Privacy policy

Controller and contact

TOYS MARKET SRL, IDNO 1017609000525, registered address: Ungheni, str. Națională 14, Republic of Moldova, operates carousel.md. For personal data questions and requests: info@carousel.md, +373 22 011 022.

Data and purposes

We process names, contact details, addresses, order, payment, delivery and return information and messages you send us to manage accounts, orders and support, on the basis of entering into and performing a contract. Invoicing and mandatory records are processed to meet legal obligations. Technical data, including IP addresses, device identifiers and access logs, may be used for security and fraud prevention on the basis of legitimate interests, respecting your rights. Required data are necessary for the requested service; without them we may be unable to process your order.

Marketing and cookies

Newsletters and optional analytics, personalisation and advertising technologies require a separate choice where we request consent, including Moldova. Accepting terms or placing an order does not provide that consent. Withdraw it through the unsubscribe link or cookie preferences, without affecting the lawfulness of earlier processing. Online identifiers are not necessarily anonymous.

Recipients and transfers

Necessary data may be shared with Shopify, our store hosting provider, technical and communications providers, couriers, the provider of the payment method used, accounting services and authorities where a legal basis exists. Analytics and advertising providers such as Google and Meta may receive data according to applicable consent choices. International services may involve processing outside Moldova. Contact us for information about recipients, processing countries and applicable safeguards. Transfers are subject to Law No. 195/2024; this policy is not consent to a transfer.

Retention and security

We retain data as needed to manage accounts and orders, meet statutory recordkeeping periods, resolve complaints and defend rights. Marketing data are used until consent is withdrawn, where applicable; proof of your choice and minimal unsubscribe records may be retained. Specific periods depend on the document and legal obligation. We apply technical and organisational measures appropriate to risks, including HTTPS. Do not email full card numbers, CVV codes or passwords.

Your rights

Subject to the law, you may request information, access, rectification, erasure, restriction and portability, and object to processing, including direct marketing. You may withdraw consent and complain to CNPDCP or seek judicial redress. We may request only information needed to verify your identity when handling a request. Personal data do not become the store's property, and submitting them grants no unlimited or irrevocable rights.

Law

Law No. 195/2024 of 25 July 2024 on personal data protection applies, effective 23 August 2026; Law No. 133/2011 was repealed on that date. Updated: 22 September 2026.