Privacy policy
We are a small shop with no marketing machine behind it. We collect what an order needs and nothing more.
Last updated 2026-09-29
The short version
We never see your card number, we do not sell or rent your information, and we do not run advertising trackers on this site.
Who is responsible
PLA Toys LLC is responsible for the information described here. Questions go to support@pla-toys.com.
What we collect
- Order details: your name, email, shipping address, phone number, and what you bought. Shopify collects these during checkout and we see them in our Shopify admin so we can print and ship the order.
- Payment information: handled entirely by Shopify on their own page. Your full card number never reaches us. We can see only the last four digits and the card brand on the resulting payment record.
- Your cart: held by Shopify against a cookie in your browser, so it survives a refresh and is still there at checkout. Clearing your browser data clears it.
- Basic technical logs: Shopify records standard request information such as IP address, browser type, and which pages were requested. This is ordinary server logging used for security and troubleshooting.
- Email you send us: if you write to us, we keep the message so we can answer it and handle any follow-up.
- Store analytics: Shopify counts page views, notes which site sent you here, and records what was bought, so we can tell whether anyone is finding the shop. This uses cookies set by Shopify on your device.
Cookies
Shopify sets cookies in your browser so the store works at all — keeping your cart, keeping you signed in through checkout, and blocking fraud — and for the traffic counting described above. We do not add any of our own, and we do not use advertising or cross-site tracking cookies.
What we do not do
- We do not sell, rent, or trade your information.
- We do not run advertising trackers, and we do not use anything that follows you from site to site.
- We do not hand your email to other companies so they can market to you.
Marketing email
If you tick “Email me with news and offers” at checkout, we may write to you about new toys and the occasional offer. In the United States that box starts ticked — untick it and you are not added. Where the law requires an active opt-in instead, it starts empty.
Every marketing email has an unsubscribe link at the bottom, and it takes effect straight away. You can also just email us and we will take you off the list.
Order confirmations, shipping notices, and our replies to your own questions are not marketing. You get those because you bought something, and unsubscribing from offers does not stop them.
Who else handles your information
Running a store means a few companies necessarily see parts of an order:
- Shopify hosts this store, serves every page, processes payments, stores order and customer records, and sends both our order emails and our marketing emails.
- Cloudflare manages our domain and forwards email sent to our @pla-toys.com addresses to our inbox.
- USPS and the service we use to buy postage receive the name and address needed to deliver your package.
Each of these has its own privacy policy governing what it does with that information. We may also disclose information where the law requires it.
How long we keep it
Order records stay in Shopify for as long as we need them for bookkeeping, tax, and warranty purposes. Email correspondence is kept while it is useful for supporting you.
Children
This store is intended for adults to buy from. We do not knowingly collect personal information from children under 13. If you believe a child has given us their information, email us and we will delete it. Note that our toys are also not suitable for children under 13 for safety reasons, which is a separate matter covered on the safety page.
Your choices
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, and we will do so unless we are required to keep it for tax or legal reasons. Email us and we will handle it. Depending on where you live you may have additional rights under local law, and we will honor those too.
Security
The site is served over HTTPS, payment card data never touches our systems, and access to the Shopify admin is limited to us. No system is perfectly secure, so we do not claim otherwise, but we have deliberately kept the amount of data we hold small.
Changes
If this policy changes in a meaningful way we will update the date at the top of this page.
Questions about any of this? Email support@pla-toys.com.