At MGA Entertainment (UK) Ltd, we respect your personal data. This Fair Processing Notice explains how we will use your personal data when you are a customer.
Our contact details
Our head office address is:
Regent Business Park
50 Presley Way
The person with responsibility for Data Protection is Kristy Gouldsmith and they can be contacted by emailing Support@LittleTikesStore.com.
What personal data do we collect about you? How will we use that personal data? What is our legal basis for processing your data?
At MGA Entertainment (UK) Ltd, we value each and every one of our customers and we take your data privacy very seriously. The following sections outline what data we process:
In order for you to create an account, we need your name and email address. This data is only used to create an account for you. You consent to create an account with us when you put in your details. Once you have created an account, we are permitted to send you marketing information under the legal basis of legitimate interest. You can opt out of receiving our marketing emails at any time.
2. Purchases and Delivery
When you purchase something through our website, your payment data are sent directly to our payment handler (WorldPay) and your delivery details are sent directly to our delivery partners. We don’t ever handle your payment card details. Worldpay is a data controller for all of the personal data that you input when paying for an item. Worldpay’s Privacy Notice can be found here: https://online.worldpay.com/terms/privacy
We keep a copy of your delivery data to ensure we can find your details in the case of an issue. We also share this with our customer management partner and this is a legitimate interest for us.
For billing, we require your first name, last name, address, phone and email. For an alternative shipping address, we require the first name, last name and address.
We process your personal data for a purchase and delivery because we have a contract with you.
Once you have put an item into your basket or purchased an item, we are permitted to send you marketing information under the legal basis of legitimate interest. You can opt out of receiving our marketing emails at any time.
2. Milestone Cards
In order to receive your pack of cards, we require your first name, last name and email address.
Once you have ordered cards, we are permitted to send you marketing information under the legal basis of legitimate interest. You can opt out of receiving our marketing emails at any time.
3. Cozy Coupe Club
When you join the Cozy Coupe Club, we will require your child’s name and date of birth in order for us to send them a birthday card. This information is in addition to your delivery details and is processed under the legal basis of contract.
As a club member, you will receive information about special offers, competitions and events. Your membership lasts until your child reaches his or her fifth birthday. You can opt out of receiving Cozy Coupe Club emails at any time.
4. Replacement Order Parts
We have an authorized spare parts provider who can assist you with replacement parts. The replacement parts order form requires your first name, last name, email, phone and address. We will share these details with our authorized spare parts provider. Our legal basis to process this data is because we have a contract with you.
5. Social Media
Any photos submitted by you will only be shared with your consent on our website and on social media, including Instagram, Facebook, Twitter and Pinterest. Photos will be shared on all of our digital media both in the UK and around the world.
We will send you marketing information if you have opened an account with us, purchased a product, ordered Milestone Cards or joined the Cozy Coupe Club and our legal basis for doing so is legitimate interest.
You can also choose to receive marketing from us by signing up to receive it with your email address.
If you unsubscribe from any emails, we will keep your email address in a suppression list for five years so that we don’t email you again by accident. This is a legitimate interest for us.
Do we use any automated decision making?
We do not use any automated decision making.
Who do we share your personal data with?
We share your data with:
• Our software providers, (eg our CRM provider)
• Our delivery partners
• Our customer management partners
• Spare parts provider
• Social media platforms
• Email platforms
Do we transfer your personal data outside of the EU or EEA
Our head office is in the United States and customer data is transferred there for administrative purposes. This is a legitimate interest for us as an international business.
We use Standard Contractual Clauses as the data transfer safeguard. Standard Contractual Clauses were drafted by the EU Commission are lawful data transfer safeguard.
How long do we keep your personal data for?
We will hold your data for seven years for HMRC purposes, if you have purchased an item from us.
Your rights as a data subject
You have rights in respect of our processing of your personal data which are:
• To access to your personal data and information about our processing of it. You also have the right to request a copy of your personal data (but we may need to remove information about other people).
• To rectify incorrect personal data that we are processing.
• To request that we erase your personal data if:
o we no longer need it;
o if we are processing your personal data by consent and you withdraw that consent;
o if we no longer have a legitimate ground to process your personal data; or
o we are processing your personal data unlawfully
• To object to our processing if it is by legitimate interest.
• To restrict our processing if it was by legitimate interest.
• To request that your personal data be transferred from us to another company if we were processing your data under a contract or with your consent and the processing is carried out automated means.
If you want to exercise any of these rights, please contact us.