To work the way we do, Montiplay has to remember some of your personal information.
You’ve shared this information with us so we can share our toy box with you. Without it, we’d forget where to send your toys, or which ones your little ones liked best. Of course your information is in safe hands.
This policy describes how Montiplay Limited ("we", "us", "Montiplay") will make use of your personal data when you use and interact with our website at https://Montiplay.com ("Site"_). We are the data controller for the purposes of English common data protection laws.
It also describes your data protection rights, including a right to object to some of the processing which we carry out and where we rely on consent, a right to withdraw your consent. We may also provide you with additional information when we collect personal data where we feel it would be helpful to provide relevant and timely information.
What information do we collect?
We collect and process personal data about you when you interact with us and our Site, and when you join our toy subscription service. This includes: your name and contact information; username and password and subscription package; details of your children's name and birthday; your payment and delivery details, including billing and delivery addresses, transaction history and credit card details, where you buy our toy subscription service; your interactions with customer services; and your marketing preferences, including any consents you have given us.
We also automatically collect the following information: technical information, including your device’s IP address, browser type and version, time zone setting, browser plug-in types and versions, operating system, unique device identifiers and advertising identifiers; and information about your visit, including the URL clickstream to, through and from our Site (including date and time); products you viewed or searched for, the content (and any ads) that you view or interact with, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page.
Some of this information is collected using cookies and related technologies, and often provided by third party providers such as Google Analytics. To learn more, please see our Cookies Policy.
To the extent permitted by applicable law, we may receive additional information about you, such as demographic data or fraud detection information, from third party service providers and/or partners, and combine it with information we have about you in order to improve the service and marketing that you receive from Montiplay.
Montiplay may also collect personal information from individuals (with their consent) at conventions, events, trade shows, expositions, seminars or other programs.
The types of personal information collected may include (but are not limited to): your first and last name; your age; your child’s name and date of birth; your website address; your home, billing, or other physical address (including street name, name of a city or town, state/province, postal code); your email address; your telephone number; any other identifier that permits Montiplay to make physical or online contact with you; any information that Montiplay collects from you and maintains in association with your purchase of products or Services, such as your credit card account information; and for job applicants submitting information, your educational background, employment experience, and job interest.
We process this personal data for the following purposes:
Where you give us consent: we will send you direct marketing by email in relation to our relevant products and services; we place cookies and use similar technologies in accordance with our Cookies Policy and the information provided to you when those technologies are used; or on other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.
For purposes which are required by law: in response to requests by government or law enforcement authorities conducting an investigation; or to investigate issues of product liability.
Personal information collected on the Site may be stored and processed in the United Arab Emirates or any other country in which Montiplay or its affiliates, subsidiaries or agents maintain facilities, and by using the Site or Services, you consent to any such transfer of information outside of your country.
Relying on our legitimate interests
We have carried out balancing tests for all the data processing we carry out on the basis of our legitimate interests, which we have described above. You can obtain information on any of our balancing tests by contacting us using the details set out later in this notice.
Withdrawing consent or otherwise objecting to direct marketing
Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your personal data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or by changing your communication preferences in your account or by contacting us using the details set out below.
Who will we share this information with, where and when?
We will share your personal data with: authorized supply, delivery and fulfilment companies to process and complete your subscription; banks and our payment services provider (Checkout) for the purpose of transaction processing; legal advisors, accountants, auditors and other professional advisors; third parties, where we have your permission to do so (e.g. social networks providers). Your personal data will become subject to the privacy policies of those third parties when your personal data is shared with them; government authorities, court, regulatory authority and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of our legitimate interests in compliance with applicable laws. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction; third party service providers, who will process it on our behalf for the purposes identified above. In particular, we use third party technology and platform providers for website hosting, maintenance, call centre operation and email service delivery.
We also share information with third parties including advertising, social media and search engine partners:
We aggregate your personal data with the information of other customers, creating a dataset of information about the usage of our Site, purchase of our products and services, and other general, grouped information about our customers. Although this dataset is aggregated and anonymised, meaning it cannot directly identify you as an individual, it provides a valuable insight into the use of our Site and we will share it with select third parties. These parties include our group companies.
In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business.
Your personal data is currently stored within the AWS cloud.
As with product reviews, your comments and contributions to the Montiplay community may be used by Montiplay in its marketing and/or promotional material as well as that of any of our featured brands, manufacturers or merchants. Your comments and contributions may also be used in the marketing/ promotional material of any of our partner companies with whom we work to serve customers. You have the option of contributing to the Montiplay community anonymously.
We are committed to ensuring that your personal data is secure. In order to prevent unauthorised access or disclosure, we have put in place suitable physical, electronic and managerial procedures to safeguard and secure the information we collect online. We use ‘https’ technology to secure access to all areas of our Site. Access to your data is password-protected, and sensitive data such as payment card information is held securely by our 3rd party payment providers and tokenized to ensure it is protected. We ensure that our systems are regularly monitored for possible vulnerabilities and attacks.
Links to other websites
Our Site may contain links to other websites of interest. However, once you have used these links to leave our Site, you should note that we do not have any control over that other website. Therefore, we cannot be responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy notice. You should exercise caution and look at the privacy statement applicable to the website in question.
What rights do I have?
In addition to rights to withdraw your consent or object to direct marketing (as outlined above, you have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; and to obtain the personal data you provide to us for a contract or with your consent in a structured, machine readable format, and to ask us to share (port) this data to another controller.
In addition, you can object to the processing of your personal data in some circumstances (in particular, where we don’t have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing).
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party (including our rights) or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in both the GDPR and in the Data Protection Act 2018. We will inform you of relevant exemptions we rely upon when responding to any request you make.
To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with using the details set out below. You can also deactivate your account and request that we delete your personal data through the account management portal or by getting in touch with us.
In order to provide our subscription service, you must provide us with your name, address, email address username and password and billing details. If this information is not provided, then we cannot provide the subscription service. All other provision of your information is optional. A failure to provide this information may mean that other functionalities and services are available such as our product recommendations.
How do I get in touch with you?
We hope that we can satisfy queries you may have about the way we process your personal data. If you have any concerns about how we process your personal data, or would like to opt out of direct marketing, you can get in touch at firstname.lastname@example.org.
How long will you retain my information?
Where we process registration data, we do this for as long as you are an active user of our Site and subscription services and for 3 years after this (unless you choose to fully erase your data once you stop using our subscription service).
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.
Where we process personal data in connection with performing a contract or for a competition, we keep the data for 6 years from your last interaction with us.
Our Site uses the following types of cookies:
Strictly Necessary Cookies: These cookies are essential in order to enable you to move around the Web Site and use its features, such as accessing secure areas of the Site or keeping selected toys in your shopping cart. Without these cookies, services like enabling appropriate content based on your type of device cannot be provided.
Performance Cookies: These cookies collect information about how visitors use the Site, for instance which pages visitors go to most often, and if they get error messages from web pages. These cookies don’t collect information that identifies a visitor. The information these cookies collect is aggregated and used to improve how the Site works.
Functionality Cookies: These cookies allow the Site to remember choices you make (such as your language or the region you are in) and provide enhanced, more personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that you can customise. They may also be used to provide services you have asked for such as watching a video or commenting on a blog. These cookies cannot track your browsing activity on other websites.
Social Media Cookies: These cookies are used when you share information using a social media sharing button on the Site. The social network will record that you have done this. This information may be linked to targeting/advertising activities.
Targeting/Advertising Cookies: These cookies are used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaigns. They are usually placed by advertising networks with our permission. They remember that you have visited a website and this information is shared with other organisations such as advertisers.
To opt out of Google Analytics, please visit: https://tools.google.com/dlpage/gaoptout
NOTICE TO CHILDREN UNDER THE AGE OF 18 AND THEIR PARENTS OR LEGAL GUARDIANS
THE MONTIPLAY SITE IS INTENDED FOR ADULTS. WE DO NOT KNOWINGLY OR INTENTIONALLY COLLECT PERSONAL INFORMATION FROM ANYONE UNDER THE AGE OF 18. IF YOU ARE UNDER THE AGE OF 18, PLEASE DO NOT PROVIDE ANY PERSONAL INFORMATION TO MONTIPLAY. IF YOU KNOW OF ANYONE UNDER THE AGE OF 18 WHO HAS PROVIDED US WITH INFORMATION, PLEASE CONTACT US IMMEDIATELY AND WE WILL REMOVE THAT INFORMATION.