- Data Controller Identification
This Privacy Policy outlines how your personal information is collected, used, processed, and protected when you visit or make a purchase from www.toysacklet.com (the “Site”).
For the purposes of applicable data protection legislation, including the European Union General Data Protection Regulation (EU GDPR) and the Mexican Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares – LFPDPPP), the Data Controller responsible for your personal data is:
Legal Entity Name: NOMBER GUAN BY D&D, S.A. DE C.V.
Company Registration Number: NGB190524BP0
Registered Address: Av. Vallarta 3959, Col. Don Bosco Vallarta, Zapopan, Jalisco, Mexico
Telephone Number: +52 8141754942
Email: storage@toysacklet.com
- Personal Information Collected
When you interact with the Site or purchase toy storage products, we process specific categories of personal data necessary to execute transactions and manage our operations. These categories include:
Customer Identity Data: Full name, billing address, and shipping address.
Contact Information: Email address and contact telephone number.
Transaction Details: Ordered item specifications, transaction history, and order communication logs.
Technical & Usage Data: Internet Protocol (IP) address, browser type, device information, access timestamps, and interaction logs captured via essential cookies necessary for functional site navigation.
- Purpose and Legal Basis for Processing
We process personal data strictly in accordance with lawful bases established under Applicable Law:
Order Fulfilment & Delivery: Processing of Customer Identity Data, Contact Information, and Shipping Address details is conducted on the legal basis of Performance of a Contract to fulfil orders and deliver products.
Payment Execution: Payment details are processed on the legal basis of Performance of a Contract to finalize purchase transactions.
Customer Support Services: Processing of Identity Data, Contact Information, and Transaction History is conducted on the legal basis of Performance of a Contract and Legitimate Interest to resolve customer inquiries and manage orders.
Regulatory & Tax Compliance: Processing of Billing Details and Transaction Records is conducted on the legal basis of Compliance with Legal Obligations under applicable corporate and fiscal legislation.
- Payment Processing
All financial transactions conducted through the Site are handled exclusively by our authorized payment processor, Stripe.
When completing a purchase, payment card information (such as credit or debit card numbers, expiration dates, and security codes) is provided directly to Stripe via secure payment fields. NOMBER GUAN BY D&D, S.A. DE C.V. does not collect, receive, or retain cardholder credentials on internal web servers.
Stripe handles personal data in accordance with international security standards and its standard privacy framework.
- Information Sharing and Authorized Processors
Personal data is shared only with third-party service providers required to support core commercial operations, specifically:
Payment Services: Stripe (payment processing and transaction authentication).
Logistics & Express Freight Partners: Qualified international couriers tasked with physical delivery to destination addresses within European jurisdictions.
Technical Infrastructure Providers: Domain hosting, data storage, and backend administrative utilities.
We do not lease, trade, or transfer customer personal data to third parties for independent commercial marketing purposes. Personal data may be disclosed to statutory law enforcement authorities if required by binding administrative orders or judicial summons.
- International Data Transfers
NOMBER GUAN BY D&D, S.A. DE C.V. operates out of Mexico and services customers residing within European territories. Personal data collected via the Site is transferred across international borders to facilities operating in Mexico, as well as server nodes supporting cloud services worldwide.
Where personal data originates from the European Economic Area (EEA) or the United Kingdom, transfers outside those jurisdictions are conducted relying on legal safeguards recognized under European standards, including standard contractual clauses approved by competent regulatory bodies, to maintain technical and organizational safeguards.
- Data Retention Period
Personal data is kept only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory legal and financial reporting obligations under Mexican and European laws:
Transactional & Order Documentation: Retained for 7 years following completion of the transaction, pursuant to applicable commercial, tax, and accounting standards.
Customer Inquiry Communications: Retained for 24 months following resolution of the communication inquiry to address follow-up queries.
Technical Access Logs: Retained for up to 12 months from the date of creation for operational diagnostics and legal protection.
Once applicable retention limits expire, personal data is permanently deleted or anonymized using standard technical sanitation procedures.
- Data Subject Rights
Depending on your geographic residency, you maintain statutory individual rights regarding your personal information under European data protection frameworks and Mexican ARCO rights (Acceso, Rectificación, Cancelación y Oposición):
Right of Access: The right to request copies of your personal information held by us.
Right to Rectification: The right to request correction of inaccurate or incomplete personal records.
Right to Erasure / Cancellation: The right to request deletion of personal information where operational or statutory retention grounds no longer apply.
Right to Restrict or Object to Processing: The right to request limitations on data usage or object to processing based on legitimate interest grounds.
Right to Data Portability: The right to request transfer of your data to another controller in a structured format.
To exercise any applicable statutory rights, please send a formal written notice to NOMBER GUAN BY D&D, S.A. DE C.V. at the registered company address or contact customer support via telephone at +52 8141754942. Verification of identity may be requested prior to processing formal rights requests.
- Security Measures
NOMBER GUAN BY D&D, S.A. DE C.V. implements reasonable technical, administrative, and physical measures designed to guard personal data against unauthorized access, loss, alteration, or disclosure.
While measures are maintained to protect data processing systems, transmission of information across public internet channels carries inherent operational risks, and no digital storage environment or data transmission method can be declared immune to technical interruption or security events.