Privacy Policy

Last updated: 29 August 2026

1. Who We Are

OlaToy is a trading name of Shamsia Global Limited. We operate the website olatoy.co.uk and provide online retail services for toys, pet-care products and related goods.

For the purposes of applicable UK data-protection law, Shamsia Global Limited is the data controller for the personal information described in this Privacy Policy.

2. What This Privacy Policy Covers

This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, create an account, place an order, contact us, subscribe to marketing communications or otherwise use our services.

Our website uses WordPress and WooCommerce, together with hosting, payment, delivery, security, analytics, email and other service providers that help us operate the website and fulfil orders.

3. Personal Information We May Collect

• Contact information, such as your name, billing address, delivery address, email address and telephone number.
• Account information, such as your username, account preferences and settings.
• Order and transaction information, including products viewed, added to your basket, purchased, returned, refunded or cancelled.
• Payment-related information. Payments are generally processed by third-party payment providers, and we do not normally store full payment-card details ourselves.
• Communications you send to us, including customer-support requests, contact-form messages and return enquiries.
• Device and technical information, such as IP address, browser type, device information and security logs.
• Website usage information, such as pages viewed, interactions with the website and referral information.
• Marketing preferences, including whether you have agreed to receive promotional emails.

4. How We Collect Personal Information

• Directly from you when you create an account, place an order, subscribe to emails, contact us or complete a form.
• Automatically through cookies, server logs and similar technologies.
• From service providers that support payments, hosting, security, analytics, email delivery, fulfilment and shipping.
• From other third parties where permitted by law.

5. How We Use Personal Information

• To process and fulfil orders.
• To take payment and provide payment confirmation.
• To arrange delivery and provide tracking information.
• To create and manage customer accounts.
• To handle returns, refunds, exchanges and customer support.
• To respond to enquiries and contact-form messages.
• To prevent fraud, misuse, abuse and security incidents.
• To maintain, troubleshoot and improve our website and services.
• To comply with legal, tax, accounting and regulatory obligations.
• To send marketing emails where you have consented or where otherwise permitted by law.
• To keep records of marketing consent and unsubscribe requests.

6. Lawful Bases for Processing

Where UK data-protection law applies, we generally rely on one or more of the following lawful bases:

• Contract: where processing is necessary to provide products or services you have requested.
• Legal obligation: where we must process information to comply with the law.
• Legitimate interests: where processing is necessary to operate, protect or improve our business and those interests are not overridden by your rights.
• Consent: for example, where you agree to receive certain marketing communications.

Where we rely on consent, you may withdraw it at any time.

7. Sharing Personal Information

We may share personal information with trusted service providers where reasonably necessary to operate our business, including:

• Website hosting and technical providers.
• WordPress and WooCommerce-related service providers.
• Payment processors and payment gateways.
• Delivery, courier and fulfilment providers.
• Email, newsletter and customer-communication providers.
• Security, fraud-prevention and analytics providers.
• Professional advisers such as accountants, insurers, auditors and legal advisers.
• Regulators, law-enforcement agencies or courts where required by law.
• A purchaser, investor or successor in connection with a sale, restructuring or transfer of the business.

We do not sell personal information to advertisers.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies to keep the website functioning, remember basket and account information, improve security, understand website performance and usage, and support analytics or marketing where applicable.

Where required by law, non-essential cookies should only be used after appropriate consent.

9. Marketing Communications

If you subscribe to OlaToy emails, we may send you product news, offers and updates. You can unsubscribe at any time by using the unsubscribe link in our emails or by contacting us.

Unsubscribing from marketing does not stop necessary service messages about your account, orders, refunds or deliveries.

10. International Transfers

Some service providers may process personal information outside the United Kingdom. Where required, we will use appropriate safeguards for international transfers, such as adequacy regulations, recognised contractual protections or another lawful transfer mechanism.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to fulfil orders, provide support, maintain financial and tax records, resolve disputes, prevent fraud, meet legal obligations and enforce our agreements.

12. Security

We use reasonable technical and organisational measures to protect personal information. However, no method of transmission or storage is completely secure. Please avoid sending highly sensitive information through ordinary email or unsecured forms.

13. Children's Information

Our website is intended for adults purchasing products for children, families or pets. It is not intended for children to independently create accounts or submit personal information. If you believe a child has provided personal information without appropriate permission, please contact us.

14. Your Rights

Depending on applicable law and your circumstances, you may have rights to:

• Request access to your personal information.
• Request correction of inaccurate information.
• Request deletion of personal information.
• Request restriction of processing.
• Object to certain processing.
• Request data portability.
• Withdraw consent where processing is based on consent.
• Object to or opt out of direct marketing.

We may need to verify your identity before responding to a request.

15. Complaints

If you have concerns about how we use your personal information, please contact us first at olatoyofficial@gmail.com. You may also have the right to complain to the UK Information Commissioner's Office (ICO).

16. Third-Party Links

Our website may contain links to third-party websites or services. Their privacy practices are governed by their own policies, and we are not responsible for those third-party practices.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, legal requirements or business practices. The latest version will be published on this page with an updated revision date.

18. Contact Us

OlaToy
A trading name of Shamsia Global Limited
Email: olatoyofficial@gmail.com
Phone: +44 7404 571905
Address: 27 Sydney Road, RM18 7PB, United Kingdom
Trade mark number: UK00004345401