Privacy policy

Last updated: October 31, 2026

Welcome to OriginToy™. We value your privacy and are committed to handling your personal information with care, integrity, and transparency.

OriginToy™ is operated by Rustic Dough Hub LLC, registered in Pennsylvania, United States ("OriginToy", "we", "us", or "our"). We operate this online store along with its related products, features, and shopping services (the "Services"). Our storefront is powered by Shopify.

This Privacy Policy explains how we collect, process, share, and protect your personal data when you visit our storefront, complete an order, subscribe to updates, leave reviews, or communicate with our customer support.

For the purposes of applicable data protection legislation (including the UK GDPR and EU GDPR), Rustic Dough Hub LLC acts as the primary data controller for the personal information processed across our store.

1. Personal Information We Collect

Depending on how you interact with our Services, we may collect the following categories of information:

  • Contact Details: Your name, email address, contact phone number, billing address, and physical shipping address.
  • Order & Transaction Information: Products viewed or purchased, items saved in your cart, transaction history, fulfillment milestones, parcel tracking numbers, and returns or refund records. All payment card transactions are encrypted and processed through certified third-party payment gateways; we never receive, view, or store full payment card numbers on our systems.
  • Customer Communications: Inquiries, after-sales support tickets, product reviews, ratings, and any images or messages you submit via email, WhatsApp, or contact forms.
  • Device & Usage Information: IP address, browser type, device identifiers, general location, and interactions with store pages recorded automatically via standard cookies, pixels, and server logs.
  • Marketing Preferences: Email newsletter subscription choices, cookie consent logs, and interactions with promotional notices.

2. How We Use Your Information

We process personal data strictly for legitimate operational, contractual, and legal reasons:

  • Order Fulfillment: Processing secure checkout, verifying payments, issuing receipts, dispatching parcels with tracked international carriers, and providing delivery updates.
  • Customer Support: Assisting with product usage, answering inquiries, handling our 30-day trial process, and managing replacements or refunds.
  • Store Optimization & Reviews: Displaying authentic verified buyer feedback and evaluating site usability.
  • Advertising & Analytics: Evaluating campaign performance, understanding user engagement, and providing relevant promotions where permitted by law.
  • Fraud Prevention & Security: Screening for payment risks, preventing chargebacks, securing user sessions, and complying with statutory accounting and tax duties.

Where required under applicable privacy laws (such as UK and EU GDPR), our legal bases include contractual necessity, statutory legal compliance, legitimate business interests, and your explicit consent.

3. Cookies, Advertising & Communications

Our website utilizes cookies and similar technologies to support necessary storefront operations (e.g., maintaining your shopping basket and selected currency), preserve user settings, evaluate traffic patterns, and measure marketing reach.

Where authorized, we and third-party advertising networks (such as Meta and Google) may deploy conversion pixels to analyze ad effectiveness and present personalized recommendations. Where required by regional regulations, we request your prior consent before setting non-essential analytics or advertising cookies.

You may manage your cookie preferences at any time through our on-site cookie banner or via your browser settings. We also honor recognized opt-out signals, such as Global Privacy Control (GPC), where transmitted by your browser.

If you subscribe to our newsletter, you may unsubscribe at any time via the one-click link at the bottom of every marketing email or by emailing us. Unsubscribing from promotional updates will not affect critical transactional emails, such as purchase receipts or delivery tracking links.

4. Sharing Information with Third Parties

We do not sell personal data for monetary compensation. We share data solely with trusted service partners necessary to fulfill our business operations:

  • Shopify: Hosting the storefront, database management, and powering secure checkout infrastructure.
  • Payment Gateways: Processing payment authorizations and performing fraud prevention screening.
  • Logistics & Courier Partners: Providing order shipping details to international fulfillment hubs and couriers for tracked delivery.
  • Marketing, Analytics & Review Providers: Measuring website reach and displaying genuine customer reviews.
  • Statutory Authorities: Where disclosure is strictly required by enforceable subpoena, court warrant, or applicable law.

To learn more about how Shopify processes personal information, please visit the Shopify Privacy Portal.

5. Children's Online Privacy

OriginToy™ designs educational optical toys for children aged 6 and older to enjoy outdoors under parental guidance. However, our website, commercial checkout, and marketing communications are directed exclusively to adults, parents, and legal guardians.

We do not knowingly collect personal details directly from children under 16 years of age. If a parent or guardian discovers that a minor has submitted personal data through our storefront without consent, please notify us immediately at hello@origintoy.com, and we will promptly delete that information from our records.

6. International Data Transfers

Because OriginToy™ serves families internationally across the United Kingdom, Australia, Europe, and North America, personal data may be stored or transferred outside your country of residence, including to the United States.

When transferring personal information across international borders, we ensure appropriate legal safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, relevant UK statutory transfer tools, and comparable international data transfer mechanisms.

7. Data Security & Retention

We implement standard SSL/TLS encryption, restricted access controls, and technical safeguards alongside Shopify to help protect your data against unauthorized access, loss, or alteration. However, no internet-based transmission is completely impervious to risk.

We retain personal information only for as long as necessary to fulfill orders, support commercial guarantees, satisfy statutory accounting and tax retention periods, and resolve disputes. Once no longer required, data is safely deleted or anonymized.

8. Your Statutory Privacy Rights

Depending on your location, you may hold statutory privacy rights, including:

  • Access & Portability: Request confirmation and an export copy of the personal details we hold about you.
  • Correction: Request updates to inaccurate, incomplete, or outdated information.
  • Deletion: Request erasure of your personal details where retention is no longer legally required.
  • Restriction & Objection: Object to specific data processing activities or request processing limitations.
  • Consent Withdrawal: Revoke consent previously granted for optional marketing or tracking.

Customers in the United Kingdom hold rights under the UK GDPR and Data Protection Act 2018. Customers in Australia are protected under the Privacy Act 1988 (Australian Privacy Principles). Residents in the EU and other regions hold equivalent protections under their respective laws.

To exercise your rights, please contact us at hello@origintoy.com. We will verify your request and respond within one business day or as required by applicable law.

If you have an unresolved concern, you have the right to lodge a complaint with your regional data protection authority, such as the UK Information Commissioner's Office (ICO) or the Office of the Australian Information Commissioner (OAIC).

9. Policy Updates

We may periodically revise this Privacy Policy to reflect evolving services, software updates, or legal changes. Revisions will be published on this page with an updated "Last updated" date.

10. Contact Us

For questions regarding our privacy commitments or to submit a data request, please reach out to our team:

Brand: OriginToy™
Legal Entity: Rustic Dough Hub LLC
Registered Address: 939 Western Ave, Pittsburgh, PA 15233, United States
Email: hello@origintoy.com
Phone: +1 (502) 864-3806
WhatsApp: Message Us on WhatsApp
Customer Service Hours: Monday – Friday, 9:00 AM – 6:00 PM (UTC)
Response Time: We aim to respond within one business day.

Thank you for placing your trust in OriginToy™ as we accompany your little explorer on outdoor discoveries!