Privacy Policy

Privacy Policy

Information We Collect

• Contact & Shipping Details: Parent/caregiver’s full name, email address, phone number, and shipping address (including access notes for large items like Early Education Machines, e.g., “leave with neighbor”). This enables secure delivery and critical updates (e.g., shipping confirmations for Building Blocks sets, delivery windows for Mystery Boxes).
• Payment Information: Processed exclusively through secure third-party gateways (Visa, Mastercard, PayPal, Apple Pay). We never store full credit card numbers, CVV codes, or sensitive financial data—your payment details are protected by end-to-end encryption and PCI DSS compliance.
• Product-Specific Data:
  • For Building Blocks: Voluntarily provided details like child’s age (e.g., “3–5 years vs. 6–8 years”), interests (e.g., “space themes vs. animal themes”), and set size needs (e.g., “100-piece starter set vs. 500-piece advanced set”) to recommend age-appropriate options.
  • For Early Education Machines: Child’s learning stage (e.g., “toddler numbers vs. primary school reading”), preferred features (e.g., “touchscreen vs. button controls”), and battery type (e.g., “rechargeable vs. disposable”) to match educational goals.
  • For Mystery Boxes: Child’s age range (to ensure age-safe contents) and interests (e.g., “puzzles vs. mini figures”) to curate relevant items—no personal data about the child is stored beyond the order.
• Website Usage Data: Browsing activity (e.g., views of Building Blocks safety specs, Early Education Machine learning features) and cookie data (to save preferred age ranges or product types for future visits). Cookies are optional—see “Your Privacy Choices” for opt-out details.

How We Use Your Information

1. Order Fulfillment: Process, pack, and ship items; share care guides (for Building Blocks cleaning, Early Education Machine battery care) and tracking links via email.
2. Customer Support: Respond to inquiries (e.g., missing Building Blocks pieces, Early Education Machine setup issues, Mystery Box content questions) and resolve defects via noonday-23-gingery@icloud.com.
3. Personalized Updates: Send kid-friendly product news (e.g., new themed Building Blocks, updated Early Education Machine software, limited-edition Mystery Boxes) only if you opt in—unsubscribe anytime via email links.
4. Legal Compliance: Maintain order records for tax purposes, adhere to UK safety standards (e.g., CE-certified Building Blocks, BPA-free Early Education Machine parts), and comply with the Toy Safety Directive 2009/48/EC.

Data Security

• All data transmitted between your device and our platform is encrypted via SSL/TLS protocols (indicated by “https://” and the browser padlock icon).
• Personal data is stored on UK-based, password-protected servers with firewalls and regular security audits—only authorized team members (trained in GDPR and child data protection) can access necessary details (e.g., delivery addresses for Early Education Machines).
• Third-party partners (payment processors, UK carriers like Royal Mail, DPD) are contractually bound to keep your data confidential, comply with GDPR, and only use it to fulfill their service (e.g., delivering a Mystery Box to London, SW11 3YQ).

Your Data Rights (Under GDPR)

• Access: Request a copy of all data we hold about you (e.g., Mystery Box order details, saved Building Blocks age preferences).
• Correction: Update inaccurate information (e.g., a changed shipping address for Early Education Machines).
• Erasure: Request permanent removal of your data (and your child’s, where applicable)—“right to be forgotten”—we retain minimal records only for tax/legal compliance (e.g., order invoices).
• Restriction: Ask us to limit data use (e.g., pause promotional emails while keeping order updates active).
• Data Portability: Request your data in a machine-readable format (e.g., CSV) to share with another retailer.