect changes to our business, services, technology or legal obligations.

When we make changes, we will update the Last updated date at the top of this policy.

16. Contact Us

For questions about this Privacy Policy, the use of your personal information or your data protection rights, contact:

AC TOYZ
Email: contact@actoyz.uk