Privacy policy

MTC TOYS USA LLC — PRIVACY & MARKETING POLICY

 

Effective Date: June 1, 2026 Last Updated: July 1, 2026

MTC Toys USA LLC ("MTC Toys," "we," "us," or "our") operates 792 Wilson Ave., North Tonawanda, NY 14120, and sells products through our Shopify storefront, our BigCommerce storefront, and related marketing channels (collectively, the "Sites") to customers in the United States. This Policy explains what personal information we collect, how we use and share it, and the choices and rights available to you, including additional rights for California and other U.S. state residents.

1. Information We Collect

A. Information you provide directly:

  • Account information (name, email, password) if you create an account
  • Order and shipping information (billing/shipping address, phone number)
  • Payment information — see Section 2 (Payment Processing) below regarding what we do and do not store ourselves
  • Customer service communications
  • Marketing preferences (email/SMS opt-ins, as described in Section 6)
  • Sweepstakes/promotion enrollment information, where applicable (see Section 9)

B. Information collected automatically:

  • IP address, browser type, device identifiers, operating system
  • Pages viewed, links clicked, time on site, referring URL
  • Approximate location (derived from IP address)
  • Cookies and similar tracking technologies (see Section 3)

C. Information from third parties:

  • Shopify and BigCommerce, as our e-commerce platform providers
  • Payment processors, confirming transaction status
  • Marketing and advertising platforms (Google, Meta, TikTok), to the extent they return aggregated or matched audience data to us

2. Payment Processing

Payment card information is collected and processed directly by our payment processors — Shopify Payments on our Shopify storefront, and PayPal on our BigCommerce storefront — and is not stored on our own servers. We may retain limited transaction metadata (order total, last four digits of card where provided, transaction ID) for order history and customer service purposes.

3. Cookies & Tracking Technologies

We and our third-party partners use cookies, pixels, and similar technologies for:

  • Necessary/functional: cart contents, login sessions, site security
  • Analytics: Google Analytics (or similar), to understand site traffic and usage patterns
  • Advertising: Meta (Facebook/Instagram) Pixel, TikTok Pixel, Google Ads tag, used to measure ad performance and show you relevant ads on those platforms based on your activity on our Sites

For U.S. visitors: Use of advertising pixels that share your browsing/purchase activity with Meta, Google, or TikTok for ad targeting is treated as a "sale" or "sharing" of personal information under California and other state privacy laws, even though no money changes hands. See Section 8 for your opt-out rights, including honoring the Global Privacy Control (GPC) browser signal.

4. How We Use Your Information

  • Process and fulfill orders, manage accounts, provide customer service
  • Send transactional communications (order confirmations, shipping updates)
  • Send marketing communications you've opted into (Section 6)
  • Operate sweepstakes/promotions you've enrolled in (Section 9)
  • Measure and improve ad performance and site experience
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations (tax, recordkeeping, consumer protection)

5. How We Share Information

We do not sell your personal information for money. We do share information, in the limited ways described below, with:

  • Service providers: Shopify, BigCommerce, payment processors, shipping/fulfillment carriers, email/SMS platforms — solely to operate the Sites and fulfill orders/communications
  • Advertising & analytics partners: Google, Meta, TikTok — as described in Section 3, for analytics and ad targeting; this may constitute a "sale/share" under some state laws even without payment (see Section 8 for opt-out)
  • Legal/safety: law enforcement, regulators, or other parties where required by law, subpoena, or to protect our rights, property, or safety, or that of our customers

Relationship with Shopify

Our Shopify storefront is hosted by Shopify, which processes personal information about your access to and use of that storefront to provide and improve the underlying platform for us. Information you submit through our Shopify storefront is transmitted to and shared with Shopify, and with Shopify's own service providers, which may be located in countries other than where you reside.

As of the date of this Policy, we do not have Shopify Audiences or a similar cross-merchant personalized-advertising feature enabled, meaning we do not share your data with Shopify for the purpose of building shared advertising audiences across other Shopify merchants. If that changes in the future, this Policy will be updated to disclose it before the feature is turned on. To learn more about how Shopify independently uses personal information it processes, you can visit Shopify's Consumer Privacy Policy at https://www.shopify.com/legal/privacy/consumers, and, depending on where you live, exercise certain rights directly with Shopify at https://privacy.shopify.com/en.

Relationship with BigCommerce

Our BigCommerce storefront is likewise hosted by BigCommerce, which processes personal information about your access to and use of that storefront to provide and improve the underlying platform for us. Information you submit through our BigCommerce storefront is transmitted to and shared with BigCommerce and its service providers on a similar basis.

We use Feedonomics, a BigCommerce-owned product feed management tool, to syndicate our product catalog to advertising and shopping channels including Google, Meta, TikTok, Microsoft, and Pinterest. Feedonomics primarily transmits product listing data (titles, prices, images, inventory), not customer personal information, and does not pool our customer data with that of other, unrelated merchants the way a shared-audience feature would. To the extent Feedonomics' connections to these ad channels also support conversion tracking using your activity on our Sites, that use is already covered by the advertising pixel disclosures in Section 3 and the advertising-partner disclosures above, not a separate cross-merchant sharing arrangement.

6. Marketing Communications

We send marketing emails and, where separately opted in, marketing text messages, only to those who have affirmatively consented. See our consent language at signup/checkout for full detail. You can unsubscribe from email at any time via the link in any marketing email, and from SMS by replying STOP. Transactional messages (order/shipping confirmations) are sent regardless of marketing opt-in status, as these are necessary to complete your purchase.

7. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Policy: active account/order history is retained for the life of the account plus a reasonable period for tax/accounting recordkeeping (typically up to 7 years, consistent with IRS/state recordkeeping requirements); marketing consent records are retained for the duration of active enrollment plus approximately 4 years after opt-out (to preserve TCPA compliance evidence); cookie/analytics data is retained per the applicable platform's default window unless configured otherwise.

8. Your Privacy Rights

All U.S. visitors:

  • You may request access to, correction of, or deletion of your personal information, and may opt out of the "sale/sharing" of your information for targeted advertising (Section 3), by contacting us at mtctoys@aol.com.
  • We honor the Global Privacy Control (GPC) browser signal as a valid opt-out of sale/sharing where technically supported by our platforms. If we're able to associate the device sending the GPC signal with an account you hold with us, we will apply the opt-out to that account as well as the browser/device. Other than GPC, we do not currently respond to other "Do Not Track" browser signals.

California residents (CCPA/CPRA): You have the right to know what personal information we collect, to request deletion, to correct inaccurate information, to opt out of sale/sharing (including for cross-context behavioral advertising via ad pixels), and to non-discrimination for exercising these rights.

Other U.S. states: Residents of states with comprehensive privacy laws (e.g., Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others as such laws take effect) may have similar rights to access, correct, delete, and opt out of targeted advertising and, where applicable, profiling. Contact us to exercise these rights; we will confirm applicable process based on your state of residence.

Occasional international orders: This Policy and our Sites are designed for U.S. customers. If we occasionally receive an order from outside the U.S., that order is still processed under this Policy and U.S. law; we do not currently make additional jurisdiction-specific representations (e.g., Canadian PIPEDA/CASL, EU GDPR) because we do not operate the Sites as a targeted offering to those markets. If international sales become a meaningful part of the business, this Policy will need to be expanded accordingly before that expansion, not after.

9. Sweepstakes & Promotions

Where you enroll in an MTC Toys sweepstakes or promotion, the following additional terms apply to information collected for that purpose, alongside the rest of this Policy:

Additional information collected at sweepstakes enrollment: consent timestamp and disclosure version shown at signup, IP address and/or device identifier used at enrollment, and which platform (Shopify or BigCommerce) you enrolled through, in addition to the contact information described in Section 1.

How this information is used: to maintain the pool of eligible subscribers, deduplicate entrants across our Shopify and BigCommerce platforms so each person has a single entry, conduct monthly drawings, and notify and fulfill prizes to winners, in addition to the general marketing uses described in Section 6.

Enrollment structure: Enrollment is continuous — once enrolled, you remain eligible for future monthly drawings for as long as you remain an active email and/or SMS marketing subscriber, with no need to re-enter each month. Purchases do not provide any advantage in odds of winning and are not required to enroll or win.

Retention: We retain active sweepstakes-subscriber information for as long as you remain enrolled. If you unsubscribe, we retain your consent and enrollment history for approximately four (4) years following your unsubscribe, solely to maintain compliance and consent records as required for TCPA and sweepstakes recordkeeping purposes, consistent with Section 7.

Full promotion mechanics, eligibility, and prize terms are governed by the Official Rules published for each promotion, available at https://eihep9-08.myshopify.com/pages/official-rules

10. Children's Privacy

Our Sites are not directed to, and are not intended for use by, anyone under 18 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we learn we've collected information from a child, we will delete it. Parents who believe their child has provided us information may contact us to request deletion.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including relying on Shopify's and BigCommerce's platform-level security and PCI-compliant payment processing. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by an updated "Last Updated" date, and where required by law, we will provide additional notice (e.g., email notification for significant changes affecting marketing consent).

13. Contact Us

MTC Toys USA LLC 792 Wilson Ave. North Tonawanda, NY 14120 Email: mtctoys@aol.com Phone: (716) 514-6590