This Privacy Policy explains how WinkToys (a trading name of [Insert Controller/Company Name], Company No. [Insert Company Number]) collects, uses, shares and protects your personal data when you visit our website or shop with us. If you have questions, contact [Insert Email].

2) What data we collect

• Identity & contact: name, email, phone, billing/shipping addresses.
• Order & payment: products, totals, currency, masked card details, status (payments are processed by our PCI-compliant provider; we don’t store full card numbers).
• Account data: login, preferences, order history.
• Support content: messages, attachments, feedback, reviews.
• Technical: IP, device/browser type, OS, pages viewed, interaction timestamps.
• Marketing preferences: newsletter opt-in/out, cookie consents.
• Age/ID verification (18+): checks and records to confirm eligibility where required by law or policy.

3) Why we use your data (lawful bases)

4) Cookies & tracking

Do Not Track: we honour your explicit cookie choices. Browser DNT signals are treated as an additional preference where supported.

Read full Cookie Policy

5) Sharing & processors

We do not sell personal data. We share data with trusted service providers (processors) only as needed:

• Hosting & infrastructure (website, backups, CDN).
• Payments (PCI-DSS compliant gateway; card data is tokenised).
• Fulfilment & couriers (Royal Mail/DPD/DHL/Evri or local partners for delivery).
• Support & communications (email delivery, helpdesk).
• Analytics/anti-fraud (where enabled and consented).

We require processors to protect data, process only on our instructions, and comply with UK GDPR.

6) International transfers

If data is transferred outside the UK, we use appropriate safeguards (adequacy decisions or UK standard contractual clauses).

7) Security

• Encryption in transit (HTTPS) and industry-standard measures to protect accounts and transactions.
• Access controls and least-privilege principles for staff and processors.
• 3-D Secure for card payments where supported by your issuer.

8) Data retention

9) Your rights

• Access, rectification, erasure, restriction, objection, portability.
• Withdraw consent at any time (e.g., cookies, marketing).
• Opt-out of marketing in emails or by contacting us.
• Complain to the UK Information Commissioner’s Office (ICO).

10) 18+ & age verification

Our store is for adults 18+ only. We operate an on-site age gate and may request document-based verification at checkout or prior to dispatch. Failure to pass verification may result in order cancellation and refund (minus any irrecoverable fees).

11) Changes to this policy

We may update this Privacy Policy from time to time. The latest version is always posted on this page.

12) How to contact us / complaints

UK ICO (complaints): Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF — see ico.org.uk/make-a-complaint/.