Secure and Transparent Shopping

Totoland Toys Privacy Policy

This Privacy Policy explains how Totoland Toys collects, uses, stores and shares personal information when you browse our website, place an order, contact us on WhatsApp or visit our Nairobi store.

Our Privacy Commitment

How Totoland Approaches Customer Privacy

Totoland Toys values customer trust and aims to collect only information reasonably needed to operate the store, fulfil orders, provide support and meet applicable obligations.

Transparency

We explain the main categories of information we collect and why we use them.

Responsible Handling

We use reasonable organisational and technical safeguards appropriate to our business.

Customer Choice

Customers may contact us about access, correction and marketing preferences where applicable.

Features described as future services do not become active until they are implemented and disclosed appropriately.

Information We Collect

Types of Personal Information We May Handle

The information collected depends on how you interact with Totoland Toys.

Identity and Contact Information

Name, phone number, email address, billing address and delivery address.

Order and Account Information

Products ordered, order history, saved addresses and account details.

Website and Device Information

Browser type, device type, IP address, pages viewed, cookies and interactions.

Customer Communications

WhatsApp messages, emails, contact-form messages and voluntarily shared photos or videos.

Please do not send sensitive information that Totoland has not requested.

How Information Is Used

Why Totoland Uses Customer Information

We use personal information for legitimate operational, customer-service, security, improvement, marketing and legal purposes.

Process Orders

Confirm products, payments, delivery or collection arrangements.

Customer Support

Respond to questions, order updates and product concerns.

Delivery

Share necessary contact and destination details with riders or couriers.

Website Improvement

Understand performance, navigation and customer interactions.

Fraud Prevention

Protect customers, accounts and business systems.

Marketing With Permission

Send offers or product news where consent or another lawful basis applies.

Payments

Payment Information and Transaction Processing

Totoland may support M-Pesa and other approved payment options. Payment providers process payment information under their own systems and terms.

M-Pesa

Payment confirmations may include transaction references and status information.

Bank Transfer

Where offered, bank-transfer details are handled through approved business channels.

Cards and Future Gateways

Card details should be entered only through the approved payment gateway.

Totoland does not intentionally store complete card numbers, PINs or full payment credentials.

Cookies

Cookies and Similar Technologies

Cookies help the website function, remember preferences, maintain the cart and understand site performance.

Essential Cookies

Required for core website and WooCommerce functionality.

Commerce Cookies

Used for cart, checkout and session continuity.

Analytics Cookies

Used where configured to understand website usage.

Preference Cookies

May remember selected settings and choices.

Where required, a cookie-consent tool should control non-essential cookies.

Analytics and Google Services

Website Analytics, Search and Advertising Measurement

Totoland may use configured Google services to understand performance, search visibility, product listings and advertising effectiveness.

Google Analytics

May measure visits, navigation and website engagement.

Search Console

Helps monitor search visibility and technical indexing.

Merchant Center

Supports product listings and shopping visibility.

Google Ads

May measure campaign and conversion performance where configured.

WhatsApp Communication

Customer Messages Through WhatsApp

Customers may choose to contact Totoland using WhatsApp for product enquiries, orders, delivery updates and support.

Enquiries and Orders

Messages may include customer contact, product and delivery information.

Photos and Videos

Customers may voluntarily share images or video for support or product assessment.

Order Updates

WhatsApp may be used for confirmations and delivery communication.

WhatsApp is a third-party service and its own privacy terms also apply.

Marketing Preferences

Promotions, Newsletters and Customer Choice

Totoland may send promotional messages where permission or another appropriate legal basis applies.

Email Newsletters

Product news, offers and seasonal campaigns.

WhatsApp Promotions

Broadcasts or offers where the customer has agreed to receive them.

SMS

Future promotional SMS where consent and local requirements are satisfied.

Unsubscribe

Customers may request removal from optional marketing communications.

AI and Personalisation

Future Personalised Shopping Features

Future Totoland features may use browsing, search or preference information to improve recommendations and shopping assistance.

AI Toy Finder

May suggest products based on age, interests or stated preferences.

Gift Recommendations

May assist customers in finding suitable gifts.

Smart Search

May improve search relevance and product discovery.

Product Suggestions

May show related or relevant products.

These features are informational and become active only when implemented and disclosed.

Data Sharing

When Information May Be Shared

Information is shared only where reasonably necessary to operate the business, provide requested services or comply with lawful obligations.

Couriers and Riders

Contact and destination details needed for delivery.

Payment Providers

Transaction data needed to process or confirm payment.

Hosting and Technology Providers

Services needed to host, secure and operate the website.

Legal Authorities

Information disclosed where legally required or permitted.

Totoland does not sell customer information.

Customer Rights

Requests About Personal Information

Subject to applicable law and valid exceptions, customers may contact Totoland about their personal information.

Access

Ask what personal information Totoland holds about you.

Correction

Request correction of inaccurate or incomplete information.

Deletion

Request deletion where appropriate and legally permitted.

Marketing Preferences

Change or withdraw optional marketing preferences.

Some records may need to be retained for accounting, legal, fraud-prevention or dispute-handling purposes.

Data Security

How We Work to Protect Information

Totoland uses reasonable safeguards appropriate to the nature of the business and systems.

SSL Encryption

The website uses HTTPS to protect data in transit.

Password Protection

Accounts and administrative systems should use strong access controls.

Controlled Access

Access should be limited to staff or service providers who need it.

Software Updates

WordPress, themes and plugins should be maintained and updated.

No online system can be guaranteed completely secure.

Business Records

Records Kept for Business and Legal Purposes

Totoland may retain transaction and communication records where reasonably necessary.

Accounting

Order and payment records needed for financial administration.

Tax

Records required for tax and statutory obligations.

Fraud Prevention

Information needed to investigate suspicious transactions.

Customer Support

Records needed to resolve enquiries or disputes.

Data Retention

How Long Information May Be Kept

Personal information is retained only for as long as reasonably necessary for the purpose collected, legitimate business needs and applicable obligations.

Orders

Retained as needed for fulfilment, accounting and support.

Support Messages

Retained while needed to resolve an enquiry or dispute.

Accounts

Retained while active and as required for related records.

Legal Requirements

Retained where required by law or legitimate compliance needs.

Children's Privacy

Privacy and Children's Products

Totoland sells products intended for children, but purchases and account creation should be completed by parents, guardians or other responsible adults.

Adult Purchases

Adults should place orders and manage payment or delivery information.

No Knowing Collection

Children should not knowingly submit personal information directly.

Parent or Guardian Contact

A parent or guardian should contact Totoland if a child has submitted information.

Third-Party Services

External Platforms and Service Providers

Third-party platforms may process information under their own privacy policies and terms.

Google Services

Maps, Analytics, Search Console, Merchant Center and Ads where configured.

WhatsApp

Messaging and customer communication.

Social Media

Facebook, Instagram, TikTok, Pinterest, LinkedIn and other social platforms.

Couriers and Payments

Delivery and payment providers needed to fulfil transactions.

Privacy Contact

Contact Totoland About Your Information

Contact us to ask a privacy question or submit a request relating to your personal information.

Monday–Saturday: 8:00 AM–7:00 PM · Sunday: Closed

Privacy Policy Status

Policy VersionEnterprise Privacy v1.0.0
Business Profilev1.2
Last UpdatedJuly 2026
Version History

Privacy Policy Revisions

  1. Version 1.0.0 Enterprise Privacy Policy introduced.
Frequently Asked Questions

Privacy Questions and Answers

Secure Checkout Protected checkout experience.
SSL Protected Your information is kept safe.
M-Pesa Ready Kenyan payment options prepared.
Fast Delivery Delivery across Kenya.
Quality Toys Trusted toys for every child.
Returns Guidance Clear eligibility and support.
Customer Support

Questions About Your Privacy?

Contact Totoland Toys for assistance with a privacy question or request.