Privacy policy

Privacy Policy

Last Updated: October 28, 2026

This Privacy Policy describes how ToyRocket, (the "Website", "we", "us", or "our"), collects, uses, stores, and discloses personal information when you visit our website, use our services, make a purchase at https://www.toyrocket.store, or otherwise communicate with us (collectively, the "Services").

For the purposes of this Privacy Policy, "you" and "your" refer to any user of our Services, including customers, website visitors, and other individuals whose personal information we process.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business practices, operational requirements, technology, or applicable legal and regulatory obligations.

When changes are made, we will publish the updated Privacy Policy on our Website and revise the "Last Updated" date.

Where required by law, we will provide additional notice or obtain consent.

How We Collect and Use Your Personal Information

To provide our Services, we collect personal information from various sources.

The information we collect depends on how you interact with our Website and Services.

We may use your information to:

Process and fulfil orders;
Manage payments and refunds;
Arrange international shipping;
Communicate with customers;
Provide customer support;
Improve our Website and Services;
Prevent fraud and unauthorised transactions;
Comply with legal obligations;
Protect our rights and those of our customers;
Conduct marketing activities where legally permitted.

We process personal information only where an appropriate legal basis applies.

Personal Information We Collect

Information You Provide Directly

Information provided directly through our Services may include:

Contact details: name, postal address, telephone number, and email address.
Order information: products purchased, billing address, shipping address, payment confirmation, order history, and contact details.
Account information: username, password, and account preferences where customer accounts are available.
Customer support information: messages, enquiries, complaints, photographs, and other information voluntarily provided when contacting us.

Certain information is necessary to complete purchases or provide requested services.

If you choose not to provide the required information, some Services may not be available.

Information Collected Automatically

We may automatically collect information about your interaction with our Website through cookies, pixels, and similar technologies.

This information may include:

IP address;
Device information;
Browser type and version;
Operating system;
Network connection information;
Pages visited;
Website interactions;
Shopping cart activity;
General location information derived from technical data.

The use of non-essential tracking technologies is subject to applicable consent requirements.

Information Obtained from Third Parties

We may receive personal information from third-party service providers, including:

Shopify, which provides our e-commerce infrastructure;
Payment service providers, including OceanPayments where used for transaction processing;
Shipping and logistics providers, which arrange international deliveries;
Analytics providers, which help us understand Website performance;
Advertising and marketing providers, where their services are enabled and legally permitted.

Payment service providers may process payment card details, transaction identifiers, billing information, and fraud prevention data.

ToyRocket does not require customers to provide complete payment card credentials through email or customer support communications.

Information obtained from third parties will be handled in accordance with applicable data protection legislation.

How We Use Your Personal Information

Providing Products and Services

We use personal information to fulfil our contractual obligations, including:

Processing purchases and payments;
Confirming orders;
Preparing and dispatching products;
Managing international deliveries;
Sending order notifications;
Handling returns and refunds;
Providing customer support;
Maintaining customer accounts where available.

For customers protected by the GDPR, the primary legal basis is Article 6(1)(b), performance of a contract.

Marketing and Advertising

We may use personal information to communicate information about products, promotions, and special offers.

Marketing activities may include:

Promotional emails;
Advertising campaigns;
Personalised product recommendations;
Website advertising;
Audience measurement and campaign analysis.

Where required, we will obtain your consent before sending electronic marketing communications or using non-essential advertising cookies.

You may unsubscribe from promotional communications at any time.

We may also rely on another appropriate legal basis where permitted by applicable law.

Security and Fraud Prevention

We process certain information to identify and prevent:

Fraudulent transactions;
Unauthorised account access;
Payment abuse;
Suspicious activities;
Security threats.

Where applicable, these activities may be based on our legitimate interests under Article 6(1)(f) GDPR or on legal obligations.

Customer Communication and Service Improvement

We use personal information to respond to enquiries, resolve complaints, provide customer support, and improve our Services.

The applicable legal basis may include contractual necessity, legal obligations, or legitimate interests, depending on the circumstances.

Cookies and Similar Technologies

ToyRocket uses cookies and similar technologies to support Website functionality and improve the shopping experience.

These technologies may be used to:

Maintain shopping cart functionality;
Remember preferences;
Enable secure checkout;
Analyse Website performance;
Understand customer interactions;
Support advertising and marketing activities.

For information about Shopify cookies, please visit:

https://www.shopify.com/legal/cookies

Cookies that are not strictly necessary for the operation of the Website will be subject to applicable consent requirements.

Where required, visitors will be able to accept, reject, or manage non-essential cookies through our consent management interface.

You may also configure your browser to block or delete cookies.

Disabling essential cookies may affect certain Website functions.

How We Share Personal Information

We may disclose personal information to third parties where necessary to provide our Services or comply with applicable law.

Recipients may include:

Technology and hosting providers;
E-commerce platform providers;
Payment processors;
Shipping and logistics companies;
Customer support providers;
Analytics and marketing providers;
Professional advisers;
Regulatory authorities;
Companies within our corporate group, where applicable.

We may also disclose information when required by law, to enforce contractual rights, or to protect our Services and customers.

Where consent is required for advertising-related disclosures, we will obtain it before proceeding.

Categories of Information Shared

Information Category	Potential Recipients
Contact and identification details	Customer support and logistics providers
Order and transaction information	E-commerce and payment providers
Shipping information	International delivery partners
Website usage information	Technology and analytics providers
Advertising information	Marketing providers, where legally permitted
Fraud prevention information	Payment and security providers

We do not intentionally collect or use special categories of personal data for purposes unrelated to providing our Services.

Third-Party Websites and Links

Our Website may contain links to websites or online platforms operated by third parties.

We do not control the privacy practices or security policies of external websites.

We recommend reviewing the privacy policies and terms of use of any third-party website before providing personal information.

The inclusion of external links does not necessarily constitute an endorsement of their content or services.

Children's Personal Information

ToyRocket sells toys and related products, but our online purchasing Services are intended for adults or individuals legally authorised to make purchases.

Our products may be intended for children, but this does not mean that our Website is intended to collect personal information directly from children.

We do not knowingly collect personal information from children without the consent or authorisation required by applicable law.

If a parent or legal guardian believes that a child has provided personal information improperly, they may contact us to request its review or deletion.

We do not intentionally use children's personal information for unlawful behavioural advertising.

Security and Retention of Personal Information

We implement appropriate technical and organisational measures to protect personal information against unauthorised access, disclosure, alteration, loss, or misuse.

However, no electronic transmission or storage system can guarantee absolute security.

We recommend that customers avoid sending sensitive financial information through unsecured communication channels.

Data Retention

We retain personal information only for as long as necessary for legitimate business and legal purposes.

Retention periods depend on factors including:

Order fulfilment;
Customer account administration;
Tax and accounting obligations;
Product warranties;
Returns and disputes;
Fraud prevention;
Legal claims;
Regulatory compliance.

When information is no longer required, it will be deleted, anonymised, or otherwise handled in accordance with applicable law.

Your Privacy Rights

Depending on your country of residence and the applicable legislation, you may have the following rights.

Right of Access

You may request access to the personal information we hold about you.

Right to Rectification

You may request the correction of inaccurate or incomplete personal information.

Right to Erasure

You may request the deletion of your personal information where the legal conditions are satisfied.

Right to Data Portability

In applicable circumstances, you may request a copy of your information in a structured, commonly used, machine-readable format.

Right to Object

You may object to certain processing activities, including processing for direct marketing.

Right to Restrict Processing

You may request restrictions on the processing of your personal information where permitted by law.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Automated Decision-Making

Where applicable, you have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

Marketing Preferences

You may unsubscribe from marketing communications using the unsubscribe instructions included in promotional emails.

We may continue sending necessary transactional communications regarding orders, payments, and customer service.

Exercising Your Rights

To exercise your privacy rights, please contact:

help.toyrocket@outlook.com

We may request reasonable information to verify your identity.

We will respond within the timeframes required by applicable law, generally within one month for GDPR requests, subject to legally permitted extensions.

We will not discriminate against individuals for exercising their privacy rights.

Complaints

If you have concerns about how we process your personal information, please contact us:

Email: help.toyrocket@outlook.com

We will review your complaint and seek an appropriate resolution.

If you are located in the European Economic Area, you may also lodge a complaint with a competent data protection supervisory authority.

Information about European data protection authorities is available through the European Data Protection Board:

https://www.edpb.europa.eu

International Users and Data Transfers

ToyRocket operates internationally and is managed by a company established in Hong Kong.

Personal information may be transferred, accessed, stored, or processed outside the country in which a customer resides, including outside the European Economic Area.

International transfers subject to the GDPR will be carried out using legally recognised transfer mechanisms and safeguards where required.

These may include:

European Commission adequacy decisions;
Standard Contractual Clauses approved by the European Commission;
Appropriate supplementary safeguards;
Other legally recognised transfer mechanisms.

Customers may contact us to request further information about applicable safeguards.

Contact

If you have questions regarding this Privacy Policy or wish to exercise your data protection rights, please contact:

Trading Name: ToyRocket

Website: https://www.toyrocket.store