Privacy Policy
Last Updated: April 2, 2025
Introduction
ToyMoy (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use ToyMoy’s services or website. ToyMoy is a business registered in Ontario, Canada, and we comply with Canada’s Personal Information Protection and Electronic Documents Act and other applicable privacy laws. By using our website or submitting information to us, you agree to the terms of this Privacy Policy.
Information We Collect
We only collect personal information necessary to provide our custom 3D modeling service
. The types of information we collect include:
- Personal Information You Provide: When you fill out our submission form, we collect your full name, email address, phone number, and shipping address. We also collect the images or pictures of children’s drawings that you upload, as well as any additional details you choose to provide about the project.
- Payment Information: ToyMoy does not collect or store your payment card details on our site. Payments are handled externally through Square via email invoice. (See Third-Party Services below.)
How We Use Your Information
We use the collected information for the following purposes:
- To Fulfill Orders: We use your name, address, and submitted drawings to process your order, create the 3D printed model, and ship it to you. We may also use your contact information to communicate with you about your order status, ask clarifying questions about the drawing if needed, and send you confirmations or receipts.
- Customer Service: We may use your email or phone number to respond to your inquiries, requests, or to notify you about any updates or issues regarding your order.
- Payments: Your email may be used to send you an invoice through our payment provider (Square). We use the information you provide to verify and process payments, though all payment details are handled by Square’s secure system (we do not directly process credit cards).
- Site Improvement and Analytics: We use usage data (from cookies, Google Analytics, Hotjar, etc.) to understand website traffic and user interactions. This helps us improve our website design, fix technical issues, and optimize our service for a better user experience. For example, we analyze which pages are most visited or how users navigate the site so we can make enhancements.
- Legal and Safety: We may use or disclose information as necessary to comply with applicable laws and regulations, to enforce our Terms & Conditions, to protect our rights or the safety of ToyMoy, our users, or others, and to detect/prevent fraud or security issues.
Sharing of Information and Third-Party Services
We do not sell or rent your personal information. However, we do share certain data with third parties in order to provide our services, as described below:
- Service Providers: We may share your information with trusted third-party service providers that help us operate our business. These include:
- Square: We use Square (Squareup.com) to handle payment processing. When you are ready to pay, we will send you an invoice via Square. Square will collect your payment details (such as credit card information) on their secure platform. ToyMoy does not see or store your credit card data. Square’s Privacy Notice describes how they process personal information when handling payments on behalf of merchants
squareup.com
. We recommend you review Square’s privacy policy for more details on their data practices. - Shipping Companies: We share your shipping name and address with the courier or postal service that delivers your 3D model. This is necessary to deliver your order. We partner with standard shipping providers (e.g., Canada Post, UPS, FedEx, etc.) as needed. These companies are only given the information required to ship the product to you.
- Analytics and Tracking Tools: We use third-party analytics services (Google Analytics and Google Search Console from Google) and user experience tools (Hotjar) on our website.
- Google Analytics and Search Console: These are services provided by Google that help us understand our website traffic. Google Analytics uses cookies to collect data about visitors (such as pages visited, time spent, location by country, etc.). This information is aggregated and helps us improve the site. Google’s policies prohibit the collection of personally identifiable information through Analytics, and we do not send such personal data to Google
comparitech.com
. For more information on how Google collects and processes data, you can visit Google’s site “How Google uses data when you use our partners’ sites or apps.”
comparitech.com - Hotjar: We use Hotjar to better understand user behavior on our site (e.g., which buttons are clicked, how far users scroll) so we can enhance usability. Hotjar uses first-party cookies and similar technologies to collect data on user interactions and device information on our behalf
help.hotjar.com
. This may include information like your IP address (collected and stored in anonymized form), device type, browser, and usage data. Hotjar does not track your browsing outside of our website. The data Hotjar collects is aggregated and helps us identify issues and improve our service. For more details, you can review Hotjar’s Privacy Policy
help.hotjar.com
.
- Google Analytics and Search Console: These are services provided by Google that help us understand our website traffic. Google Analytics uses cookies to collect data about visitors (such as pages visited, time spent, location by country, etc.). This information is aggregated and helps us improve the site. Google’s policies prohibit the collection of personally identifiable information through Analytics, and we do not send such personal data to Google
- Square: We use Square (Squareup.com) to handle payment processing. When you are ready to pay, we will send you an invoice via Square. Square will collect your payment details (such as credit card information) on their secure platform. ToyMoy does not see or store your credit card data. Square’s Privacy Notice describes how they process personal information when handling payments on behalf of merchants
- Legal Requirements: We may disclose personal information if required to do so by law or in response to valid requests by public authorities (for example, a court order, subpoena, or law enforcement request).
- Business Transfers: In the unlikely event that ToyMoy is involved in a merger, acquisition, or sale of assets, personal information held by ToyMoy may be among the assets transferred to the new owners. If such a transfer occurs, we will ensure that your information remains protected by this Privacy Policy (or you will be notified and given an opportunity to consent to any new uses).
We require all third-party service providers to safeguard your data and to use it only for the purposes we specify. We do not allow third parties to use your personal information for their own marketing purposes.
- Service Providers: We may share your information with trusted third-party service providers that help us operate our business. These include:
Cookies & Tracking Technologies
Cookies are small text files placed on your device that help our website function and gather information. When you visit ToyMoy’s site, we and our analytics providers (Google and Hotjar) may set cookies or similar technologies in your browser.
- Required Cookies: Some cookies may be necessary for the website to function (for example, to remember your preferences or maintain a session as you fill out the form). We do not use cookies for login or account purposes since we do not have user accounts.
- Analytics Cookies: Google Analytics sets cookies to collect anonymous traffic data and report website trends without identifying individual visitors. Hotjar’s cookies allow us to track user interactions in aggregate. These cookies help us understand how users use our site and enable us to improve the website’s design and functionality.
- Your Choices: Most web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer. You can also delete cookies at any time. Please note that if you disable cookies, some features of our site (especially analytics functionality) may not work as intended, but you will still be able to use the service (e.g., submitting the order form).
For more information on how to manage cookies and similar technologies, consult your browser’s help documentation. If you wish to opt-out of Google Analytics specifically, Google provides an Opt-Out Browser Add-on you can install. Hotjar also honors “Do Not Track” browser settings; if you enable Do Not Track in your browser, Hotjar will not collect your data.
Data Retention
ToyMoy will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law
. This means:
- We keep the information you provide with your order (name, contact, address, and drawing files) until your order is completed and delivered, and for a reasonable period thereafter in case of any queries or issues. Typically, we may retain order information for a certain number of years to comply with tax and purchase record-keeping obligations.
- If you contact us with a question but do not place an order, we will retain your communication and contact information only as long as needed to address your inquiry.
- Analytics data collected via cookies may be retained by Google Analytics and Hotjar according to their own policies. We generally review aggregated analytics indefinitely to help inform our business decisions, but this data cannot be easily linked back to an individual.
When personal information is no longer needed for the purposes outlined or required by law, we will securely delete or anonymize it. For example, we may securely erase digital files of drawings from our active systems after fulfilling your order (unless you requested we keep them for reorders), and we will anonymize or delete contact records that are no longer necessary.
Data Security
We take reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, loss, misuse, or disclosure. This includes using secure transmission (HTTPS encryption) for our website forms so that the information you submit is encrypted in transit. Our website and databases are hosted on secure servers with firewalls and regularly updated software.
Additionally, we limit access to personal data to those employees or contractors who need it to operate our service. We ensure that any third parties handling your information (such as payment and analytics providers) also use appropriate security measures.
Please note that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security of information. You share information with us at your own risk, and if you have reason to believe any of your personal data has been compromised (for example, if you suspect an account or transaction issue), please contact us immediately.
Children's Privacy
ToyMoy’s website and services are intended for use by adults (such as parents or guardians submitting their children’s artwork). We do not knowingly solicit or collect personal information directly from children under the age of 13. If you are under 13, please do not submit any personal information to us. Parents or guardians should fill out the order form on behalf of children.
We recognize the importance of protecting children’s privacy. Any information about a child (for example, the child’s first name or age if you voluntarily provide it as part of a description) should only be submitted by a parent or legal guardian. If we become aware that we have inadvertently collected personal information from a child under 13 without parental consent, we will promptly delete such information from our records.
If you are a parent or guardian and have concerns about personal information that a child may have provided us, please contact us (see Contact section below). We encourage parents and guardians to supervise their children’s internet usage and to help enforce this Privacy Policy by instructing their children never to provide personal information on our site.
Your Rights and Choices
As a user of our service and as the subject of your personal information, you have certain rights and choices regarding your data:
- Access and Correction: You have the right to request access to the personal information we hold about you and to ask for corrections if any information is inaccurate or incomplete. For example, you can contact us to update your shipping address if it changes before we ship your order.
- Withdrawal of Consent: Where you have given consent for us to use your information, you have the right to withdraw that consent. For instance, if you consented to receive marketing emails, you can unsubscribe at any time and we will stop sending them. If you withdraw consent for us to use your data that is necessary to fulfill an order (such as your shipping details), please note that we may not be able to complete our service to you unless alternative arrangements are made.
- Deletion: You may request that we delete your personal information once it is no longer necessary for us to retain. We will honor such requests to the extent possible (for example, if you ask us to delete your information after your order is completed, we will erase personal identifiers, though we might keep anonymized transaction records for accounting).
- Challenge and Complaint: If you have questions or concerns about our handling of your personal information, you have the right to contact us and challenge our compliance with privacy laws. We will investigate and respond to any complaints. If you are not satisfied with our response, you may also contact the Office of the Privacy Commissioner of Canada or the relevant privacy authority in your province.
To exercise any of these rights, please contact us using the information in the Contact section below. We may need to verify your identity before fulfilling certain requests (for example, requests for access or deletion) to ensure we protect your data from unauthorized access.
Links to Other Websites
Our website may contain links to external websites or services that are not operated by ToyMoy (for example, a link to Square’s or Hotjar’s privacy pages, or social media profiles). This Privacy Policy applies only to ToyMoy and our own site. We have no control over the content, privacy policies, or practices of any third-party websites. If you click a third-party link, we encourage you to review the privacy policy of that site. We are not responsible for the privacy practices of third parties.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make changes, we will update the “Last Updated” date at the top of this Policy. If the changes are significant, we may also provide a more prominent notice (such as by email notification or a notice on our homepage) to inform you.
We encourage you to review this Privacy Policy periodically. Your continued use of the ToyMoy website or services after any changes to this Policy constitutes your acceptance of the updated terms.
Contact Us
For questions or concerns, contact us at:
- ToyMoy
- 46 Laramie Cres, Maple, ON, L6A 0P8
- [email protected]
We will be happy to answer your questions and address any issues to the best of our ability.
By using our site and placing an order, you acknowledge that you have read, understood, and agreed to our Privacy Policy. Happy creating!