Privacy Policy

1. Introduction

MythToy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website mythtoy.com and purchase our products.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

Personal Data

We may collect personally identifiable information that you voluntarily provide to us including:

• Name and contact information (email address, phone number)
• Shipping and billing addresses
• Payment information (credit card details processed securely through payment processors)
• Date of birth for age verification
• Purchase history and preferences

Derivative Data

Information our servers automatically collect when you access the site:

• IP address and browser type
• Pages visited and time spent on site
• Referring website and search terms
• Device information and operating system

Third-Party Data

Information from third parties, such as social media platforms, when you connect your account to our service.

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders
• Verify your age and identity
• Provide customer support and respond to inquiries
• Send transactional emails (order confirmations, shipping updates)
• Personalize your shopping experience
• Send marketing communications (with your consent)
• Improve our website and product offerings
• Prevent fraud and enhance security
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Union, we process your personal data under the following legal bases:

• Contractual necessity: Processing necessary for order fulfillment
• Legal obligation: Processing required by law (age verification, tax purposes)
• Legitimate interests: Fraud prevention, website improvement, marketing
• Consent: For marketing communications and cookies

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Payment processors, shipping carriers, IT services
• Business Partners: Wholesale distributors (for B2B orders)
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In connection with merger, acquisition, or sale

We never sell your personal data to third parties for marketing purposes.

6. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your country. We ensure appropriate safeguards are in place for international data transfers, including:

• EU Standard Contractual Clauses
• Adequacy decisions where applicable
• Data processing agreements with third parties

7. Data Security

We implement appropriate technical and organizational security measures including:

• SSL encryption for data transmission
• Secure payment processing (PCI DSS compliant)
• Regular security assessments and monitoring
• Access controls and authentication procedures
• Data anonymization where appropriate

While we take reasonable measures, no electronic transmission or storage is 100% secure.

8. Data Retention

We retain your personal data only as long as necessary for:

• Order data: 7 years for tax and legal compliance
• Customer accounts: Until account deletion request
• Marketing data: Until consent withdrawal
• Website analytics: 26 months

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit processing of your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@mythtoy.com.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and shopping cart
• Analyze website traffic and performance
• Deliver targeted advertisements
• Prevent fraudulent activity

You can control cookies through your browser settings. See our Cookie Policy for details.

11. Age Restrictions

We do not knowingly collect information from individuals under 18 years of age. If we become aware of such collection, we will immediately delete the information. Users must verify they are 18 or older to access our services.

12. Third-Party Websites

Our site may contain links to third-party websites. This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Information

For privacy-related questions or to exercise your rights, contact us at:

• Email: privacy@mythtoy.com
• Address: [Your Business Address]
• Data Protection Officer: dpo@mythtoy.com

15. Regulatory Compliance

We comply with applicable data protection laws including:

• GDPR (General Data Protection Regulation) for EU users
• CCPA (California Consumer Privacy Act) for California residents
• PIPEDA (Canada) and other relevant national laws