Privacy Policy

1. Introduction

MythToy ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website mythtoy.com and purchase our products.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

Personal Data

We may collect personally identifiable information that you voluntarily provide to us including:

• Name and contact information (email address, phone number)
• Shipping and billing addresses
• Payment information (credit card details processed securely through payment processors)
• Date of birth for age verification (18+ requirement)
• Purchase history and preferences

Derivative Data

Information our servers automatically collect when you access the site:

• IP address and browser type
• Pages visited and time spent on site
• Referring website and search terms
• Device information and operating system

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your orders discreetly
• Verify your age and identity
• Provide customer support and respond to inquiries
• Send transactional emails (order confirmations, shipping updates)
• Personalize your shopping experience
• Improve our website and product offerings
• Prevent fraud and enhance security
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Union, we process your personal data under the following legal bases:

• Contractual necessity: Processing necessary for order fulfillment
• Legal obligation: Processing required by law (age verification, tax purposes)
• Legitimate interests: Fraud prevention, website improvement, marketing
• Consent: For marketing communications and cookies

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Payment processors (PayPal), shipping carriers, IT services
• Business Partners: Wholesale distributors (for B2B orders)
• Legal Authorities: When required by law or to protect our rights

We never sell your personal data to third parties for marketing purposes.

6. Data Security

We implement appropriate technical and organizational security measures including:

• SSL encryption for data transmission
• Secure payment processing (PCI DSS compliant)
• Regular security assessments and monitoring
• Access controls and authentication procedures

While we take reasonable measures, no electronic transmission or storage is 100% secure.

7. Data Retention

We retain your personal data only as long as necessary for:

• Order data: 7 years for tax and legal compliance
• Customer accounts: Until account deletion request
• Marketing data: Until consent withdrawal

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit processing of your data
• Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@mythtoy.com.

9. Age Restrictions

We do not knowingly collect information from individuals under 18 years of age. If we become aware of such collection, we will immediately delete the information. Users must verify they are 18 or older to access our services.

10. Contact Information

For privacy-related questions or to exercise your rights, contact us at:

• Email: privacy@mythtoy.com
• Data Protection Officer: dpo@mythtoy.com
• Address: 123 MythToy Avenue, Commerce Park, NV 89101, United States