Privacy and Cookie Notice
International Toyworld Inc. (hereafter “TOY KINGDOM”) complies with the standards and requirements set forth by the Data Privacy Act (DPA) of 2012, its Implementing Rules and Regulations, and other data privacy guidelines issued by the National Privacy Commission (NPC) or other relevant government agencies.
At TOY KINGDOM, we value your personal information and data privacy rights.
This Privacy Notice describes how we handle your personal information when you use this website and or when you avail of our services (“Services”) in any of our stores. Among others, these Services may include the following:
This also outlines the purposes for which we use your personal information and the measures we implement to protect the privacy and security of your information.
References in this Privacy Notice to “we”, “us” or “our” are references to TOY KINGDOM.
This Privacy Notice DOES NOT cover the processing for:
When you avail of our Services, we may collect or receive all or some of the following categories of personal information:
When you enter our premises, we may collect the following categories of personal information:
When you use our website or mobile application, we may collect the following categories of personal information:
When you register for a Toy Kingdom Amazing Card, we may collect additional personal information such as:
When you create an account with our website or mobile application, we may collect additional categories of personal information such as:
When you subscribe to our newsletter, we may collect the following personal information:
When you avail of our Gift Registry services, we may also request you to provide the following information:
We will use your information only for the following legitimate purposes (“Purposes”):
Customer Interaction and Service:
Analytics, Marketing and Promotion:
Legal and Regulatory Purposes:
Security and General Business Operations:
TOY KINGDOM ensures that your personal information shall be shared only in a manner that respects your privacy and in compliance with the requirements of the DPA. We may share your personal information to the following in certain circumstances:
Our Parent Company, Affiliates and Authorized Personnel
We may share your personal information to our parent company, affiliates and our authorized personnel in relation to the Purposes declared in this Privacy Notice.
Our service group may access and/or use your personal information. These may include our marketing partners, consultants, technology partners, service providers, hosting providers, third-party logistics providers, courier service providers, administrators of our loyalty or point earning/redemption programs, and those that help us with our business activities. Through the execution of data privacy agreements or similar contracts, we require our service providers to keep your personal information secure and we prohibit them from using or sharing your personal information for any purpose other than the Purposes declared in this Privacy Notice.
We may also share your personal data in compliance with applicable laws or when required by a competent court, relevant government office or agency pursuant to DPA legislation and other applicable rules and regulations pertaining to data privacy.
We may process your personal information based on one or more of the following legal grounds:
By continuously availing of our services or, by your continued use of our website and mobile application, you reaffirm the consent you have provided and authorize us to process your personal data pursuant to this Policy.
We will keep the personal information we collect about you for as long as necessary to carry out the Purposes set forth in this Privacy Notice or in accordance with prescribed retention periods under relevant regulations (e.g. BIR). We may also retain your personal data in order to enforce our legal rights or whenever it is required under the DPA or upon lawful order of a competent court or relevant government agency.
Electronic files shall be erased, while physical records shall be shredded for disposal. When appropriate, anonymization techniques may be performed to permanently remove identifiable information from our records. In all cases, we will make sure that the personal information is destroyed in a way that prevents unauthorized people from accessing, processing, or retrieving it.
Risk is the chance that a harmful incident may happen. In the context of personal data, risk refers to the chance that someone might collect, use, disclose, or access your personal data in an unauthorized manner or in a way that may cause you harm. In order to ensure that the risks to your personal information are minimized, we employ various measures to safeguard your personal information. However, this does not guarantee protection against all threats such as when systems are exposed to targeted cyberattacks, malware, ransomware, and computer viruses or when manual records are accessed without authority. In case a security incident occurs, we’re prepared to respond and manage such incidents in line with our policies and in accordance with regulations.
Your personal data are stored in a secure facility in the Philippines or in other countries where we or our Business Partners have facilities. When we transfer your personal information to other countries, we comply with the requirements of DPA Legislation or relevant regulation for such transfer and take steps to ensure that your personal information is protected and processed in accordance with this Privacy Notice.
We implement industry-standard security measures to protect the confidentiality, integrity, and availability of the personal data that we process. These security measures include the following:
Organizational Security Measures
Our website collects device cookies to enable you to browse our website and to enable us to address your concerns and inquiry better. Cookies are small text files that are stored on your device when you visit our websites or use our apps. We utilize various cookies as described below.
You may withdraw your consent by choosing the opt-out function in our cookie setting. However, by opting out of these third-party cookies, your browsing experience may be affected. You may also later opt-out from said third-party cookies after giving your consent by clearing your cookies and other site data in your browser settings.
TOY KINGDOM shall not knowingly collect the personal data of a person below 18 years old without any legal basis or consent of the minor’s parent/s or legal guardian. Should it come to our attention that the personal data of minors was provided without a legal basis or consent of the minor’s parent/s or legal guardian, such personal data shall be destroyed or deleted in a secure manner.
Minors are advised not to provide any personal data, such as their name, age, gender, email address, contact information, among others, and should consult their parent(s) or guardian(s).
You are responsible for ensuring that the personal data you provide is accurate and up-to-date and that you are of legal age when you submit any data to us.
We encourage you to use the latest version of web browsers for your own safety and security. Updated web browsers are normally equipped with security features that provide anti-phishing protection, improved parental controls, and tools to prevent malware and other privacy threats. We will not be liable for any damage, loss, injury, or claim that may result when you fail to comply with these obligations.
Please set and maintain your communication preferences so that we send communications to you in accordance with your preferences. You are not licensed or otherwise allowed to add other users to our mailing list (email or physical mail) without their express consent. You should not send any messages which contain spam, spyware or virus via the Website. If you would like to report any suspicious messages, please contact us at our email address below.
As provided under the DPA, you have the following data privacy rights:
If you intend to exercise any of your abovementioned data privacy rights you may contact our Data Protection Officer (DPO).
For inquiries regarding the processing of personal data, as well as any concerns or complaints regarding data privacy, or should you want to exercise your rights as a Data Subject, you may contact the DPO using the information below:
We encourage you to submit your inquiry and/or concerns in writing for proper documentation and tracking. Our response will be within 15 days upon receipt.
TOY KINGDOM may change this Privacy Notice from time to time without prior notice. Revised versions of this Privacy Notice will be posted on this page, together with an updated effective date.
Last updated on August 17, 2023