Privacy Policy

 Welcome to ToyCo. We are New Zealand’s premier destination for news and insights on toys, games, and hobbies. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://www.toyco.co.nz/

(the "Site") and use our services, including newsletters, event registrations, and community features.

By accessing or using the Site, you agree to the terms of this Privacy Policy. If you do not agree with the policies and practices described herein, please do not use our Site. We comply with applicable data protection laws, including the New Zealand Privacy Act 2020.

2. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked directly or indirectly with a particular individual ("Personal Information"). We collect this data in two primary ways:

2.1. Information You Provide Voluntarily

• Account Registration: If you create an account to comment, save articles, or access premium content, we collect your name, email address, username, and password.
• Newsletter Subscription: If you subscribe to our newsletters (e.g., weekly roundups, breaking news), we collect your email address and preferences regarding content topics (e.g., video games, traditional toys, collectibles).
• Event Registration: When you register for ToyCo events, meetups, or industry gatherings, we collect your name, contact details, and any other relevant information required for participation.
• Contact Forms & Tips: When you contact us for inquiries, submit news tips, or request support, we collect your name, email address, and the message content.
• Comments and Community Interaction: If you post comments on articles or participate in forums, we collect the content of your submission, your username, and potentially your email address for verification purposes.

2.2. Information Collected Automatically

When you access the Site, we automatically collect certain technical information to ensure security, functionality, and performance:

• Device and Connection Data: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage Data: Pages visited, time spent on pages, clickstream data, referral URLs, and interaction with site features.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance user experience, analyze traffic, and manage advertising. For more details, see our Cookie Policy.

3. How We Use Your Information

We use the collected information for the following legitimate purposes:

• Service Delivery: To provide, maintain, and improve the Site, process event registrations, manage subscriptions, and administer community features.
• Communication: To send newsletters, editorial updates, event invitations, administrative messages, and respond to your inquiries. You can opt out of marketing communications at any time.
• Personalization: To tailor content recommendations, advertising, and event suggestions based on your interests and browsing behavior.
• Security and Fraud Prevention: To detect, prevent, and address technical issues, security breaches, fraud, or illegal activities.
• Analytics and Research: To understand how users interact with the Site, measure the effectiveness of our content, and conduct internal research to improve our journalistic quality.
• Legal Compliance: To comply with legal obligations under New Zealand law, resolve disputes, and enforce our Terms of Service.

4. Legal Basis for Processing

Under the New Zealand Privacy Act 2020, we collect and use your Personal Information because:

• It is necessary for the performance of a contract with you (e.g., providing newsletter services).
• You have given us consent to do so (e.g., for marketing emails).
• It is necessary for our legitimate interests, such as improving our website security and content quality, provided these interests are not overridden by your privacy rights.
• It is required to comply with legal obligations.

5. Sharing of Information

We do not sell your Personal Information to third parties. We may share your information only in the following circumstances:

• Service Providers: We engage trusted third-party vendors to perform services on our behalf, such as hosting, cloud storage, email delivery, payment processing, and analytics. These providers are contractually obligated to protect your data and use it only for the specified purposes.
• Event Partners: For registered events, we may share attendee lists with partners or sponsors if explicitly stated during registration and if you have consented.
• Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities (e.g., court orders).
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will notify users of any such change.
• Protection of Rights: To protect the safety, rights, property, or security of ToyCo, our users, or the public.

6. Data Retention

We retain your Personal Information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by New Zealand law.

• Account Data: Retained until you delete your account.
• Newsletter Data: Retained until you unsubscribe.
• Transaction/Event Data: Retained for accounting and operational purposes as required by law.
• Log Data: Anonymized or deleted after a specific period for security analysis.

7. Data Security

We implement appropriate technical and organizational measures to protect your Personal Information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS) and at rest.
• Regular security audits and vulnerability assessments.
• Access controls limiting employee access to personal data to those who need it for their job functions.
• Secure server infrastructure.

However, no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

8. Cookies and Tracking Technologies

We use cookies to enhance your experience. You can control cookie settings through your browser.

• Essential Cookies: Necessary for the Site to function.
• Analytical Cookies: Help us understand how visitors interact with the Site.
• Functional Cookies: Remember your preferences.
• Advertising Cookies: Used to deliver relevant ads.

You can choose to disable cookies in your browser settings, but this may affect the functionality of the Site.

9. Your Rights Under the Privacy Act 2020

As a New Zealand resident, you have the following rights regarding your Personal Information:

• Access: Request a copy of the Personal Information we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your Personal Information, subject to legal exceptions.
• Opt-Out: Unsubscribe from newsletters via the link in every email or by contacting us.

To exercise these rights, please contact us at contatus+toyco@proton.me. We will respond within a reasonable timeframe, typically 20 working days as per standard practice under the Act.

10. International Data Transfers

Your information may be transferred to and processed in countries other than New Zealand (e.g., servers located in Australia or the US). We ensure that any overseas service providers adhere to privacy standards comparable to the New Zealand Privacy Act 2020, often through contractual safeguards.

11. Children's Privacy

Our Site is intended for a general audience. We do not knowingly collect Personal Information from children under the age of 13 without parental consent. If we become aware that we have collected data from a child without proper consent, we will take steps to delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. The updated version will be indicated by an updated "Last Updated" date. We encourage you to review this page regularly. Significant changes will be notified via email or a prominent notice on the Site.

13. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

Email: contatus+toyco@proton.me