BIGBADTOYSTORE, Inc. Privacy Policy

Last Updated September 12, 2025

Summary

Our Commitment to Privacy

At BigBadToyStore, we’re committed to respecting your privacy. We collect and use personal information primarily to deliver a great shopping experience, fulfill your orders and deliver excellent support and customer service. We also use data to improve our website and products, prevent fraud, and protect our platform.

Depending on where you live, you may have rights under laws like the CCPA/CPRA or GDPR, including the right to access, correct, or delete your personal data, or to opt out of sharing.

You can manage your cookie preferences, submit a data request, or learn more about our practices by reading the sections below.

If you have any questions about your data, your rights, or how we use your information, please reach out. We’re here to help because protecting your privacy is part of delivering the kind of experience you expect from us.

Call Customer Service

1-888-980-2287

Email Customer Service

[email protected]

Complete Privacy Policy

We provide this notice explaining our online information practices and the choices you can make about the way your information is collected and used. To make this notice easy to find, we make it available on our homepage and at every point where personally identifiable information may be requested.

Your Data Privacy Rights

We recognize and honor your privacy rights and are committed to ensuring transparency and accountability in how we collect, use, and share your personal information. The privacy rights available to you may vary depending on the laws that apply to your place of residence.

If you reside in a jurisdiction with privacy or data protection laws such as the California Consumer Privacy Act (CCPA/CPRA), the General Data Protection Regulation (GDPR), or other similar laws, you may have some or all of the following rights:

Right to Know and Access – To request information about the personal data we collect, use, disclose, or sell, and to obtain a copy of that data.
Right to Correction (Rectification) – To request that we correct inaccurate or incomplete personal information we maintain about you.
Right to Deletion (Erasure) – To request the deletion of your personal data, subject to certain legal and contractual obligations.
Right to Data Portability – To receive your personal data in a portable, structured, and commonly used format.
Right to Object or Restrict Processing – To object to the processing of your personal data or request restrictions in certain circumstances, including where processing is based on legitimate interest or for direct marketing purposes.
Right to Opt Out of Data Collection and Sharing – To opt out of the sale or sharing of your personal information, including for targeted advertising or analytics.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you may have additional rights under applicable data protection laws, including the GDPR. Where required by law, we process personal data based on one or more of the following legal grounds: your consent, a contract with you, legal obligations, or our legitimate interests.

We will not discriminate against you for exercising any of your data privacy rights.

As privacy regulations continue to evolve, we are committed to updating this policy to remain in compliance. Please check this page periodically for updates. The date of the most recent revision will always appear at the top of this notice.

Children’s Privacy

Protecting the privacy of children is especially important to us. In accordance with the Children’s Online Privacy Protection Act (COPPA) and other applicable laws, we do not knowingly collect, solicit, or maintain personal information from anyone under the age of 13. Our website and services are not directed to individuals under the age of 13, and we do not knowingly market to them.

If we become aware that we have inadvertently collected personal information from a child under 13 without verified parental consent, we will take immediate steps to delete such information from our records. Parents or guardians who believe their child may have provided personal information to us are encouraged to contact us so we can investigate and address the matter promptly.

Our Commitment to Data Security

At BigBadToyStore, we believe that protecting your personal information is a vital part of earning and keeping your trust. Caring about our customers means caring about the privacy and security of their data. We understand that when you interact with our website and services, you are trusting us with your information—and we take that responsibility seriously.

We implement commercially reasonable technical, administrative, and physical safeguards designed to protect your personal data from unauthorized access, disclosure, alteration, and misuse. These measures include, but are not limited to, secure system architecture, role-based access controls, encrypted payment processing, and regular review of our policies and technologies to ensure they align with evolving security standards.

When you make a purchase on our website, your payment information is transmitted securely and directly to our third-party payment processor. We do not process, store, or retain full payment card details on our systems.

Personal data we collect is stored and processed in the United States. Your information may be shared with shipping carriers or other necessary service providers to fulfill your request and comply with applicable laws.

While no system can offer a guarantee of absolute protection, our commitment is to continuously improve our safeguards and maintain best practices that reflect both evolving technology and our customers’ expectations. We also encourage customers to take an active role in protecting their information, for example, by using strong passwords and being cautious on shared devices.

Categories of Personal Data that We Collect

We collect Personal Data in a variety of contexts. The Personal Data that we collect about a specific individual will depend on, for example, our relationship or interaction with that individual. During the past 12 months, we have collected the following categories of Personal Data.

Personal Identifiers — Contact details such as first name, last name, mailing address, email address, phone number, and payment information.
Commercial Purchase Information — Purchase information, such as the products and services obtained and transaction histories you have with us.
Internet or Online Information — Internet or online information such as browser information, IP address, and information regarding interaction with our websites, or advertisements.
Inferences — Inferences based on information about an individual to create a summary about, for example, an individual’s preferences and characteristics and products you may want in the future.
Geolocation data - (e.g., shipping address) IP address.
Audio, electronic, or similar information (e.g., recording of customer service calls).

We do not intentionally collect or process sensitive personal information as defined by applicable privacy laws (such as Social Security numbers, government identification, health or biometric data, or precise geolocation). We also do not process or store payment card details; all payment transactions are handled directly by our PCI DSS–compliant third-party payment processor.

Purposes for Collecting and Using Personal Data

We collect and use personal data for a variety of operational, contractual, legal, and business purposes. The specific purposes for which we use your personal data depend on your relationship with BigBadToyStore and how you interact with our website and services.

The table below outlines the primary purposes for collecting and using personal data, along with examples of how your data may be used in each context:

Purpose	Examples of Use
Provide and Manage Products and Services	Fulfill orders and process transactions; manage your account; provide customer support; operate our website; send service-related communications; and deliver marketing emails where permitted.
Support Operational, Legal, and Compliance Needs	Detect and prevent fraud; verify identity; process payments; fulfill shipping and tax obligations; maintain internal audit and compliance records; and comply with legal requirements.
Improve and Develop Our Services and Business	Analyze website usage and customer behavior; enhance user experience; test new features or services; perform research and analytics; and optimize marketing and website functionality.
Personalization and Advertising	Deliver personalized content and product recommendations; measure the effectiveness of ads and promotions; target advertising based on browsing behavior or preferences; and manage marketing campaigns.

Sources of Personal Data

The categories of sources from which we collect personal data depend on the nature of your interaction with BigBadToyStore. We collect personal data from the following sources:

Directly from You or on Your Behalf – This includes information you provide directly through account creation, purchases, customer service inquiries, form submissions, or communications with us. It may also include information submitted by another individual when sending a gift or placing an order on your behalf through our website or social media platforms.
Publicly Available Sources – We may collect data from publicly accessible sources, including information published or made available by federal, state, or local government agencies, .e.g. USPS. This information may be used for identity verification, shipping validation, fraud prevention or other services.
Third-Party Partners and Service Providers – We receive information from trusted vendors and service providers that assist in fraud detection, payment processing, shipping and logistics, advertising, and analytics. These partners may include, but are not limited to internet service providers, shipping and fulfillment companies, packaging providers, social media platforms, data analytics companies, operating systems, and advertising networks.
Affiliated Business Entities and Transactional Partners – We may obtain personal data from companies or organizations with which we have a commercial relationship, including those that process payments, co-market products, fulfill customer orders, or provide complementary services.
Cookies, Pixels, and Tracking Technologies – We collect information automatically through technologies such as cookies, web beacons, pixels, and similar tools that monitor activity on our website. These technologies help us understand user behavior, personalize content, improve performance, and deliver relevant advertisements. You can manage your cookie preferences through our Cookies Settings or your browser’s privacy controls.

Categories of Third Parties and Disclosure of Personal Data

We disclose personal data to third parties for our business and operational purposes. The categories of third parties with whom we share personal data depend on the nature of your relationship with BigBadToyStore and the specific services we provide to you.

All third parties receiving personal data from us are subject to contractual obligations or applicable data privacy laws requiring them to handle such data securely and lawfully. Where appropriate, we enter into data processing agreements to further ensure compliance and confidentiality.

During the past 12 months, we have disclosed personal data for our business purposes to the following categories of third parties:

Service Providers and Operational Partners - Third parties that assist us in fulfilling orders, processing payments, delivering packages, providing IT infrastructure, hosting, marketing, fraud prevention, or analytics services. This includes but not limited to internet service providers, operating systems and platforms, data analytics providers, payment processors, and fulfillment providers.
Professional and Regulatory Authorities - Entities to whom we disclose information for routine business, tax, or compliance-related reporting, including external accountants or legal counsel.
Marketing and Advertising Networks - Third parties that help us deliver interest-based advertisements, track campaign performance, and personalize customer experiences across digital channels.
Government Authorities and Law Enforcement - Government agencies, courts, and law enforcement bodies to the extent required by law or in response to valid legal process such as subpoenas, court orders, or regulatory inquiries.

In the table below, we summarize for each category of personal data the types of third parties to whom disclosures were made for business purposes. For complete definitions of each category, please refer to the "Categories of Personal Data We Collect" section above.

Summary of Personal Data Disclosures by Category

The following table outlines the categories of personal data we have disclosed for business purposes within the past 12 months and the categories of third parties to whom such data was disclosed:

Personal Data Category	Categories of Third Parties Receiving Data
Personal Identifiers	Service providers and operational partners assisting with order fulfillment, customer support, fraud prevention, marketing services, and platform functionality.
Personal Information	Service providers involved in transactions and customer support - Government agencies, regulators, or tax authorities where required by law - Authorized representatives of California residents where applicable - Professional advisors (e.g., legal, accounting) in connection with routine reporting obligations.
Commercial Purchase Information	Service providers responsible for processing transactions, payments, shipping logistics, product support, and customer relationship management.
Internet or Network Activity	Analytics and marketing vendors, website optimization partners, IT service providers, and advertising networks supporting personalization, targeting, and technical performance.
Geolocation Data	Shipping carriers, delivery partners, and fraud prevention vendors, as required to complete and secure order fulfillment and verify transactional details.
Audio, Electronic, or Visual Data	Customer service partners, including call center service providers that assist in resolving support inquiries and quality assurance.
Inferences	Marketing and personalization partners, advertising networks, analytics vendors (where applicable), used to enhance customer experience and product recommendations.

How You Can Access or Correct Your Information

You may access and update your personal information at any time by logging into your account through the My Account section of the BigBadToyStore website. This includes contact details, shipping addresses, and certain account preferences.

To help protect your privacy and the integrity of your data, we take reasonable measures to verify your identity before granting access to, or making corrections to, your personal information. These measures may include confirming your account credentials, requesting additional information, or requiring written authorization in certain cases.

If you are unable to access or correct your information through your online account, you may contact our Customer Service team for assistance using the contact information provided in the How to Contact Us section of this Privacy Policy.

Your Privacy Choices

You may opt out of the sale or sharing of your personal information for targeted advertising or analytics at any time by adjusting your cookie preferences via the Your Privacy Choices link in our website footer.

We also honor Global Privacy Control (GPC) signals as a valid opt-out request in accordance with applicable laws.

We do not knowingly sell or share personal information of individuals under 16 years of age.

How We Use Cookies, Pixels, and Similar Technologies

When you visit our website, we may automatically collect certain information using cookies, pixels (web beacons), and similar tracking technologies. These tools help us operate the website, analyze usage patterns, improve performance, and provide personalized content and advertising.

What Are Cookies?

Cookies are small text files placed on your device or browser when you visit a website. They store information about your interactions, such as your login status, cart contents, preferences, or browsing behavior.

What Are Pixels?

Pixels (or web beacons) are tiny, transparent images embedded in web pages or emails. They track actions such as whether you’ve opened an email or viewed a specific page. Pixels may rely on cookies to function but can also register certain interactions independently.

Types of Cookies We Use

We use the following categories of cookies on our website to support functionality, enhance user experience, and deliver personalized services:

Strictly Necessary Cookies (Always Active)
These cookies are essential for the website to function and cannot be turned off in our systems. They are typically set in response to actions you take, such as setting your privacy preferences, logging in, or filling out forms. You can set your browser to block or alert you about these cookies, but some parts of the site may not work properly.
Functional Cookies
These cookies enable enhanced functionality and personalization. They may be set by us or by third-party providers whose services we use on our site. If you disable these cookies, some features may not function as intended.
Performance Cookies
These cookies help us count visits and traffic sources to measure and improve site performance. They show us which pages are most and least popular and how visitors move around the site. The data collected is aggregated and anonymous. If you do not allow these cookies, we won’t know when you have visited our site and will be unable to monitor its performance.
Targeting Cookies
These cookies may be set by our advertising partners to build a profile of your interests and show you relevant advertisements on other websites. They do not store directly identifiable personal data, but they uniquely identify your browser and internet device. Disabling these cookies may reduce the relevance of advertising you see.

Managing Cookie Preferences

We use OneTrust to manage cookie preferences and display our cookie banner. This tool enables you to opt in or out of non-essential cookies, such as those used for advertising, personalization, or analytics. You can adjust your cookie preferences at any time by clicking the Your Privacy Choices link in the website footer or through the consent banner presented on your first visit.

In compliance with applicable privacy laws including the California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act, and others we honor Global Privacy Control (GPC) signals as a valid opt-out of the sale or sharing of personal information.

To learn more about cookies and how to manage them, you may also visit All About Cookies.

Please note that disabling certain cookies may impact the availability or functionality of some features. You may also manage cookies through your browser settings. The opt-out cookie only applies to the browser you were using and only for the device you were using at the time you made the selection. If you access BBTS websites from other browsers or devices, you will also need to make this selection on each browser and device.

Data Requests

We respect your rights to access, correct, delete, and control your personal data, as provided under applicable privacy and data protection laws. However, there are circumstances where certain personal data may be exempt from these rights or where we may be legally required to retain information despite a request.

For example:

We will not disclose personal data about another individual if doing so would violate their privacy rights.
We will not delete personal data that we are legally obligated to retain, such as for tax, accounting, fraud prevention, shipping verification, regulatory compliance, or other legitimate business purposes.
We may also decline to fulfill a request if we are unable to verify your identity or confirm your authority to make the request.

We evaluate all requests carefully and in accordance with applicable laws to ensure that your rights and the rights of others are protected.

How to Make Requests

You may make a data request by:

Contacting us through email at [email protected]
Call Customer Service at 1-888-980-2287

Email removal. BBTS marketing emails include an unsubscribe link in the footer, which you can use at any time to stop receiving all marketing emails. If you have questions or need assistance with an unsubscribe request, you may also contact us using the methods listed above.

If you have not provided us with your email address (for example, if you only browse our website without creating an account or subscribing), your choices through our cookie consent center or GPC will apply to that browser or device.

To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your request.

Authorized Agents: If you designate an authorized agent to make a request, we may require you to provide the authorized agent written permission to do so, and for access and deletion requests, we may require you to verify your own identity directly with us.

Please note that consumer requests submitted through an authorized agent under the CCPA/CPRA do not require legal process, but we may request written authorization and verification of the consumer’s identity before processing certain requests such as deletion.

Additional Notes / Reminders

Cookies and pixels are device-specific. If you use multiple browsers or devices, you will need to set your preferences on each one.
Account/email-based requests require identification. To apply your request to email-based advertising or account records, you must provide the email address you would like us to process.
Processing times. We aim to process all requests promptly. In most cases, we will respond within 45 days of receiving your request. If additional time is needed, we may extend the response period once, and we will notify you if an extension is required. For marketing email opt-outs, please allow a short period of time for your preferences to take full effect across our systems.

Appeals of Denied Requests

If we are unable to honor your request, you have the right to appeal our decision. You may submit an appeal within 45 days of receiving our response by emailing us at [email protected] with the subject line “Privacy Appeal.” We will review your appeal and respond within 45 days, as required by applicable law. If we deny your appeal, we will provide a written explanation of the reasons and instructions on how you may contact your state attorney general if you remain unsatisfied.

Legal Service of Process Requests for Customer Information

Requests submitted by third parties not acting under consumer authorization must be accompanied by a valid subpoena, court order, or warrant, as required by law.

If you are a law enforcement officer, government entity, or legal representative without consumer authorization seeking customer information, please note:

Requests must be accompanied by a valid subpoena, court order, or warrant.
Out-of-state legal processes must be properly domesticated under Wisconsin law.
We do not accept verbal requests or informal inquiries for customer data.

All legal processes should be served to BBTS’s registered agent at:

BigBadToyStore, Inc.
321 SMC Dr.
Somerset, WI 54025

Upon receipt, BBTS will review the request and respond as required by law.

For questions regarding service of process only, please contact us at [email protected].

Privacy Practices of Third-Party Websites

Our website may contain links to third-party websites, services, or applications that are not owned or operated by BigBadToyStore. This Privacy Policy applies solely to our website and the personal data we collect through it.

We are not responsible for the privacy practices, content, or security of any third-party sites. If you choose to navigate to a third-party website via a link on our site, we encourage you to review the privacy policy and terms of use applicable to that site before providing any personal information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of the policy. We encourage you to review this policy periodically to stay informed about how we are protecting your information.

How to Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, you are welcome to contact us using the methods below:

By Phone:
Customer Service: 1-888-980-2287

By Email:
[email protected]