Last updated: 28 October 2026
This policy explains what personal data FIDGET-TOY collects, why we collect it, how long we keep it and what rights you have. FIDGET-TOY is a brand of Hong Kong Jiu Mu International Trading Limited (“we”, “us”), which is the data controller for the information described here.
1. What we collect
- Order data: name, delivery address, email address, phone number, the items you bought and the amount you paid.
- Payment data: handled entirely by our payment processors. We receive a transaction reference and the last four digits of a card, never the full card number.
- Technical data: IP address, browser type, device type, pages visited and referring URL, collected through cookies and server logs.
- Communication data: the content of emails you send us, kept so we can resolve the issue and refer back to it.
2. Why we use it
- To process, pack, ship and track your order (legal basis: performance of a contract).
- To handle returns, refunds and warranty claims (contract).
- To send order confirmations and shipping notifications (contract).
- To detect fraud and abuse, and to keep the store secure (legitimate interests).
- To send marketing emails, only where you have opted in, and only until you unsubscribe (consent).
- To meet tax, accounting and customs record-keeping duties (legal obligation).
3. Cookies
We use strictly necessary cookies to keep your cart and session working, and analytics cookies to understand which products people look at. You can block or delete cookies in your browser settings; blocking necessary cookies will break the cart and checkout.
4. Who we share with
We share only what is needed, and only with:
- Payment processors, to take payment and handle refunds.
- Carriers and postal operators, to deliver your parcel and provide tracking.
- Our warehouse and fulfilment staff, to pick and pack your order.
- Email and analytics providers who process data on our instructions.
- Tax authorities, customs and law enforcement, where legally required.
We do not sell your personal data. We do not share your email list with advertisers.
5. International transfers
We operate from Hong Kong and fulfil orders from mainland China. Your data may therefore be transferred to and processed in these locations, which may have different data protection rules from your own country. Where we transfer data out of the EEA or the UK we rely on standard contractual clauses or an equivalent safeguard.
6. How long we keep it
Order and invoice records are kept for seven years to satisfy accounting and tax rules. Marketing consent records are kept until you withdraw consent plus two years. Support emails are kept for three years. Analytics data is retained in aggregate for 26 months.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, to object to processing based on legitimate interests, and to withdraw consent at any time. To exercise any of these, email support@fidget-toy.shop. We respond within 30 days. You also have the right to complain to your local data protection authority.
8. Security
The store runs over HTTPS. Access to order data is limited to staff who need it. Payment card data never touches our servers. No system is perfectly secure, but we take this seriously and review access regularly.
9. Children
This store is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes and contact
If we change this policy we will update the date at the top. Material changes will be announced on the site.
Hong Kong Jiu Mu International Trading Limited
Email: support@fidget-toy.shop
