This Privacy Policy describes how Micro Machines® Toys, Cars, Star Wars, Playset (“Micro Machines,” “we,” “us,” or “our”) collects, uses, and shares information about you when you visit our website at themicromachines.co.uk (“Website”), and when you interact with us in other related ways ― for example, by purchasing a product from us, contacting our customer support team, or interacting with us on social media.
Please take a moment to read this Privacy Policy carefully. If you have any questions about this Policy or about how we collect and process your personal data, please contact us at privacy@themicromachines.co.uk.
What Information Do We Collect?
We collect information about you in three ways: directly from your input, from your device, and from third parties.
Information You Provide To Us Directly
We collect information directly from you in a number of ways on our Website. These include:
- Account registration: We collect information when you register for an account, including your name, email address, phone number, login credentials like usernames and passwords, and any other information you provide during the account creation process.
- Purchases: We collect information when you make a purchase on our Website including your name, billing address, shipping address, payment information (including card details), email address, phone number, and any other information you provide during the checkout process.
- Contact forms and support tickets: We collect information when you contact us directly through contact forms, email, phone calls, or support tickets. This can include your name, email address, postal address, phone number, any information about your inquiry, and any other information you provide.
- Surveys: We may conduct online and offline surveys from time to time. When you participate in a survey, we collect information that you provide through the survey, including any personal information you disclose and your responses to the survey questions.
- Newsletters: You can choose to provide your email address to subscribe to our newsletter. We use this information to send you periodic emails about product updates, announcements, and promotional offers. You can unsubscribe from these messages at any time.
- Social media: We have official presences on social media platforms. Any information you post when engaging with our social media accounts is collected directly by the platform and subject to its privacy policies. We may also collect private messages sent to us on social media for customer support.
Information We Collect Automatically From Your Device
We also collect some information automatically through cookies, web beacons, log files, and other tracking technologies when you browse our Website:
- Log data: Our servers automatically record information from your browser or device when you visit our Website. This can include your IP address, browser type and settings, the web page you visited, how you interacted with our Website, date and time stamps associated with your activity, device identifiers, device settings, and cookie data.
- Cookies: We use session and persistent tracking cookies to identify you as a unique user. This allows us to provide personalized services and functionality. Cookies also enhance your overall website experience. You can control cookie settings through your browser, but disabling them may affect your experience on our Website.
- Web beacons: We employ a software technology called web beacons to collect general metrics about your use of our Website. Web beacons are tiny graphic images placed on website pages or in our emails that allow us to determine whether you have performed specific actions.
- Embedded scripts: An embedded script is programming code designed to collect information about interactions with our Website. This code is temporarily downloaded to your device from our web server or a third party service provider.
- Device information: We collect identifiers like IP address, MAC address, UUID, and other information about the device you use to access our Website. We also may determine your approximate geographic location based on IP address.
- Unique application numbers: Certain mobile devices assign unique application numbers like the Android ID. These IDs and any associated information may be collected and stored by us.
Information We Collect From Third Parties
From time to time, we may obtain information about you from third party sources as permitted by law. This can include:
- Demographic information from data brokers about you or your business
- Marketing and sales leads generated by third parties
- Publicly-accessible databases and government records
- Social media platforms (if you engage with us)
- Address verification services
- Marketing partners and data collaborators
- Other third-party services used for identity verification
By using our Website and services, you authorize us to collect information about you from third parties.
How Do We Use the Information We Collect?
We use your personal information for a variety of business purposes including:
- To provide our Website services and fulfill your requests
- To complete your purchase transactions
- To respond to your inquiries and to provide customer support
- To send administrative information, confirmations, security alerts, and support messages
- To send periodic emails about new products, special offers, and other news about our company
- To analyze how you use our products, services, and Website
- To improve our products, Website, and services
- To customize and personalize your experience
- To detect and prevent fraud, abuse, security risks, and other harmful activity
- To conduct investigations and comply with legal obligations
- To enforce our Terms of Use and other agreements
With Whom Do We Share Your Information?
Vendors and Service Providers
We may share your information with vendors and service providers retained in connection with our business operations, including:
- Payment processors and payment card networks
- Cloud storage and processing services
- Hosting service providers
- Ad networks
- Analytics providers
- Marketing service providers
- Shipping and fulfillment providers
- Security and fraud prevention consultants
These parties only have access to perform these tasks on our behalf. They are contractually bound to protect and to use such information only for the purposes for which it was disclosed, except as otherwise required or permitted by law.
Business Transfers
Your personal information may be transferred to successor entity upon a merger, acquisition, bankruptcy, dissolution or other corporate change. You will be notified via a prominent notice on our Website if such a transfer occurs.
Lawful Requests
We may be required to disclose your information in response to lawful requests by public authorities, including to meet national security or law enforcement obligations. We may also disclose information to third parties if compelled to do so by a court of law or other similar requirement.
We strive for full transparency in complying with legal requests. When permitted, we will direct law enforcement agencies seeking customer data to make a lawful request directly to you. We may also notify you of requests for your information, unless we are legally restricted from doing so.
To Protect Rights and Safety
We may share your information when necessary to enforce our policies, terms and agreements. We also reserve the right to disclose your information as necessary to protect our legal rights, safety, and the rights and safety of others.
International Data Transfers
Our Website servers are located within the United Kingdom. If you are located outside the U.K., please be aware that any information processed by us may be transferred to and stored on servers located in your region or elsewhere around the world. Your use of our services constitutes your consent to such transfer across international boundaries.
We will ensure that any international transfers of your personal information are carried out responsibly in accordance with applicable data protection laws.
How Long Do We Retain Your Information?
We keep your personal information only as long as needed to fulfill our business purposes or to meet legal requirements. For example:
- We retain your account information for as long as your account is active.
- We retain your purchase transactions for as long as necessary to fulfill our financial, accounting, and legal obligations.
- We retain aggregated statistical data without expiration, but we anonymize this information so that it no longer identifies any specific individual.
- We retain your marketing preferences indefinitely, unless you ask us to delete this information.
Your Data Protection Rights
You have certain rights with respect to your personal data, as outlined below:
Access: You can request copies of your personal information, including account data, past purchases, and other information we collect through our interactions and activities with you.
Amend: You can ask us to correct or complete any incomplete or inaccurate data we are storing about you.
Delete: You can ask us to erase or delete all or some of your personal information (e.g. if it is no longer necessary to provide services to you).
Export: You can ask for a copy of your data for your own purposes. We will provide this to you in a common electronic format.
Object: You can let us know that you object to, or want to restrict, certain types of processing with your data, such as direct marketing.
Complain: You can file a complaint with us and/or with the relevant supervisory authority if you feel we are not complying with data protection laws.
Restrict: You can ask us to restrict the processing of your information in certain cases.
Portability: You can ask for data portability. We will provide applicable data to you or a designated third-party.
You can make these requests by emailing us at privacy@themicromachines.co.uk or writing to us at the address listed at the bottom of this policy. For account data, we will need to verify your identity first. If you have a password-protected account with us, we will require your current credentials to process your request.
While we aim to honor all reasonable requests, we reserve the right to retain data as permitted or required by applicable laws and regulations. Access may be limited in some cases, for example when complying with legal requirements, protecting our legitimate business interests, and ensuring network and information security.
Your Choices About Information Sharing & Marketing Practices
We respect your right to make choices about the ways we collect, use, and disclose your information. Here are some choices you have regarding our marketing practices:
Account emails: You can opt out of non-essential transactional emails related to your account – like order confirmations, renewal notices, and other similar communications – by updating your preferences in your account or through the unsubscribe link in the email. Please note we may still send you important service notifications like password reset emails or notices about material changes to our terms, conditions, and policies.
Marketing emails: You can opt out of our marketing emails by following the unsubscribe link located at the bottom of each email or by adjusting your email preferences within your account. After unsubscribing, you will no longer receive our promotional messages by email.
Push notifications: With your permission, we may send promotional push notifications to your mobile device. You can disable these through your device settings.
Interest-based ads: If you do not wish to have your online behaviors studied by third party companies for the purpose of delivering targeted advertisements, you can install the Network Advertising Initiative opt-out tool or the DAA opt-out tool available at www.networkadvertising.org/choices and www.aboutads.info/choices.
Do Not Track: Most modern web browsers give you the option to send a Do Not Track signal to websites you visit, indicating that you do not wish to be tracked. However, there is no accepted standard for how sites should respond to this signal, so we cannot guarantee that we will honor Do Not Track browser settings.
Privacy Notice for California Residents
This section supplements the information provided in the Privacy Policy above and applies only to visitors, users, and others who reside in the State of California.
Categories of Personal Information Collected
For the 12 months preceding the date this Privacy Policy was last updated, we have collected the following categories of personal information about California residents:
- Identifiers like real name, alias, postal address, unique identifier, IP address, email address, account name, social security number, driver’s license number, passport number, or other similar identifiers
- Personal information described in California Civil Code 1798.80(e) like telephone number; credit card number; debit card number; or any other financial information
- Characteristics protected under California or federal law like age or date of birth; sex, gender or gender identity; physical or mental disability
- Commercial information including purchasing or consuming histories or tendencies
- Biometric information used for online account authentication
- Geolocation data like device location
- Internet or other electronic network activity information, including browsing history, search history, and information regarding your interaction with our website, mobile applications, or advertisements
- Audio, electronic, visual or similar information from your device microphone, camera and other sensors
- Professional or employment information
- Education information subject to the federal Family Educational Rights and Privacy Act
- Inferences about preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, or aptitudes.
Sources of Personal Information
We collect the categories of personal information listed above from:
- Directly from California residents or their agents. For example, from documents submitted to us related to purchases or account registrations.
- Indirectly from our customers or their employers. For example, through information we collect from our customers in the course of providing services to them.
- Directly and indirectly from third parties. For example, from service providers, advisors, data brokers, partners, or public agencies.
- Website visitors, including through our tracking technologies like cookies or embedded scripts.
- Marketing organizations and data aggregators.
Purposes for Collecting Personal Information
We may use collected personal information for the following purposes:
- As described in the “How Do We Use Your Information” section above.
- Auditing related to current interactions with you and concurrent transactions.
- Detecting and protecting against security incidents, fraud, and illegal activity.
- Debugging and repairing errors in functionality.
- Internal research to develop and improve our Website, products, and services.
- Activities to verify or maintain quality or safety.
Sale of Personal Information
We do not sell personal information of California residents to third parties, and have not done so in the preceding 12 months. We have no plans to begin selling such personal information.
Your Rights with Respect to Your CA Personal Information
If you are a California resident, you have certain rights with respect to your personal information, as outlined in this section.
Right to Know and Access
- You can submit a verifiable request for information about how we have collected, used, disclosed, sold (if at all), and otherwise processed your personal information over the past 12 months.
- You can request the specific pieces of personal information we have collected about you.
- You can request information about the sources of your personal information.
Right to Request Deletion
- You can ask us to delete any personal information we have collected from you, subject to exceptions allowed under the law.
Right to Non-Discrimination
- You are entitled to exercise these rights without suffering discrimination. We may not discriminate against you legally for exercising your rights under the California Consumer Privacy Act.
Verification Process
- Once your request is received, we will send you an acknowledgement letter within 10 days while we verify your identity and access rights under applicable law.
- Verified requests will receive a substantive response within 45 days unless a time extension is permitted under the law.
Agent Authorization
- You can designate an authorized agent to make a request under the CCPA on your behalf if:
- The agent is registered with the California Secretary of State; and
- You provide the authorized agent with signed, written permission to make requests for you.
Methods to Submit Requests
- Email: privacy@themicromachines.co.uk
- Phone: 020 7946 0526
- Postal Address:
Micro Machines Ltd. 27 Old Gloucester Street London WC1N 3AX
United Kingdom
Additional Information for Minors
Minors under 16 years of age residing in California have additional rights regarding the removal or deletion of certain posted content. If you are a California resident under age 16 and wish to request removal of certain content you have posted on our Website, you can do so by emailing us at privacy@themicromachines.co.uk or writing to us at the address above. Please include clear instructions about the content you wish to be removed.
When receiving such a request, we will promptly remove the content without charging a fee, except as needed to process the removal. We will not require any justification from the minor for said removal.
We will respond to the minor’s request within a reasonable period of time, unless the content has been illegal or we are prohibited by law from deleting or disabling access to it. We may then decline the removal request.
Data Security and Retention
We use reasonable organizational, technical, and administrative measures to protect any personal information we collect and process. However, no data transmission over the internet or data storage system can be guaranteed to be perfectly secure. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately.
When we retain third parties to provide services involving your personal data, we contractually require them to follow appropriate data security standards, restrict use to the purposes we specify, and prohibit sharing or retention of the data beyond the contracted tasks.
We will retain your personal information in a personally-identifiable format for as long as is necessary to fulfill our legitimate business purposes or to meet legal requirements. At the end of the retention period, we will either delete or anonymize your information so that it no longer identifies any specific individual.
Children’s Privacy
Our Website is not directed at nor targeted toward children under the age of 16. We do not knowingly collect personal information from children under 16 without obtaining parental consent. If you believe we may have collected personal data from a child under 16, please contact us and we will take appropriate measures to investigate and address the issue promptly.
Links to Other Websites
Our Website contains links to other websites for educational and informational purposes. These sites’ privacy practices may be different from our own. We are not responsible for the privacy practices or content found on any linked online services. We recommend you review their privacy policies before providing them with personal information.
Changes to this Privacy Policy
This Privacy Policy may be updated periodically to account for changes in our personal data collection and processing practices. We will indicate at the top of the policy when it was last updated. Significant modifications will be flagged prominently. Your continued usage of our Website and services after an update constitutes your acceptance of the revised Privacy Policy. We recommend periodically reviewing this page to stay informed on how we protect and process your information.
How to Contact Us
If you have any questions about this Privacy Policy or about how we handle your personal data, please email us directly at privacy@themicromachines.co.uk or write to us at:
Micro Machines Ltd.
27 Old Gloucester Street
London
WC1N 3AX
United Kingdom
We will attempt to respond to your inquiry within 30 days.