PRIVACY POLICY

1. The Data Controller of Your Personal Data

TOMY UK Co., Ltd. and the other entities in our European Group (including Fat Brain Toys UK, TOMY France SARL, and TOMY Deutschland GmbH) take the privacy of your personal data seriously. This Privacy Policy sets out our privacy practices and describes the data we collect from you or about you, and the way that we use it. Please read it in conjunction with our Terms and Conditions of Sale as those terms incorporate this Privacy Policy.

We are confident that you will find everything you need in this Privacy Policy, but if you need to know more or anything is unclear you are welcome to contact us by post at Data Protection Team, Hembury House, Pynes Hill, Rydon Lane, Exeter, Devon, EX2 5AZ, or by email at dataprotection@tomy.com.

2. Personal Data We Collect About You

In this Privacy Policy, we refer to the information below and any other information that could be used to identify you in some way as "personal data".

The personal data that we collect from or about you may include the following types of information:

• Details you provide when you contact us or complete forms (e.g., name, email address, postal address, phone number).
• Information about your purchases, orders, and payment methods.
• Technical data such as IP address, browser type, and device identifiers.
• Communications and correspondence records when you contact our team.

In addition, we may use "cookies" or other devices to store and sometimes track information about you (please refer to our Cookie Policy).

Although we offer items and services that may be relevant to children, we do not intend for our sites or services to be used by children, and we do not knowingly collect data from anyone under 16. If we become aware that a child under 16 has provided us with personal data, we will delete such information.

3. How We Collect Personal Data

We may collect personal data in a variety of ways, including:

• When you voluntarily provide information to us (for example, when you fill out our TOMY customer enquiry form, engage with us on social media, or send us emails).
• From third-party organisations such as suppliers or service providers that you have interacted with.
• Through cookies and similar technologies used on our websites to recognise you and enhance your browsing experience. For details, see our Cookie Policy.
• Automatically, via your browser or device, including IP address or other identifiers collected through our server logs.

4. Our Use of Your Personal Data and Legal Justification

We use your personal data for a variety of purposes related to the products and services we provide, including:

• Provision of services: To manage your orders, respond to your enquiries, and fulfil our obligations to you.
• Marketing: To communicate offers, measure effectiveness of campaigns, and improve our marketing.
• Administration: To manage internal operations and maintain accurate records.
• Security and compliance: To detect fraud, ensure safety, and meet legal obligations.

5. How We Share Your Personal Data

We do not sell your personal data. However, we may share it under specific circumstances:

• With members of our TOMY Group companies, where necessary to fulfil contractual obligations or legitimate interests.
• With trusted third-party service providers (for example, website hosting, analytics, or support services) who process personal data on our behalf under strict contractual controls.
• If we sell or propose to sell part of our business, personal data may be shared with potential buyers.
• If required by law, such as in response to legal requests from law enforcement or regulators.
• In limited cases, to third parties outside of Europe, with appropriate safeguards in place to ensure lawful transfer and protection of your data.

6. Hyperlinks to Other Websites

This website contains links to third-party websites beyond our control. These websites have their own privacy policies, and we do not accept responsibility for their practices or content. Please review those policies before providing any personal information.

7. Cookie Policy

To learn more about the ways we use cookies, please see our full Cookie Policy.

8. Security and Retention of Your Personal Data

We take the security of your personal data very seriously and have implemented appropriate measures to safeguard it against unauthorised access or misuse. Please note, however, that no internet-based service can be 100% secure.

We will retain your personal data only for as long as necessary for the purposes described in this Privacy Policy and as required by applicable law. For example, enquiries submitted through our TOMY Customer Enquiry Form are retained for up to one year unless legal action is likely.

9. Updating Your Personal Data

If any of your personal information changes, please help us keep our records current by emailing updates to dataprotection@tomy.com. We will update your details as soon as reasonably possible.

10. Your Rights and How to Contact Us

You have various rights regarding your personal data, including the right to access, correct, delete, or restrict processing of your information. You also have the right to object to certain uses and to withdraw consent where applicable.

If you wish to exercise any of these rights or have questions about this Privacy Policy, please contact us:

Data Protection Team
TOMY UK Co., Ltd
Hembury House
Pynes Hill
Rydon Lane
Exeter
Devon
EX2 5AZ
dataprotection@tomy.com

You also have the right to complain to the UK Information Commissioner’s Office via ico.org.uk/concerns or by calling 0303 123 1113.