Privacy policy

Who we are

THE TOYMAKERS KEY LTD, trading as The Toymaker's Key, is the controller of the personal information described in this policy. Our registered office is 35 Ballards Lane, London, United Kingdom, N3 1XW. You can contact us about your information at hello@thetoymakerskey.com.

The information we collect

Information you give us when you order or create an account: your name, email address, delivery and billing addresses, phone number if you provide one, and your order history.
Payment information. Our payment providers process your payment details. We receive confirmation of payment and limited details such as the last four digits of your card, but not your full card number.
Messages you send us by email, through our website or by direct message on social media.
Your marketing choices, if you subscribe to our emails.
Technical information collected through cookies and similar technologies when you use the website: your IP address, device and browser type, the pages you view and how you arrived at the website.

How we use your information

Why we use it	Information	Lawful basis	How long we keep it
To take, deliver and manage your order, including returns and refunds	Name, contact details, delivery and billing addresses, order details	Performing our contract with you	Six years after the order, to meet tax and accounting rules
To take payment and prevent fraud	Order and payment confirmation details, and the checks our payment providers run	Performing our contract with you, and our legitimate interest in preventing fraud	Six years after the order
To answer your questions and give customer support	Name, email address, the content of your messages	Our legitimate interest in helping our customers	Up to two years after we last hear from you
To send you news about new releases, jewellery and events	Name, email address, marketing choices	Your consent, or our legitimate interest in marketing similar products to existing customers, with a way to opt out in every email	Until you unsubscribe
To understand how the website is used and improve it	Cookie and usage data	Your consent for analytics and marketing cookies	For the period set in our analytics tools, which is no longer than 14 months
To keep tax and accounting records and respond to legal requests	Order and financial records	Legal obligation	Six years

Who we share your information with

We only share your information with organisations that help us run the shop, and only as far as they need it to do so:

Shopify, which provides our online store, hosting and checkout.
Our payment providers, for example Shopify Payments and PayPal.
Delivery companies, for example, Royal Mail.
Our email marketing provider, HighLevel.
Google, for website analytics through Google Analytics and Google Search Console.
Advertising and social media platforms, such as Meta (Facebook and Instagram) and TikTok, through tracking tools on our website that help us measure and improve our advertising. These only run if you accept marketing cookies.
Our accountants and professional advisers, and public authorities such as HMRC where the law requires it.

We do not sell your personal information.

Orders through AI shopping assistants and other sales channels

If you buy through an AI shopping assistant or another third-party sales channel connected to our store, that platform shares with us the details we need to fulfil your order, such as your name, delivery address and the items you bought. The platform handles your information under its own privacy policy, and we handle what we receive under this one.

Transfers outside the UK

Some of the organisations we use, including Shopify and Google, may process information outside the UK. Where they do, we rely on safeguards that UK data protection law recognises, such as an adequacy decision or approved standard contractual clauses.

Your rights

Under UK data protection law, you have the right to:

be told how we use your information;
ask for a copy of the information we hold about you;
ask us to correct wrong information;
ask us to erase your information;
ask us to restrict how we use it;
ask for it in a portable format;
object to our use of it where we rely on legitimate interests, including for marketing; and
withdraw your consent at any time where we rely on it.

To use any of these rights, email hello@thetoymakerskey.com. We will respond within one month. We do not make decisions about you using automated processing that have legal or similarly significant effects. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies and similar technologies

Our website uses cookies that are essential for the shop to work, such as those that remember your basket and keep checkout secure. We only use analytics and marketing cookies with your consent, which you can give or withdraw using the cookie banner on the website or in your browser settings. Blocking essential cookies may stop parts of the website from working.

Marketing emails

We only email you about our products and news if you have signed up, or if you have bought from us and the email is about similar products. Every email has an unsubscribe link, and you can also ask us to stop by emailing hello@thetoymakerskey.com.

Children

Our website is not aimed at children under 13, and we do not knowingly collect their personal information. If you think a child has given us their information, please contact us, and we will delete it.

Security

We use reasonable technical and organisational measures to protect your information, and we rely on Shopify and our payment providers for the secure handling of payments. No online service can be completely secure, so please take care with your own account details.