Privacy Policy

Toy Genie Pty Ltd (ABN 84 684 293 089), trading as ToyGenie ("ToyGenie", "we", "us", "our"), respects your privacy and that of your family. This policy explains what personal information we collect, how we use it, and the choices you have — including when that information includes a photo of your child.

What we collect

Account and order information: name, email, delivery and billing address, phone number, and order history.
Payment information: processed directly by our payment providers (e.g. Shopify Payments, PayPal, Afterpay); we do not store your full card details.
Personalisation content: when you order a custom product (such as an AI paint-by-numbers kit or a personalised storybook), you may upload a photo, a child's first name, and an approximate age. This is sensitive, personally identifying information, and in most cases it is a photo of a child.
Technical information: IP address, browser type, and browsing behaviour on our site, collected via cookies and similar technologies (see "Cookies" below).

How we use it

To process and fulfil your order, including producing your personalised product.
To communicate with you about your order, and — where you've opted in — about new products and promotions.
To improve our website, products, and customer service.
To meet our legal obligations, including under the Australian Consumer Law.

How personalised photos are processed

To create a personalised product, the photo and details you upload are processed using automated and AI-assisted tools. Some of this processing may be carried out by third-party AI, image-generation, and print-on-demand service providers, which may be located outside Australia (including, potentially, countries such as the United States). We take reasonable steps to ensure any overseas recipients handle your information consistently with the Australian Privacy Principles before we disclose it to them. We will update this policy to name specific processing partners once they are formally engaged.

We only use the photos and details you upload to produce the order you placed. We do not use your child's photo for advertising, and we do not sell personal information to third parties.

Photos of children — consent

By uploading a photo, name, or other details of a child, you confirm that you are that child's parent or legal guardian (or have the express permission of the parent or legal guardian) to share that information with us for the purpose of creating your order. We do not knowingly collect personal information directly from children without the involvement of a parent or guardian.

How long we keep personalisation photos

We retain uploaded photos and personalisation details only for as long as reasonably needed to produce your order and to support reprints or after-sales issues — currently up to 90 days after your order is completed — after which they are deleted from our active systems unless you ask us to delete them sooner, or we're required to keep them longer by law.

Cookies and tracking

We use cookies and similar technologies to keep your cart working, remember your preferences, and understand how our site is used, including for marketing and analytics purposes. You can control cookies through your browser settings; disabling them may affect how the site functions.

Marketing communications

We'll only send you marketing emails or SMS if you've opted in, in line with the Spam Act 2003 (Cth). Every marketing message includes a working unsubscribe link — you can opt out at any time.

Your rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you can ask us to access, correct, or delete the personal information we hold about you, including uploaded photos. To do so, email support@toygenie.com.au. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (oaic.gov.au). If you're a New Zealand customer, equivalent rights apply under the Privacy Act 2020 (NZ), and you can contact the Office of the Privacy Commissioner (privacy.org.nz).

Security

We use reasonable technical and organisational measures to protect the personal information we hold, including photos you upload, from misuse, loss, and unauthorised access.