Privacy Policy

Theo's Toy Shop (“we”, “us”) runs this online toy shop. This page explains what information we collect when you visit, create an account, place an order, or send a message, and how we use it. It is written for this store — not a generic template.

Who we are

This site is Theo's Toy Shop. We are based in Gresham, OR 97080. For privacy questions, use the Contact page, email gtatarian@outlook.com, or call 503-803-3862.

Information we collect

• Account. If you create an account: name, email, password (stored as a one-way hash, not the password itself), and optional phone and address.
• Orders. Name, email, phone, shipping or pickup details, order notes, the toys you bought, prices, and whether you paid with PayPal or asked us to arrange payment.
• Contact form. Name, email, optional phone, and your message. We email that to the store so we can reply.
• Cart. Items in your cart are kept in a session on this server until you check out or the session ends.
• Technical. A session cookie so the site remembers your cart and login. We do not sell mailing lists or run advertising networks on this shop.

How we use it

We use this information to run the store: fill orders, answer questions, keep your account working, reduce fraud, and improve the shop. We do not sell your personal information.

Payments

Card, PayPal, Venmo, Apple Pay, and Google Pay (when PayPal offers them) are handled by PayPal. Card numbers do not pass through or get stored on our server. We keep the PayPal transaction reference so we can match the payment to your order.

Analytics

This site uses Google Analytics to see which pages are visited. Google may set its own cookies and receive your IP address and device information. See Google’s privacy policy. You can block analytics cookies in your browser if you prefer.

Cookies

We use a session cookie (needed for the cart, login, and form security). PayPal and Google (if analytics is on) may set their own cookies. Turning off cookies may stop checkout and sign-in from working.

Sharing

We share information only as needed to run the shop: with PayPal to process a payment, with a shipper if we mail an order, or if the law requires it. Hosting for this site stores the shop database on our web host. We do not sell or rent your information to other companies for their marketing.

How long we keep it

Orders and accounts stay on file so we can look up a purchase, handle returns, and keep tax and business records. Password-reset links expire after one hour. You can ask us to update or delete your account; we may need to keep order records.

Children

This shop sells toys, but accounts, checkout, and the contact form are meant for adults (parents or guardians) making a purchase. We do not knowingly collect personal information from children under 13. If you believe a child gave us information, contact us and we will delete it.

Your choices

• Shop without an account (guest checkout / PayPal).
• Edit your name, email, phone, and address under My Account.
• Ask us to delete your account via the Contact page.
• Use browser settings to limit analytics cookies.

Changes

If this policy changes in a meaningful way, we will update this page and the date at the top.