Privacy Policy

Privacy Policy

Last Updated: July 10, 2026

1. Introduction

Welcome to 壹贰叁潮玩貿易有限公司 ("we," "our," or "us"). We are committed to protecting your privacy and handling your personal information transparently and securely.

This Privacy Policy explains:

• What information we collect from you

• How we use, share, and protect that information

• Your rights regarding your personal information

This policy applies to all visitors, customers, and users of our website https://www.babythreetoy.com/ (the "Site") and any related services, products, or mobile applications (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please do not use our Services.

2. Information We Collect

We collect information from you in several ways:

2.1 Information You Provide to Us Directly

When you interact with our Site or Services, you may provide us with:

• Identity & Contact Data: Full name, email address, phone number, billing and shipping addresses.

• Account Credentials: Username, password, and other authentication information if you create an account.

• Payment Information: Credit/debit card details, billing address, and payment method preferences. Note: We do not store full payment card numbers. Payment processing is handled by our third-party payment processors (e.g., Stripe, PayPal) who comply with PCI-DSS security standards.

• Order History: Products purchased, order numbers, transaction dates, and return/refund records.

• Communications: Any information you provide when contacting our customer support team, submitting reviews, surveys, or feedback.

• Marketing Preferences: Your preferences for receiving promotional communications from us.

2.2 Information We Collect Automatically

When you visit our Site, we automatically collect certain technical data using cookies, pixels, and similar tracking technologies:

• Device & Browser Data: IP address, browser type and version, operating system, device type, screen resolution, and language preferences.

• Usage Data: Pages visited, time spent on each page, clickstream data, referring/exit pages, search queries, and interaction patterns.

• Location Data: General geographic location derived from your IP address (e.g., country, state, city). We do not collect precise GPS location without your explicit consent.

2.3 Information We Receive from Third Parties

We may receive information about you from:

• Social Media Platforms: If you log in via or interact with our social media pages (e.g., Facebook, Instagram, X), we may receive your public profile information.

• Marketing & Analytics Partners: Data from advertising platforms (e.g., Google Ads, Meta Ads) and analytics providers (e.g., Google Analytics).

• Shipping & Logistics Partners: Delivery confirmation and address verification data.

• Fraud Prevention Services: Information used to detect and prevent fraudulent transactions.

3. How We Use Your Information

We use your personal information for the following purposes:

4. How We Share Your Information

We do not sell your personal information to third parties. However, we share your information with trusted service providers who help us operate our business:

4.1 Service Providers (Processors)

We share data with third-party companies that perform services on our behalf, including:

• Payment Processors: Stripe, PayPal, or similar — to process payments securely.

• Shipping & Fulfillment: UPS, FedEx, USPS, or other carriers — to deliver your orders.

• IT & Hosting: Web hosting, cloud storage, and email service providers.

• Marketing & Analytics: Google Analytics, Meta, email marketing platforms (e.g., Klaviyo, Mailchimp) — to understand user behavior and send communications.

• Customer Support: Helpdesk platforms (e.g., Zendesk, Gorgias) — to manage support tickets.

• Fraud Prevention: Third-party fraud detection services.

All service providers are contractually obligated to process your data only on our instructions and in compliance with applicable privacy laws.

4.2 Legal Compliance

We may disclose your information if required to do so by law, regulation, legal process, or enforceable governmental request, including to meet national security or law enforcement requirements.

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site of any change in ownership or use of your personal information.

4.4 With Your Consent

We may share your information for any other purpose disclosed to you at the time we collect the data, or with your explicit consent.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyze site traffic, and deliver targeted advertisements.

Types of Cookies We Use:

• Essential Cookies: Required for the Site to function (e.g., shopping cart, login sessions). These cannot be disabled.

• Performance & Analytics Cookies: Help us understand how visitors interact with the Site (e.g., Google Analytics).

• Functional Cookies: Remember your preferences (e.g., language, currency) to improve your experience.

• Targeting/Advertising Cookies: Track your browsing habits to show you relevant ads on other platforms.

You can manage your cookie preferences through our cookie consent banner or via your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling certain cookies may affect the functionality of our Site.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (e.g., for tax, accounting, or legal compliance).

Retention Periods:

• Order Data: Retained for 7 years to comply with tax and warranty obligations.

• Account Data: Retained as long as your account is active. You may request account deletion at any time.

• Marketing Data: Retained until you unsubscribe or request removal.

• Analytics Data: Retained for 14 months in aggregated or anonymized form.

When data is no longer needed, we securely delete or anonymize it.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information.

7.1 For California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the CPRA:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes of collection, and the third parties with whom we share it.

• Right to Delete: Request deletion of your personal information, subject to certain exceptions (e.g., transaction records we are legally required to retain).

• Right to Correct: Request correction of inaccurate personal information we hold about you.

• Right to Opt-Out of Sale/Sharing: We do not sell your data. However, we do share data with advertising partners for cross-context behavioral advertising. You have the right to opt-out of this "sharing" by clicking the "Do Not Sell or Share My Personal Information" link on our Site or managing your cookie preferences.

• Right to Limit Sensitive Data Use: We do not collect sensitive personal information (e.g., SSN, precise geolocation, genetic data) for purposes other than those permitted by law.

• Right to Non-Discrimination: You will not receive discriminatory treatment for exercising any of these rights.

To exercise these rights, please submit a request using the contact details in Section 12 below. We will verify your identity before responding, and we will respond within 45 days as required by law.

7.2 For Nevada Residents

Nevada law grants residents the right to opt out of the sale of certain personal information. We do not sell personal information as defined by Nevada law, but you may still contact us with any questions.

7.3 For EU/UK Residents (GDPR)

If you are located in the European Union or the United Kingdom, you have additional rights under the GDPR:

• Right to access, rectify, or delete your data

• Right to restrict or object to processing

• Right to data portability

• Right to withdraw consent at any time

• Right to lodge a complaint with your local data protection authority

7.4 For All Users

All users, regardless of location, have the right to:

• Access, update, or correct your personal information

• Request deletion of your personal information (subject to legal exceptions)

• Opt out of marketing communications at any time (via the "unsubscribe" link in our emails)

How to Exercise Your Rights:

• Email us at: babythreetoytoy@gmail.com

We will respond to all legitimate requests within 30–45 days depending on applicable law.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption: All data transmitted between your browser and our Site is secured using SSL/TLS encryption.

• Access Controls: Only authorized personnel have access to personal information, and only on a need-to-know basis.

• Regular Audits: We regularly review our security practices and update them as necessary.

• PCI Compliance: Our payment processors are PCI-DSS certified.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

9. Children's Privacy

Our Services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and you believe your child has provided us with personal information, please contact us. If we become aware that we have collected personal data from a child under 16 without verification of parental consent, we will take steps to delete that information promptly.

10. Third-Party Links

Our Site may contain links to third-party websites, products, or services (e.g., social media platforms, payment gateways). This Privacy Policy does not apply to those third parties. We are not responsible for the privacy practices or content of such third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. If we make material changes, we will notify you through a prominent notice on our Site or via email, prior to the change becoming effective.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our Privacy Officer/Data Protection Team:

• 📧 Email: babythreetoytoy@gmail.com (This address handles both privacy-related and general support inquiries.)

• 📬 Mailing Address: Flat D5, 5/F, King Yip Factory Building, 59 King Yip Street, Kwun Tong, Hong Kong

We aim to respond to all privacy inquiries within 2 business days and resolve valid requests within the timeframes required by applicable law.