Consumer Privacy

 Personal Information Collection and Use

As described in our Privacy Policy, we collect information on our websites, and, if available, our mobile apps, and share that information with third parties, including advertising partners, in order to show you ads on other websites that are more relevant to your interests, including ads that promote our products and services and those of other Shopify merchants. We may do this through the sharing of personal information we collect when you visit our websites, and, if applicable, our mobile apps, and through cookies and similar technologies.

These activities may be considered a “sale” or “sharing” of your personal information under certain U.S. state privacy laws. Depending on where you are, you may have the right to opt out of these activities. If you would like to exercise this opt-out right, please follow the instructions below.

To opt out of the “sale” or “sharing” of your personal information collected using cookies and other device-based identifiers as described above, please click here. You will need to renew this choice if you clear your browser cookies or if you use a different browser or device.

The opt out of the “sale” or “sharing” of your personal information collected using cookies and other device-based identifiers as described above has been recorded. You will need to renew this choice if you clear your browser cookies or if you use a different browser or device.

To opt out of the “sale” or “sharing” of your personal information collected using cookies and other device-based identifiers as described above, you must be browsing from one of the applicable US states referred to above.

If you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are we will treat this as a request to opt-out of the “sale” or “sharing” of information for the device and browser you used to visit our website. 

Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California consumer or household (“personal information”). In particular, we collect the following categories of personal information: :

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following purposes:

• To fulfill or meet the reason for which the information is provided. For example, if you provide us with personal information in order to have a product delivered to you, we will submit necessary information to the appropriate delivery company.
• To provide you with information, products or services that you request from us.
• To provide you with email alerts and other notices concerning our products or services, or events or news, that may be of interest to you.
• To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collections.
• To improve our Web site and present its contents to you.
• As necessary or appropriate to protect the rights, property or safety of us, our consumers or others.
• To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.

We will not collect additional categories of personal information or use the personal information we collect for materially different, unrelated, or incompatible purposes without providing you notice.

Sharing Personal Information

We will never sell or rent your personal information to third parties without your explicit consent. We may disclose your personal information to our service providers who are under contract and who help with our business operations. Our contracts require these service providers to only use your information in connection with the services they perform for us, and prohibit them from selling your information to anyone else. Examples of the types of service providers we may share personal information with include:

• Cloud storage
• Payment processing
• Transaction monitoring
• Security
• Document repository services
• Customer support
• Internet (e.g. ISPs)
• Data analytics
• Information Technology
• Marketing

California Privacy Rights

The California Consumer Privacy Act provides California residents with the following rights:

Right to Know. You have the right to know and see what data we have collected about you over the past 12 months, including:

• The categories of personal information we have collected about you;
• The categories of sources from which the personal information is collected;
• The business or commercial purpose for collecting your personal information;
• The categories of third parties with whom we have shared your personal information; and
• The specific pieces of personal information we have collected about you.

This request is free.

Right to Delete. You have the right to request that we delete the personal information we have collected from you (and direct our service providers to do the same). There are a number of exceptions, which include, but are not limited to, when the information is necessary for us or a third party to do any of the following:

• Complete your transaction;
• Provide you with product or service;
• Perform a contract between us and you;
• Protect your security and prosecute those responsible for breaching it;
• Fix our system in the case of a bug;
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.);
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interests that adheres to all other applicable ethics and privacy laws;
• Comply with a legal obligation; or
• Make other internal and lawful uses of the information that are compatible with the context in which you provided it.

This request is free.

Your Additional California Rights. Under California’s “Shine the Light” Law (Civ. Code Sec. §1798.83) you can request certain information about our disclosure of personal information to third parties for their own direct marketing purposes during the preceding 12 months. We do not sell your personal information to third parties for direct marketing purposes. The request under California’s “Shine the Light” law is free and may be made once in a 12-month period.

No Discrimination. We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:

• Deny you goods or services
• Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• Provide you with a different level or quality of goods or services.
• Suggest that you may receive a difference price or rate for goods or services or a different level or quality of goods or services.

Exercising Your California Privacy Rights. To request access to or deletion of your personal information, or to exercise any other data rights under California law, please contact us using one of the following methods:

Toll Free Number: You may call our Toll Free Number 1-800-997-3644

Website: You may visit www.cartoys.com/ccpa to authenticate and exercise rights via our website and web form.

If you are a California resident, you may designate an authorized agent to make a request to access or a request to delete on your behalf. We will respond to your authorized agent's request if they submit proof that they are registered with the California Secretary of State to be able to act on your behalf, or submit evidence you have provided them with power of attorney pursuant to California Probate Code section 4000 to 4465. We may deny requests from authorized agents who do not submit proof that they have been authorized by you to act on their behalf, or are unable to verify their identity.

Response Timing and Format

We aim to respond to a verified consumer request for access or deletion within 45 days of receiving that request. If we require more time, we will inform you of the reason and extension period in writing. We will confirm receipt of request to a verified customer within 10 days of receiving the same.

Retention of Personal Information

We will keep the personal information that you provide to us for the period of time that your account is active. We only retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purpose of satisfying any legal, accounting, or reporting obligations or to resolve disputes.