Privacy policy

Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how ToysX collects, uses, discloses, and protects personal information when you visit www.toysx.uk, place an order, contact customer support, or otherwise interact with the store.

The store is operated by GUSTAVO ALVARADO LLC.

Company: GUSTAVO ALVARADO LLC
Brand: ToysX
Registered address: 5301 WATERVIEW CIR PALM SPRINGS, FL 33461, USA
EIN: 82-2309807
Support email: support@toysx.uk

1. Information we collect

Depending on how you interact with the store, we may collect the following categories of information:

  • Contact information: name, email address, telephone number, billing address, and shipping address.

  • Order information: products purchased, order number, transaction amount, order history, delivery information, and refund or customer service records.

  • Payment information: payment status, transaction identifiers, and limited payment details provided by payment processors. Full payment card details are generally handled by the relevant payment provider rather than stored directly by ToysX.

  • Device and usage information: IP address, browser type, device identifiers, operating system, pages viewed, referring URLs, and interactions with the website.

  • Marketing preferences: consent choices, email subscription status, and interactions with marketing communications.

  • Communications: information included in messages sent to customer support, including photographs or other evidence supplied with a refund request.

We collect information directly from you, automatically through website technologies, and from service providers involved in processing payments, delivering orders, analyzing website activity, and providing marketing services.

2. How we use personal information

We may use personal information to:

  • Process orders and payments.

  • Coordinate fulfillment and delivery through third-party suppliers and logistics providers.

  • Provide order confirmations, tracking updates, and customer support.

  • Review refund requests and investigate delivery or product issues.

  • Operate, maintain, secure, and improve the website.

  • Analyze website traffic and customer interactions.

  • Send marketing communications where permitted by law and subject to applicable consent and opt-out requirements.

  • Detect fraud, abuse, security incidents, and unauthorized transactions.

  • Comply with legal obligations and establish, exercise, or defend legal claims.

3. Legal bases under the GDPR and UK GDPR

Where the General Data Protection Regulation or UK General Data Protection Regulation applies, we process personal information on one or more of the following legal bases:

  • Contract: processing necessary to fulfill an order or take steps requested before entering into a contract.

  • Legal obligation: processing necessary to comply with applicable laws.

  • Legitimate interests: processing necessary for purposes such as website security, fraud prevention, customer service, and business administration, provided those interests are not overridden by the individual's rights and interests.

  • Consent: processing based on consent, including where required for non-essential cookies, certain tracking technologies, or electronic marketing.

Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Cookies and tracking technologies

ToysX uses cookies, pixels, tags, and similar technologies to operate the website, understand visitor behavior, measure advertising performance, and manage marketing communications.

The technologies used may include the following:

Shopify and essential website technologies

These technologies support shopping cart functionality, checkout, security, session management, and other essential website operations. They are generally necessary to provide the services requested by the customer.

Meta Pixel

Meta Pixel may collect information about website visits, page views, product interactions, and purchases to measure advertising effectiveness, understand conversions, and support advertising and audience measurement on Meta services. Where required by law, it will only be activated after the relevant consent has been obtained.

Google Analytics 4

Google Analytics 4 helps us understand how visitors use the website, including traffic sources, page interactions, and website performance. Where required by law, analytics storage and related tracking will be disabled until the visitor provides consent.

TikTok Pixel

TikTok Pixel may measure advertising performance, product interactions, and conversions and may support advertising optimization and audience measurement on TikTok services. Where required by law, it will only be activated after consent.

Klaviyo

Klaviyo supports email marketing, subscription management, campaign measurement, and customer communications. Depending on the configuration and applicable law, it may process information about email subscriptions, campaign interactions, and customer activity. Marketing emails include an unsubscribe mechanism.

How to refuse or withdraw consent

You can refuse or withdraw consent for non-essential cookies and tracking technologies through the website's cookie consent controls, where available. You may also configure your browser to block or delete cookies, although doing so may affect some website features.

Disabling cookies in your browser does not necessarily communicate an opt-out to every advertising or analytics provider. Where applicable, use the privacy controls provided by the relevant service.

For visitors in the European Economic Area and the United Kingdom, non-essential cookies and similar technologies will be used only where the required consent has been obtained.

5. How we share information

We may disclose personal information to the following categories of recipients when reasonably necessary for the purposes described in this policy:

  • E-commerce and hosting providers: including Shopify and providers that maintain the website and checkout.

  • Payment processors: to authorize, process, and administer payments and refunds.

  • Suppliers and fulfillment partners: including third-party suppliers in China that prepare and ship orders directly to customers.

  • Shipping and tracking providers: to transport orders, provide tracking information, and investigate delivery issues.

  • Analytics and advertising providers: including Meta, Google, and TikTok, subject to applicable consent and privacy requirements.

  • Marketing service providers: including Klaviyo, for permitted email marketing and related services.

  • Professional advisers and authorities: where necessary for legal compliance, fraud prevention, or legal proceedings.

  • Business transferees: in connection with a merger, restructuring, financing, or sale of relevant business assets, subject to applicable law.

We do not sell personal information for money. Certain disclosures to advertising and analytics partners may constitute “sharing” or targeted advertising under some privacy laws. Where applicable, you may exercise your right to opt out of that processing.

6. International transfers

GUSTAVO ALVARADO LLC is based in the United States, and order fulfillment may involve suppliers in China. Personal information may therefore be processed in countries that have different data protection laws from those in your country.

Where the GDPR or UK GDPR requires a safeguard for an international transfer, we will use an appropriate legal transfer mechanism, such as an applicable adequacy decision or approved contractual safeguards, and implement any additional measures required by law.

You may contact support@toysx.uk for further information about relevant safeguards, subject to lawful confidentiality restrictions.

7. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including order fulfillment, customer support, accounting, tax compliance, fraud prevention, dispute resolution, and legal obligations.

Retention periods depend on the type of information, the reason for collection, and applicable legal requirements. When information is no longer needed, it will be deleted, anonymized, or otherwise handled in accordance with applicable law.

8. Data security

We use reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Your rights under the GDPR and UK GDPR

Where applicable, you may have the right to:

  • Request access to your personal information.

  • Request correction of inaccurate or incomplete information.

  • Request erasure of personal information in circumstances provided by law.

  • Request restriction of processing.

  • Object to processing based on legitimate interests.

  • Object to direct marketing at any time.

  • Request data portability where the legal conditions are met.

  • Withdraw consent where processing is based on consent.

  • Lodge a complaint with the relevant data protection supervisory authority.

These rights are subject to legal conditions and exceptions. To exercise them, contact support@toysx.uk. We may request information necessary to verify your identity before responding.

Where the GDPR requires an EU representative or the UK GDPR requires a UK representative, the applicable representative obligations must be met separately. The company's United States registered address does not, by itself, establish an EU or UK representative.

10. California privacy rights under the CCPA and CPRA

If you are a California resident and the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to ToysX, you may have the right to:

  • Know the categories and specific pieces of personal information collected about you.

  • Know the categories of sources, purposes, and recipients involved in the collection or disclosure of personal information.

  • Request deletion of personal information, subject to legal exceptions.

  • Request correction of inaccurate personal information.

  • Opt out of the sale or sharing of personal information, as those terms are defined by California law.

  • Limit certain uses and disclosures of sensitive personal information where applicable.

  • Not be discriminated against for exercising your privacy rights.

The categories of information collected are described in Section 1. The purposes and categories of recipients are described in Sections 2 and 5.

ToysX does not sell personal information for monetary consideration. However, use of advertising pixels may qualify as “sharing” for cross-context behavioral advertising under California law. Where applicable, you may opt out through the website's privacy or cookie controls or by contacting support@toysx.uk.

You may submit a privacy request by emailing support@toysx.uk. We will verify requests as required by law and respond within the applicable statutory period. An authorized agent may submit a request where permitted by law and subject to verification requirements.

11. Children's privacy

The website is not intended to collect personal information from children in violation of applicable law. If you believe a child has provided personal information unlawfully, contact support@toysx.uk so that the matter can be reviewed.

12. Third-party websites

The website may contain links to third-party websites or services. Their privacy practices are governed by their own policies, and ToysX is not responsible for the privacy practices of independent third parties.

13. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, services, or legal obligations. The revised version will be published on www.toysx.uk with an updated revision date where appropriate.

14. Contact information

GUSTAVO ALVARADO LLC, operating under the brand ToysX
5301 WATERVIEW CIR PALM SPRINGS, FL 33461, USA
EIN: 82-2309807
Email: support@toysx.uk

For privacy requests, use the subject line “Privacy Request” and describe your request clearly.