Privacy policy

Privacy Policy
Last updated: October 2026

At HowdyToys, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use and safeguard your data when you visit howdytoys.com or make a purchase from our store.

1. Information We Collect

Information you provide:

  • Name, email address, phone number

  • Billing and shipping address

  • Order details and payment confirmation

  • Messages sent through our contact form or email

Information collected automatically:

When you browse our website, we automatically collect:

  • IP address

  • Browser and device information

  • Pages viewed and interactions

  • Cookies and similar tracking technologies

For details on Shopify cookies, see: https://www.shopify.com/legal/cookies

Information from third parties:

We may receive data from:

  • Shopify (store platform)

  • Payment processors

  • Analytics or advertising tools (cookies, pixels)

2. How We Use Your Information

We process personal information only where we have an appropriate legal basis under applicable data protection laws.

Depending on the circumstances, we process personal data for the following purposes:

  • Order processing and fulfilment: To process payments, fulfil orders, arrange deliveries, manage returns and provide customer support, where necessary for the performance of a contract.
  • Legal and regulatory compliance: To maintain accounting and tax records, comply with applicable laws and respond to lawful requests from competent authorities.
  • Fraud prevention and security: To protect our business, customers and website against fraudulent transactions, unauthorized access and misuse, based on our legitimate interests or other applicable legal grounds.
  • Customer communications: To respond to inquiries, resolve complaints and manage disputes, based on contractual necessity or legitimate interests, as appropriate.
  • Website analytics and improvement: To understand website performance and improve our services, using consent where required by applicable law.
  • Marketing communications: To send promotional emails and relevant offers where permitted by applicable law, including where consent is required and has been obtained.
  • Advertising and personalization: To measure advertising performance and provide relevant advertising, subject to applicable consent and privacy requirements.

Where processing is based on legitimate interests, we consider and balance those interests against the rights and freedoms of individuals.

We do not rely on consent where another lawful basis is more appropriate, and we do not use consent to override mandatory legal requirements.

3. How We Share Information

We may share your data with:

  • Service providers (Shopify, payment processors, shipping partners)

  • Analytics and marketing partners

  • Legal authorities if required by law

We do not sell personal information.

4. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, maintaining business records, complying with legal obligations, preventing fraud and establishing, exercising or defending legal claims.

Retention periods vary depending on the type of information and applicable legal requirements.

Transaction, accounting and tax records may be retained for the periods required by applicable Bulgarian and European legislation.

Information relevant to disputes, chargebacks, fraud investigations or legal proceedings may be retained for as long as reasonably necessary to protect our legitimate interests and legal rights, subject to applicable law.

Where personal information is no longer required, we will delete, anonymize or securely dispose of it, unless further retention is legally required or permitted.

5. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

  • Request access to your personal information.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of personal information where legally applicable.
  • Request restriction of certain processing activities.
  • Object to processing based on legitimate interests, including direct marketing.
  • Withdraw consent at any time where processing is based on consent.
  • Request data portability where applicable.
  • Lodge a complaint with a competent data protection supervisory authority.

These rights are subject to applicable legal conditions and exceptions. In particular, certain information may need to be retained to comply with legal obligations, prevent fraud or establish, exercise or defend legal claims.

We may request reasonable information to verify your identity before processing a request, where necessary and permitted by law.

Requests may be submitted to howdy.ltd@gmail.com. We will respond within the timeframes required by applicable law.

For individuals in the European Union, the competent supervisory authority in Bulgaria is the Commission for Personal Data Protection (CPDP).

6. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to support essential website functions, improve user experience, analyze website performance and, where permitted, provide relevant advertising.

We use Shopify’s cookie consent management tools to allow visitors in applicable regions to accept, decline or manage their preferences for non-essential cookies and tracking technologies.

Where required by applicable law, non-essential cookies and tracking technologies are used only after the appropriate consent has been obtained.

Visitors may manage or withdraw their cookie preferences through the privacy controls made available on our website, where applicable.

Certain essential cookies are necessary for the operation, security and functionality of our online store and do not require consent where permitted by law.

We may also recognize applicable browser-based privacy signals, including Global Privacy Control (GPC), where supported and required by applicable law.

For further information about how personal information is processed, please refer to this Privacy Policy.

7. Children’s Privacy

Our website and products are intended for general consumers, including adults purchasing items for children.
We do not knowingly collect personal information from individuals under 16.
If you believe a child has provided us with personal data, please contact us and we will delete it.

8. International Transfers

As we operate an international online store, personal information may be processed by service providers located outside the European Economic Area.

Where personal data is transferred internationally, we take reasonable steps to ensure that appropriate safeguards are in place, as required by applicable data protection laws.

Depending on the destination and circumstances, these safeguards may include adequacy decisions, Standard Contractual Clauses or other legally recognized transfer mechanisms.

Further information about applicable safeguards may be requested by contacting us at howdy.ltd@gmail.com.

9. Contact Us

For questions about this Privacy Policy or your personal data rights, contact us at:
📧  howdy.ltd@gmail.com
📍 zh.k. Strelbishte, bul. Petko U. Todorov, bl. 88, Entrance B, Floor 8, Apt. 21, 1408 Sofia, Bulgaria (EU)