ToyCraze Privacy Policy outlines how we collect, use, disclose, and protect your personal data in compliance with Hong Kong's Personal Data (Privacy) Ordinance (PDPO) (Cap. 486). This policy applies to all visitors, customers, and users of our Shopify store at toycrazehk.myshopify.com and related platforms.

Information We Collect

We collect personal data you provide during purchases, account creation, or inquiries, including name, email address, billing/shipping address, phone number, payment details, and order history. We also gather automatically collected data like IP address, browser type, device info, cookies, and browsing behavior to improve site functionality and analyze trends.

How We Use Your Data

Your data enables order fulfillment, payment processing, shipping via partners like SF Express, customer service, and fraud prevention. We use it for marketing (with consent), personalized recommendations, and compliance with legal obligations. Aggregated, non-personal data supports business analytics and site enhancements.

Sharing and Disclosure

We share data only with trusted third parties: payment processors (PayPal, Alipay), logistics (SF Express), Shopify for platform services, and marketing tools (Google Ads). No data is sold. International transfers (e.g., to Taiwan/Philippines customers) comply with PDPO safeguards. We disclose if required by law.

Data Security and Retention

We implement reasonable security measures like encryption and access controls to protect data from unauthorized access or loss. Data is retained only as needed for business purposes (e.g., 7 years for orders per tax laws) or legal requirements, then securely deleted.

Your Rights and Choices

Under PDPO, you can request access, correction, or deletion of your data; opt out of direct marketing; and withdraw consent. Contact us at [marketing.toycraze@gmail.com] with subject "PDPO Request." Cookies can be managed via browser settings; our site uses essential and analytics cookies.

Contact and Updates

Questions? Email toycraze.marketing@gmail.com. This policy was last updated December 29, 2025, and may be revised—check regularly. Continued use constitutes acceptance of changes.