At Beast Lab® Toys, we respect the privacy of everyone who visits our website and online store. This Privacy Policy explains how we collect, use, and protect your personal information. Please read this notice carefully to understand our policies and practices.
What Information We Collect
We may collect and process the following personal data:
- Contact details such as your name, email address, postal address, and phone number when you create an account, make a purchase, contact us, or subscribe to our newsletter.
- Payment information such as your payment card number, security code, and billing address when you make a purchase. This data is encrypted and processed by secure third-party payment processors.
- Order information including details about products purchased, quantities, prices, delivery details, and communication records.
- Usage information such as pages visited, products viewed, links clicked, and other actions you take on our website. We use cookies and web analytics tools to gather this data anonymously.
- Account information including username, password, saved addresses, order history, and communication preferences when you create an account with us.
- Marketing preferences including subscription status and preferences related to email, text, or other marketing channels.
- Correspondence including account inquiries, customer support questions, or other information you send to us.
We collect your personal information in various ways:
- When you provide information directly to us by signing up, placing an order, filling out forms, taking surveys, posting comments or pictures, or corresponding with us.
- Passively through use of cookies and similar technologies on our website. You can control cookies through your browser settings.
- From third-party sources like marketing partners, social media platforms, and advertising networks.
We do not knowingly collect or process any special category data such as race, religion, health, or sexuality. We also do not intentionally gather personal data from children under age 16 without parental consent.
How We Use Personal Information
We use your personal data for the following purposes:
- Fulfilling orders for products or services you request. We need data like contact and payment details to process transactions.
- Managing your account including creating profiles, recognizing you, and providing customer support.
- Personalizing your experience such as remembering your preferences, showing relevant offers, and improving our website.
- Improving our products and services by analyzing usage data, survey feedback, and testing new features.
- Marketing and advertising through email, social media, our website, and other channels based on your communication preferences. This allows us to tailor promotions you might like.
- ** Communicating with you** about orders, promotions, events, product updates, and other news.
- Protecting against fraud, abuse, security risks, and resolving disputes which may require investigating activity on our website or platform.
- Complying with legal obligations such as payment processing rules, product safety regulations, and records requirements.
- With your consent for additional purposes we explain at the time of consent.
- Anonymizing data about website usage through aggregation or removing identifiers. Anonymized data helps us understand trends and improve our offerings.
How We Share Information
We may share your personal data selectively with the following parties:
- Payment processors and fulfillment partners to facilitate orders, process payments, and deliver purchases. These companies do not retain or use data we share beyond what is required for their services.
- Service providers and contractors to support our business operations such as website hosting, shipping, marketing, analytics, customer service, and more. We screen providers carefully and bind them to strict privacy standards through contracts.
- Legal and regulatory authorities to comply with laws, respond to legal process, or protect our customers and interests. We share information only to the extent needed for specific requirements.
- Corporate affiliates meaning entities under common ownership or control of our parent company. We may share information with affiliates to provide or improve joint content, products, and services.
- Business transfers as part of transactions such as a merger, acquisition, bankruptcy, dissolution, or asset sale. Customer data is typically transferred along with the rest of the business assets.
- With your consent to share your data with any third parties not covered above.
Other than the cases outlined above, we do not share or sell your personal data to third parties without your explicit consent.
Data Retention and Deletion
We retain personal data as long as required to fulfill our business purposes, contractual obligations, and legal requirements. For example:
- We keep order history for the duration of standard limitation periods for claims to have a record in case of complaints or warranty issues.
- We retain your contact information on our email subscriber list until you unsubscribe or request removal.
- Website usage data is aggregated and anonymized so no identifiers remain. Anonymized data is retained indefinitely for analytics purposes.
- Correspondence records with customers are kept while you have an active account and for a period afterwards in case of follow-up inquiries.
When personal data is no longer needed, we securely delete or destroy it. Paper records are shredded while digital data is erased from our systems and backups through technical measures.
Your Data Protection Rights
Under applicable data protection laws, you may have the following rights:
- Right of access to the personal data we hold about you, including information on the purpose, categories, origin, retention period, third party sharing, and other key details.
- Right to rectification to correct any inaccurate or incomplete personal data. You can edit some information directly through your account. Otherwise, you can submit a request to rectify issues.
- Right to erasure meaning the right to request deletion of your personal data, subject to our legal obligations and rights. You can delete your account any time. Otherwise, you can submit an erasure request.
- Right to restrict processing by requesting we stop using your data until resolving an issue such as inaccurate data or an objection raised by you.
- Right to data portability to obtain your data in a structured, commonly used format to transfer to another provider. This applies only to automated data that you provided consent for or that was needed to perform a contract with you.
- Right to object to processing of your data, including for marketing, profiling, or other purposes subject to our legitimate interests.
You can exercise these rights by contacting our Privacy Officer. We will evaluate and respond to all valid requests in a timely manner.
Data Security
We utilize administrative, technical, and physical safeguards to protect your personal information from unauthorized access, misuse, or disclosure. Measures include:
- Encryption of sensitive data like payment information.
- Authentication requiring login credentials to access your account.
- Access controls for allowing only authorized personnel to view sensitive data based on job purpose.
- Secure network configuration, firewalls, intrusion detection, and malware scanners to monitor against system attacks.
- Audits, tests, and risk assessments of security practices by third party security validators.
- Physical security of offices and data centers to control physical access.
- Backup and disaster recovery systems spread across multiple secure locations.
- Secure destruction practices for paper documents and old electronic media.
- Regular security awareness training for our personnel.
While we aim to protect your personal data at all times, no method is ever completely secure. We do not guarantee security but strive to continuously improve protections based on emerging threats and technologies.
International Data Transfers
We are a global company with business processes, management structures, and technical systems that cross borders. As such, we may transmit or provide access to your personal data to affiliated companies, service providers, partners, or government authorities outside of your country of residence. Any such transfers are undertaken in accordance with applicable data protection laws.
When required, we use approved model legal clauses, certificates, codes of conduct, certifications, and other appropriate safeguards to permit data transfers internationally. Contact us if you would like to know more about the specific mechanisms utilized for transfers to certain countries.
Children’s Privacy
Our website and products are meant for a general audience and not intended for use by anyone under age 16. We do not knowingly collect or request personal data from children under 16 without consent from a parent or guardian. If you believe a child has provided data to us, please contact us so we can delete the information. You may also submit a deletion request on the child’s behalf.
Changes to this Policy
We may amend this Privacy Policy from time to time to reflect updates to our information practices, new legal requirements, or changes in website functionality. We will post the updated notice here with a new “last updated” date. Any critical changes impacting your rights will also be communicated through the website or to your registered email address. Please review this policy periodically to stay up to date on our latest practices.
How to Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact our Privacy Officer by email at [email protected] or by writing to:
Beast Lab® Toys
Attn: Privacy Officer
123 Beast Lab Lane
Wildwood, CA 90210
We will promptly address your inquiries and strive to resolve any complaints or concerns. You may also lodge a formal complaint with your local data protection authority.
