Last Updated: July 19, 2026

This Privacy Policy explains how VIVID CREATIVE LIMITED, operating the AmazingBlock store at https://amazingblocktoys.com, collects, uses, shares, retains, and protects personal information when a person visits the store, creates an account, views products, places an order, subscribes to marketing, or contacts us.

1. Controller

The controller responsible for personal information is VIVID CREATIVE LIMITED, Room 1533, 11th Floor, Meikang Industrial Building, 160 Wai Yip Street, Kwun Tong, Kowloon, Hong Kong.

Privacy and data-rights requests: support@amazingblocktoys.com

2. Personal Information We Process

2.1 Information You Provide

• Name, email address, telephone number, billing address, and shipping address.

• Account credentials, order details, payment confirmation, transaction identifiers, and purchase history.

• Customer-service messages and information supplied for returns, refunds, missing pieces, damaged parts, defects, delivery investigations, or replacement requests.

• Reviews, photographs, videos, comments, preferences, or other content voluntarily submitted.

• Marketing preferences and consent records.

We do not store full payment card details. Payment information is processed by the payment provider selected at checkout.

2.2 Information Collected Automatically

• IP address, browser, device, operating system, language, approximate location, and network information.

• Pages and products viewed, search activity, referral source, clicks, cart activity, checkout events, and purchase events.

• Cookie identifiers, consent choices, advertising identifiers, fraud signals, and security logs.

2.3 Information From Service Providers

We may receive information from Shopify, payment providers, carriers, fulfillment providers, fraud-prevention services, customer-support tools, analytics providers, advertising platforms, or other services used to operate the store.

3. Purposes and Legal Bases

Where the GDPR or similar law applies, we process personal information on the legal bases described below. The precise basis depends on the context and the information involved.

3.1 Contract and Order Fulfillment

We use information to accept and process orders, confirm payment, deliver products, provide tracking, manage accounts, handle returns and refunds, investigate delivery problems, and provide missing-part or product support. The legal basis is performance of a contract or steps requested before entering a contract.

3.2 Customer Communication

We respond to inquiries, provide order and security notices, and handle support cases. The legal basis is contract performance and our legitimate interest in providing customer service.

3.3 Legal Compliance

We process records as needed for tax, accounting, sanctions, consumer-protection, product-safety, fraud, dispute, and other legal obligations.

3.4 Security and Fraud Prevention

We use information to authenticate users, prevent fraud and chargeback abuse, protect accounts, secure checkout, investigate incidents, and enforce store terms. The legal basis is legal obligation and legitimate interest.

3.5 Store Improvement and Analytics

We analyze store performance, navigation, products, and customer experience. Where required, non-essential analytics are used only with consent. Otherwise, processing may rely on legitimate interest where permitted.

3.6 Marketing

Email, SMS, targeted advertising, and similar marketing are used only with consent or another lawful basis available in the relevant jurisdiction. Consent is not a condition of purchase. Marketing recipients can unsubscribe using the message link, replying STOP where applicable, changing preferences, or contacting us.

4. Shopify

Our store is hosted and operated through Shopify. Shopify processes personal information to provide storefront, checkout, payment, security, order-management, analytics, and related platform services.

More information is available in Shopify's privacy materials at https://www.shopify.com/legal/privacy and https://privacy.shopify.com.

5. Payments

Payments are processed by the payment methods actually enabled at checkout. Depending on the method, a provider may process the customer's name, billing address, payment credentials, transaction identifiers, fraud signals, and payment status. We receive confirmation and transaction information but do not store full card details.

6. Shipping, Fulfillment, and Product Support

We share information reasonably necessary to fulfill an order with warehouses, manufacturers, logistics providers, carriers, customs intermediaries, and support providers. This may include name, address, telephone number, email, order number, product, and customs information.

For missing-piece, defect, or damage requests, we may share order details, model or part numbers, instruction references, photographs, or videos with the relevant supplier or fulfillment provider to resolve the request.

7. Cookies, Consent, and Tracking

7.1 Necessary Technologies

Necessary cookies and similar technologies support cart, checkout, account login, security, fraud prevention, language, and privacy-preference functions. They may be used without consent where permitted because they are necessary to provide the requested service.

7.2 Analytics and Advertising Technologies

Where required by law, a cookie or privacy banner allows visitors to accept, reject, or manage non-essential technologies. In those regions, non-essential analytics, personalization, retargeting, and advertising technologies are activated only after the required consent is obtained.

The active cookie categories and providers are identified in the cookie-preference tool or other notice available on the store. Third-party apps or pixels must be configured to honor applicable consent and opt-out choices.

7.3 Changing Choices

Visitors can change available cookie choices through the cookie-preferences link or banner. Browser, device, platform, and advertising-network controls may provide additional choices. Withdrawing consent does not affect processing that was lawful before withdrawal.

8. Recipients of Personal Information

• Shopify and store-platform providers.

• Payment processors, banks, and card networks.

• Warehouses, manufacturers, fulfillment providers, customs intermediaries, and carriers.

• Customer-support, email, SMS, review, and communication providers.

• Analytics, advertising, and social-media providers where enabled and lawfully used.

• Fraud prevention, cybersecurity, IT, hosting, and professional advisers.

• Regulators, law enforcement, courts, or other parties where disclosure is legally required or necessary to protect legal rights.

• A buyer, investor, lender, or adviser involved in a proposed or completed business transaction, subject to appropriate confidentiality and legal safeguards.

9. International Data Transfers

We operate from Hong Kong and use providers that may process information in Hong Kong, the United States, Canada, the European Economic Area, or other countries where they operate.

Where required, international transfers are supported by an adequacy decision, Standard Contractual Clauses, contractual safeguards, or another legally recognized mechanism. Customers may contact us for information about safeguards relevant to their personal information.

10. Data Retention

We retain information only as long as reasonably necessary for the purposes described, including legal, accounting, security, support, and dispute requirements.

• Order, transaction, tax, and accounting records are generally retained for up to 7 years after the transaction, or longer if required by law or an active dispute.

• Customer-support, return, missing-part, and warranty records are generally retained for up to 3 years after the case is closed, unless a longer period is needed for legal claims or product safety.

• Account information is retained while the account is active and is deleted or anonymized when no longer needed, subject to order-record obligations.

• Marketing information is retained until consent is withdrawn, the person unsubscribes, or the campaign purpose ends. A minimal suppression record may be retained to honor opt-out choices.

• Cookie and consent records are retained for the periods shown in the cookie-preference tool or as required to demonstrate compliance.

11. Privacy Rights

Depending on location and applicable law, a person may have rights to access, correct, delete, restrict, or receive a portable copy of personal information; object to certain processing; withdraw consent; and complain to a data-protection authority.

Submit a request to support@amazingblocktoys.com. We may verify identity and request information reasonably necessary to locate the relevant record. We will respond within the time required by applicable law and will not unlawfully discriminate against a person for exercising privacy rights.

12. United States State Privacy Notices

Where a United States state privacy law applies to AmazingBlock, eligible residents may have rights to know, access, correct, delete, or obtain a portable copy of personal information and to opt out of sale, sharing, targeted advertising, or certain profiling.

We do not sell personal information for money. Depending on applicable law, some advertising or analytics disclosures may be considered sharing, sale, or targeted advertising. Where required, customers can use the store's data-sharing opt-out page, cookie settings, a recognized browser opt-out signal such as Global Privacy Control, or contact us.

These statutory rights apply only where the relevant law covers our business and the requestor. We may voluntarily honor additional requests where practical.

13. Automated Decisions

We do not make decisions based solely on automated processing that produce legal or similarly significant effects concerning a customer. Shopify, payment providers, and fraud-prevention providers may use automated checks to protect transactions and accounts. Customers may contact us if an automated fraud review appears to have affected an order.

14. Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse. No internet transmission or storage method is completely secure, so absolute security cannot be guaranteed.

15. Children

The store is not directed to children under 13, and we do not knowingly collect their personal information. Building block products may contain small parts and are not suitable for children under 3. Some products are intended for ages 14+ or adult collectors.

If a parent or guardian believes a child provided personal information, contact support@amazingblocktoys.com.

16. Third-Party Links and Public Content

The website may link to third-party services whose privacy practices we do not control. Reviews, photographs, videos, and other content submitted for public display may be visible to other users. Do not include sensitive personal information in public content.

17. Changes to This Policy

We may update this Privacy Policy to reflect legal, operational, or technology changes. The current version will be posted with a revised Last Updated date. Where required, we will provide additional notice of material changes.

18. Contact

Privacy and data-rights requests: support@amazingblocktoys.com

Website: https://amazingblocktoys.com