Last updated: 11 November 2026
This policy explains how Tolo Macau Limited (“Tolo”, “we”, “us”) handles personal data on tolo-toys.com (the “Website”).
1. Who we are
The controller of your personal data is Tolo Macau Limited, Travessa do Coronel Mesquita, No. 3, Edif. Kam Kun Kok, 5 Andar A, Macau (company registration no. 72145 (SO)). You can reach us at mailbox@tolo-toys.com.
2. What we collect, why, and on what basis
Enquiries (contact form and email).
If you write to us, we receive the details you give us, such as your name, email address, company, country, the topic and your message. We use them to answer you and to pass your enquiry directly to the Tolo distributor or retailer in your country. Legal basis: taking steps at your request and our legitimate interest in answering enquiries (for EU/UK visitors, GDPR Article 6(1)(b) and (f)).
Website analytics.
With your consent we use Google Analytics 4 to understand how the Website is used (pages viewed, country, device, how visitors arrive). We do not use it for advertising. Analytics is switched on only after you accept analytics cookies in the cookie banner. Legal basis: your consent (Article 6(1)(a)). You can withdraw consent at any time (see the Cookie Policy).
Technical data.
Our hosting provider and website software process technical data such as IP address, browser type and date and time of access in server logs, to keep the Website secure and working. Legal basis: our legitimate interest in security and operation.
We do not run a newsletter or a customer database (CRM), we do not sell online, and we do not use your data for advertising or profiling.
3. Who receives your data
- Tolo distributors and retailers, only when your enquiry concerns their country or products.
- Service providers that work for us: website hosting (Rocket.net, servers in Frankfurt, Germany), email (Zoho Mail), and Google (Analytics, only with your consent).
- Authorities, if the law requires it.
We do not sell personal data.
4. Transfers outside your country
Tolo Macau Limited is based in Macao SAR and our distributors are located worldwide. When your data is sent to a country with different data protection rules, we do so only where needed for your enquiry or with appropriate safeguards, such as the standard contractual clauses used by our service providers.
5. How long we keep your data
We pass enquiries on directly and do not keep them for long: we delete them after the enquiry has been dealt with, and no later than 6 months after we receive them, unless the law requires longer. Analytics data is kept for the period set in our analytics account (currently 14 months).
6. Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. You can also complain to your local data protection authority. To use your rights, email mailbox@tolo-toys.com. We may ask you to confirm your identity.
7. California residents
We collect the categories of personal information described in section 2, for the purposes described there. We do not sell personal information, and we do not share it for cross-context behavioural advertising. California residents can ask us to tell them what personal information we hold, to correct it or to delete it, and will not be treated differently for doing so. Send your request to mailbox@tolo-toys.com.
8. Children
The Website is meant for parents, educators and trade customers. It is not directed at children, and we do not knowingly collect data from children.
9. Security
We use reasonable technical and organisational measures to protect your data. No online transmission is completely secure.
10. Changes
We may update this policy. The date at the top shows when it last changed.
11. Contact
Tolo Macau Limited, Travessa do Coronel Mesquita, No. 3, Edif. Kam Kun Kok, 5 Andar A, Macau (company registration no. 72145 (SO)). Email: mailbox@tolo-toys.com
