Privacy policy

Privacy Policy – mytinsels

Last updated: 29 September 2026

Mytinsels Toy ("mytinsels", "we", "us") runs this store and website at mytinsels.com, including all related content, tools, products and services (the "Services"), home of Cuddlebury plush. Our store is powered by Shopify.

This Privacy Policy explains how we collect, use and share your personal information when you visit our website, buy from us or contact us. If there's a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy applies to how we handle your personal information.

For UK data protection law (the UK GDPR and the Data Protection Act 2018), Mytinsels Toy is the data controller of your personal information.

1. Personal Information We Collect

"Personal information" means information that identifies you or can reasonably be linked to you. Depending on how you use our Services, we may collect:

• Contact details – your name, billing and shipping address, phone number and email address.
• Payment information – payment method, card details and transaction details. Card payments are processed securely by our payment providers. We don't store your full card number.
• Account information – if you create an account, your login details and preferences.
• Order information – items you view, add to your basket, buy, return or cancel, and your order history.
• Communications – anything you send us, for example customer support emails, reviews or photos.
• Device information – your device, browser, IP address and similar identifiers.
• Usage information – how you browse and interact with our website.

2. Where We Get Your Information

• Directly from you – when you place an order, create an account, sign up to emails or contact us.
• Automatically – from your device when you use our website, through cookies and similar technologies.
• From service providers – such as Shopify, payment providers and couriers, when they process information on our behalf.
• From partners – such as advertising platforms (for example Meta), where you've interacted with our ads.

3. How We Use Your Information and Our Legal Bases

• To process and deliver your order, handle payments, returns, refunds and exchanges, and send order and delivery updates. (Legal basis: performing our contract with you.)
• To provide customer support and reply to your messages. (Legal basis: contract and our legitimate interests.)
• To send marketing emails or texts, where you've agreed to receive them. You can unsubscribe at any time. (Legal basis: consent.)
• To show you relevant ads online, including on Facebook and Instagram, and to measure how well our ads perform, where you've allowed marketing cookies. (Legal basis: consent.)
• To keep our store secure, prevent fraud and handle payment disputes. (Legal basis: our legitimate interests and legal obligations.)
• To improve our website, products and service. (Legal basis: our legitimate interests.)
• To comply with the law, including tax, accounting and consumer law, and to respond to lawful requests from authorities. (Legal basis: legal obligation.)

4. Cookies & Advertising

We and our partners use cookies and similar technologies to make our website work, remember your basket, understand how visitors use our site and, with your permission, show you relevant ads. This includes the Meta Pixel, which helps us measure and improve our Facebook and Instagram ads.

You can manage your choices through our cookie banner and the "Your Privacy Choices" link in our website footer. Where required, we'll automatically respect the Global Privacy Control signal from your browser.

5. Who We Share Your Information With

We only share your personal information where needed, with:

• Shopify and our service providers – for hosting, payments, analytics, customer support, email and cloud storage.
• Manufacturers, fulfilment partners and couriers – to pack and deliver your order. This includes partners outside the UK, such as in China.
• Advertising and marketing partners – such as Meta, to show and measure ads, where you've allowed this.
• Payment providers and banks – to process payments and respond to payment disputes.
• Authorities or advisers – where required by law, to enforce our terms or protect our rights, customers or others.
• A buyer or successor – if our business is sold or restructured.

We never sell your personal information.

6. Our Relationship with Shopify

Our store is hosted by Shopify, which collects and processes personal information about your use of our Services to provide and improve them. To help protect and grow our business, we use some Shopify features that combine information from your use of our store with information from other merchants and Shopify. For these features, Shopify is responsible for processing your personal information, including responding to your requests about it. To learn more, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal at https://privacy.shopify.com/en.

7. International Transfers

Some of our service providers and fulfilment partners are based outside the UK, so your personal information may be transferred to, stored in or processed in other countries, including China and the United States. Where we transfer information outside the UK, we use recognised safeguards, such as the UK International Data Transfer Agreement or Addendum, or we rely on the country having an adequacy decision.

8. How Long We Keep Your Information

We keep your personal information only for as long as we need it for the purposes above. For example, we keep order and payment records for up to 6 years to meet tax and accounting rules and to handle any disputes. We keep marketing preferences until you unsubscribe.

9. Keeping Your Information Secure

We use reasonable measures to protect your information, and our checkout is secured by Shopify. No method of sending or storing data is completely secure, so please don't send sensitive information, such as full card details, to us by email or social media.

10. Children

Although our plush toys may be bought as gifts for children, our website and Services are intended for adults. We don't knowingly collect personal information from children under 13. If you're a parent or guardian and think your child has given us their information, contact us and we'll delete it.

11. Your Rights

Under UK data protection law, you have the right to:

• Access the personal information we hold about you
• Correct information that's inaccurate or incomplete
• Delete your personal information
• Restrict or object to how we use your information, including for direct marketing
• Portability – receive your information in a usable format or ask us to transfer it
• Withdraw your consent at any time, where we rely on consent (this doesn't affect anything we did before you withdrew it)

To use any of these rights, email us at floarl.corp@gmail.com. We may need to verify your identity first. We'll respond within one month, and we'll never treat you unfairly for using your rights. An authorised agent can make a request for you with proof of your permission.

To stop marketing emails, use the "unsubscribe" link in any email. We'll still send you emails about your orders.

12. Third-Party Websites

Our website may link to other sites, such as social media platforms. We're not responsible for their privacy practices, so please read their privacy policies.

13. Complaints

If you're unhappy with how we've handled your personal information, please contact us first so we can put it right. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We'll post the updated version here with a new "Last updated" date and give you notice where the law requires it.

15. Contact Us

For any question about this Privacy Policy or your personal information:

Email: floarl.corp@gmail.com
Post: Mytinsels Toy, Hartmann Road, London E16 2PX, United Kingdom