Privacy Policy Last updated: 04 Nov 2025 Jurisdiction: UK (UK GDPR)

Privacy Policy

This Privacy Policy explains how Oh Yes Toys (a trading name of GREENERY CONNEXION LTD, Company No. 15605125) collects, uses, shares and protects your personal data when you visit our website or shop with us. If you have questions, contact love@oh-yes-toys.co.uk.

Data Controller

GREENERY CONNEXION LTD, 20 Wenlock Road, London, England, N1 7GU.

Adults Only (18+)

Our store is for adults 18+. Age/ID verification may be required at checkout or before dispatch.

Cookie Choices

Manage preferences anytime: Cookie Settings (Essential / Analytics / Marketing).

1) Who we are & contact

Trading nameOh Yes Toys
Legal entity & controllerGREENERY CONNEXION LTD (Company No. 15605125)
Registered address20 Wenlock Road, London, England, N1 7GU
Supportlove@oh-yes-toys.co.uk • +44 7463 591146 (Mon–Fri, 9:00–18:00 UK)
B2B / Affiliatesplay@oh-yes-toys.co.uk

2) What data we collect

  • Identity & contact: name, email, phone, billing/shipping addresses.
  • Order & payment: products, totals, currency, masked card details, status (payments are processed by our PCI-compliant provider; we don’t store full card numbers).
  • Account data: login, preferences, order history.
  • Support content: messages, attachments, feedback, reviews.
  • Technical: IP, device/browser type, OS, pages viewed, interaction timestamps.
  • Marketing preferences: newsletter opt-in/out, cookie consents.
  • Age/ID verification (18+): checks and records to confirm eligibility where required by law or policy.

3) Why we use your data (lawful bases)

PurposeExamplesLawful basis
Purchase & delivery Process orders, take payment (Visa/Mastercard with 3-D Secure), ship, provide tracking, handle returns/warranty. Contract (UK GDPR Art. 6(1)(b))
Account & support Create/manage account, respond to messages, resolve issues. Contract / Legitimate interests
Age/ID verification Confirm you are 18+, prevent misuse and unlawful sales. Legal obligation / Legitimate interests
Analytics & site performance Understand usage to improve our store (aggregated stats). Consent (for non-essential cookies)
Marketing (optional) Newsletters, personalised offers (where permitted). Consent / Legitimate interests (soft opt-in)
Fraud prevention & security Detect abuse, protect accounts, audit access. Legitimate interests / Legal obligation

4) Cookies & tracking

We use cookies and similar technologies. With CookieAdmin you can manage:
Essential (always on) Analytics (opt-in) Marketing (opt-in)
Consent is stored for 365 days and can be changed anytime via Cookie Settings.
CategoryWhat it doesExamples / duration
Essential Security, basic store functions (cart, checkout), consent log. Session & short-lived cookies necessary for the site.
Analytics (optional) Aggregated stats to improve UX. May be enabled in the future; disabled by default.
Marketing (optional) Personalised content/ads, retargeting. May be enabled in the future; disabled by default.

Do Not Track: we honour your explicit cookie choices. Browser DNT signals are treated as an additional preference where supported.

Read full Cookie Policy

5) Sharing & processors

We do not sell personal data. We share data with trusted service providers (processors) only as needed:

  • Hosting & infrastructure (website, backups, CDN).
  • Payments (PCI-DSS compliant gateway; card data is tokenised).
  • Fulfilment & couriers (Royal Mail/DPD/DHL/Evri or local partners for delivery).
  • Support & communications (email delivery, helpdesk).
  • Analytics/anti-fraud (where enabled and consented).

We require processors to protect data, process only on our instructions, and comply with UK GDPR.

6) International transfers

If data is transferred outside the UK, we use appropriate safeguards (adequacy decisions or UK standard contractual clauses).

7) Security

  • Encryption in transit (HTTPS) and industry-standard measures to protect accounts and transactions.
  • Access controls and least-privilege principles for staff and processors.
  • 3-D Secure for card payments where supported by your issuer.

8) Data retention

Record typeTypical retention
Orders & invoices (tax)Up to 6 years (HMRC requirements)
Support ticketsUp to 24 months after last interaction
Marketing subscriptionsUntil you unsubscribe or consent is withdrawn
Age/ID verification logsUp to 3 years where required for compliance/fraud prevention
Cookie consent365 days (renewed on change)
AccountsWhile active and as needed to provide services or comply with law

9) Your rights

  • Access, rectification, erasure, restriction, objection, portability.
  • Withdraw consent at any time (e.g., cookies, marketing).
  • Opt-out of marketing in emails or by contacting us.
  • Complain to the UK Information Commissioner’s Office (ICO).
To exercise rights, email love@oh-yes-toys.co.uk from the address linked to your account and include proof of identity if requested. We’ll respond within one month.

10) 18+ & age verification

Our store is for adults 18+ only. We operate an on-site age gate and may request document-based verification at checkout or prior to dispatch. Failure to pass verification may result in order cancellation and refund (minus any irrecoverable fees).

11) Changes to this policy

We may update this Privacy Policy from time to time. The latest version is always posted on this page.

12) How to contact us / complaints

Controller: GREENERY CONNEXION LTD (Oh Yes Toys)
Address: 20 Wenlock Road, London, England, N1 7GU
Email: love@oh-yes-toys.co.uk • Tel: +44 7463 591146

UK ICO (complaints): Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF — see ico.org.uk/make-a-complaint/.

Select your currency