Privacy Policy

Introduction

This Privacy Policy explains how Big Little Things 3D collects, uses, and protects personal information when you visit our online toy store. We are committed to protecting your privacy and to handling your data transparently.

For details about the specific cookies and similar technologies we use, please see our Cookie Policy.

Data Controller

The data controller responsible for your personal information is Big Little Things 3D. If you have questions about this policy or wish to exercise your rights, you can contact us by email at the address listed on our storefront.

Information We Collect

Information Collected Automatically

When you visit our store, we may automatically collect the following information depending on your consent choices:

• IP address (used for geographic region detection and analytics geo-location)
• Browser type, operating system, and device information
• Pages visited, time spent, and navigation patterns
• Referring website or campaign source
• Geographic region (country and state/region level, derived from IP address)

Information You Provide

When you create an account or place an order, you voluntarily provide:

• Name and account sign-in details
• Email address
• Shipping and order information

How We Use Your Information

• To determine your regulatory region and apply the appropriate consent framework
• To analyze store usage and improve our products and performance (with your consent)
• To process your orders and manage your account
• To deliver relevant advertising and measure campaign effectiveness (with your consent)
• To protect the store from abuse and ensure security

Legal Bases for Processing

We process your personal data under the following legal bases:

• Consent: for analytics and marketing data collection. You can grant or withdraw consent at any time.
• Legitimate interest: for essential store functionality, security, and geographic region detection for consent compliance.
• Contract performance: to process and fulfil your orders.

Third-Party Services

We share data with the following third-party services, subject to your consent choices:

• Google Analytics 4: store usage analytics. When consent is denied, only anonymous aggregate data is collected.
• Meta (Facebook) Pixel: advertising and conversion tracking. Only active when marketing consent is granted.
• Amazon Web Services: hosting, content delivery (CloudFront), and server-side data processing infrastructure.

Data Retention

• Analytics data: retained by Google Analytics for up to 14 months, after which it is automatically deleted.
• Account and order data: retained for as long as your account is active or as required to fulfil orders and meet legal obligations.
• Server logs: retained for up to 30 days for security and debugging purposes.

International Data Transfers

Your data may be transferred to and processed in countries outside your own, including the United States, where our service providers operate. These transfers are protected by appropriate safeguards such as Standard Contractual Clauses (SCCs) or the service provider's participation in recognized data protection frameworks.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate personal data.
• Erasure: request deletion of your personal data.
• Restriction: request that we limit how we use your data.
• Portability: request your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us by email. We will respond within the timeframe required by applicable law.

Children's Privacy

Our toys are made for children, but our online store is intended for use by adults such as parents and guardians. We do not knowingly collect personal information from children under 16. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the last-updated date at the top of this page. We encourage you to review this policy periodically.