Privacy Policy

Last updated: March 15, 2026

1. Who We Are

Atlantic ToyWorks ("we," "us," or "our") operates the website atlantictoyworks.com. We are a 3D printed toy company based in South Florida, United States. For any privacy-related questions, contact us at [email protected].

2. Information We Collect

We collect the following categories of personal information:

  • Order information: When you make a purchase through PayPal, we receive your name, email address, shipping address, and payment confirmation. We do not store your credit card or bank account details -- PayPal handles all payment processing.
  • Contact form submissions: When you use our contact form, we collect your name, email address, and the content of your message.
  • Browsing data: We may collect standard web server logs including your IP address, browser type, pages visited, and timestamps. We do not use third-party analytics or tracking cookies.
  • Cart data: Your shopping cart contents are stored locally in your browser (localStorage) and are not transmitted to us until you complete a purchase.

3. How We Use Your Information

We use your personal information for the following purposes:

  • To fulfill and ship your orders
  • To communicate with you about your orders or inquiries
  • To respond to contact form submissions
  • To comply with legal obligations

We do not use your information for marketing purposes unless you explicitly opt in. We do not sell, rent, or trade your personal information to third parties.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

  • Performance of a contract: Processing your order information is necessary to fulfill your purchase.
  • Legitimate interests: We process browsing data to maintain the security and functionality of our website.
  • Consent: When you submit a contact form, you consent to us using your information to respond to your inquiry.
  • Legal obligation: We may process data as required by applicable law, such as tax and accounting requirements.

5. Third-Party Services

We use the following third-party services that may process your data:

6. Data Retention

We retain order information for as long as necessary to fulfill your order and comply with legal obligations (typically 7 years for tax records). Contact form submissions are retained for up to 2 years. Server logs are retained for up to 90 days.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate personal data.
  • Erasure: Request deletion of your personal data, subject to legal retention requirements.
  • Restriction: Request that we limit processing of your personal data.
  • Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. International Data Transfers

Our servers are located in Germany (Hetzner). If you are located outside the EEA, your data will be transferred to and processed in the EEA. If you are located in the EEA, your data is processed within the EEA. We rely on the hosting provider's data processing agreements and standard contractual clauses where applicable.

9. Cookies

We do not use advertising cookies or third-party tracking cookies. Our website uses only essential browser storage (localStorage) to maintain your shopping cart. No cookie consent banner is required because we do not set any cookies for tracking or analytics purposes.

10. Children's Privacy

Our website sells toys intended for children, but purchases are made by parents or guardians. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA). If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Data Security

We protect your data using HTTPS encryption for all web traffic, secure server infrastructure, and access controls. Payment processing is handled entirely by PayPal -- we never see or store your payment card details.

12. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If we make significant changes, we will make reasonable efforts to notify you.

13. Contact Us

If you have questions about this privacy policy or your personal data, contact us at:

Atlantic ToyWorks
Email: [email protected]

If you are in the EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.