Last updated: July 13, 2026

This Privacy & Cookie Policy explains how PINMETOYS (“PINMETOYS,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit pinmetoys.com, place an order, contact us, or otherwise interact with our services.

For the purposes of U.K. data-protection law, PINMETOYS is the controller of the personal information described in this Policy, except where another organization acts as an independent controller.

Contact: support@pinmetoys.com

Personal information we collect

Depending on how you use our services, we may collect:

Information you provide

• name, email address, telephone number, billing address, and delivery address;
• account login and profile information;
• order details, product selections, returns, refunds, and customer-service communications;
• payment-related information, although complete payment-card details are normally processed by payment providers rather than stored by us;
• reviews, survey responses, images, and other content you choose to submit;
• marketing preferences and cookie choices; and
• information supplied when you enter a promotion or contact us.

Information collected automatically

• IP address, device identifiers, browser type, operating system, language, and approximate location;
• pages viewed, links clicked, referring pages, search activity, cart activity, purchases, and timestamps;
• cookie and similar-technology identifiers;
• diagnostic, performance, fraud-prevention, and security information; and
• interaction or session-replay data, such as clicks, scrolling, navigation, and page interactions, where enabled and permitted by law.

Information received from other sources

We may receive information from Shopify, payment providers, delivery carriers, fraud-prevention services, advertising or analytics partners, social-media platforms, and other service providers involved in fulfilling an order or operating the website.

How we use personal information

We may use personal information to:

• process payments, accept and fulfil orders, arrange delivery, and provide tracking;
• manage cancellations, returns, refunds, and customer support;
• create and manage customer accounts;
• verify transactions and prevent fraud, abuse, and security incidents;
• operate, maintain, troubleshoot, personalize, and improve the website;
• measure website performance and understand how visitors use our services;
• send service messages, order updates, and responses to enquiries;
• send marketing communications where permitted and in accordance with your choices;
• display and measure advertising where permitted;
• comply with legal, tax, accounting, regulatory, and recordkeeping obligations;
• establish, exercise, or defend legal claims; and
• enforce our Terms & Conditions and protect customers, PINMETOYS, and others.

U.K. lawful bases

Where U.K. data-protection law applies, we rely on one or more of the following lawful bases:

• Contract: processing necessary to take steps at your request, process an order, deliver goods, or handle a return.
• Legitimate interests: operating and improving our business, preventing fraud, securing our services, understanding performance, and providing relevant customer support, where those interests are not overridden by your rights.
• Consent: for non-essential cookies, certain analytics or advertising activities, and marketing where consent is required. You may withdraw consent at any time.
• Legal obligation: processing needed to meet legal, tax, accounting, consumer-protection, or regulatory requirements.
• Legal claims and other lawful grounds: where processing is necessary to establish, exercise, or defend legal claims, or another lawful basis applies.

Cookies and similar technologies

Cookies and similar technologies are small files or identifiers used to operate websites, remember preferences, measure performance, and support advertising.

We may use the following categories:

• Strictly necessary cookies: required for functions such as security, network management, cart, checkout, payment, market selection, and cookie preferences. These cannot normally be disabled through our consent tool.
• Functional cookies: remember settings and provide enhanced features.
• Analytics cookies: help us understand visits, traffic sources, navigation, and website performance.
• Advertising cookies: help deliver, limit, and measure advertising and may support interest-based advertising across services.

Where required by law, functional, analytics, and advertising technologies will not be used until you provide the relevant consent. You can accept, reject, or change non-essential cookie choices through the cookie banner or privacy-preference control available on the website.

You can also block or delete cookies through your browser. Doing so may affect cart, checkout, market selection, account, or other website functions.

Analytics, session replay, and advertising services

We may use services including:

• Microsoft Clarity to understand page interaction through tools such as heatmaps, performance information, and session replays;
• Google services, such as Google Analytics or Google Ads, where enabled;
• Meta services, such as the Meta Pixel, where enabled; and
• TikTok services, such as the TikTok Pixel, where enabled.

These providers may collect or receive device, cookie, browsing, interaction, approximate-location, and transaction-related information according to their own privacy terms and our configuration. We do not intentionally ask analytics or session-replay tools to capture payment-card details or sensitive information. Website fields may be masked or excluded where supported, but you should not enter sensitive information into free-text fields unless it is necessary.

The actual tools used may change as we update the website. Non-essential tools are subject to the choices shown in our cookie or privacy controls where required by law.

Shopify

Our store is hosted on Shopify. Shopify processes personal information to provide the storefront, checkout, payment, security, and related commerce services. Shopify may act as our processor or, for certain activities, as an independent controller.

You can learn more about Shopify's privacy practices at: https://www.shopify.com/legal/privacy

How we disclose personal information

We may disclose personal information to:

• Shopify and website-hosting providers;
• payment processors, banks, and fraud-prevention providers;
• warehouses, fulfilment partners, delivery carriers, and returns providers;
• customer-service, email, marketing, analytics, session-replay, and advertising providers;
• professional advisers, insurers, auditors, and legal or regulatory authorities;
• parties involved in a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction; and
• other parties where you direct us, consent, or disclosure is required or permitted by law.

We do not sell personal information for money. Some U.S. state privacy laws may define certain advertising or analytics disclosures as a “sale,” “sharing,” or use for targeted advertising even when no money is exchanged. Where such laws apply, you may use our cookie/privacy controls or contact us to exercise an applicable opt-out right.

International transfers

PINMETOYS, Shopify, and our service providers may process personal information outside the country where you live, including in the United States, the United Kingdom, Hong Kong, Canada, and other locations where providers operate.

Where U.K. law requires safeguards for an international transfer, we use an approved transfer mechanism where applicable, such as adequacy regulations, the U.K. International Data Transfer Agreement or Addendum, or another lawful safeguard. You may contact us for more information about relevant safeguards.

Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including order fulfilment, customer service, fraud prevention, dispute handling, legal claims, and legal, tax, accounting, and regulatory obligations.

Retention periods vary by type of information. Transaction and accounting records may generally be kept for up to 7 years or longer where required by law or an active dispute. Cookie and analytics retention depends on the tool and configuration. We may delete or anonymize information when it is no longer needed.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No online transmission or storage method is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials and for contacting us promptly if you believe an account or transaction is unauthorized.

Marketing communications

Where permitted, we may send information about products, launches, and promotions. You can unsubscribe using the link in a marketing email or by contacting support@pinmetoys.com.

Unsubscribing from marketing does not stop necessary service communications, such as order confirmations, delivery updates, security notices, or responses to customer-support requests.

U.K. privacy rights

Subject to applicable conditions and exceptions, people covered by U.K. data-protection law may have the right to:

• be informed about processing;
• request access to personal information;
• request correction of inaccurate information;
• request deletion;
• restrict processing;
• object to processing, including direct marketing;
• receive certain information in a portable format;
• withdraw consent at any time where processing relies on consent; and
• request safeguards concerning certain solely automated decisions with legal or similarly significant effects.

To exercise a right, contact support@pinmetoys.com. We may need to verify your identity. You also have the right to complain to the U.K. Information Commissioner's Office at https://ico.org.uk/, although we encourage you to contact us first so we can try to resolve the concern.

U.S. state privacy rights

Residents of certain U.S. states may have rights under applicable state law, subject to thresholds, definitions, and exceptions. These may include rights to:

• know or access categories or specific pieces of personal information;
• correct inaccurate information;
• delete certain information;
• obtain a portable copy of certain information;
• opt out of sale, sharing, targeted advertising, or certain profiling; and
• appeal a denied request where required.

We will not unlawfully discriminate against you for exercising an applicable privacy right. To submit a request, contact support@pinmetoys.com or use the privacy-preference control available on the website. We may need to verify your identity and authority. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and identity verification.

Children's privacy

Our services are not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. A person under the age required to enter a binding contract should use the website only with a parent or legal guardian.

If you believe a child has provided personal information without appropriate authorization, contact support@pinmetoys.com.

Third-party links

The website may link to third-party websites or services. We do not control their privacy practices. Review their policies before providing information to them.

Changes to this Policy

We may update this Policy to reflect changes in our services, technology, providers, or legal obligations. We will post the updated version and revise the “Last updated” date. Where required, we will provide additional notice or obtain consent.

Contact

For privacy questions or requests, contact:

PINMETOYS Email: support@pinmetoys.com