Privacy policy

Last updated: 28 September 2026

What people buy here is nobody else's business. This page explains, in plain English, what personal information we hold, why, who else sees it, how long we keep it and what your rights are.

Who is responsible

BA EDITIONS LTD, trading as MAW Toys, is the controller of your personal information. Registered in England and Wales, company number 17472532. Registered office: 53c Unimix House, Abbey Road, London, NW10 7TR, United Kingdom. Email: admin@baeditions.co.uk.

What we collect and why

  • Your order. Name, delivery and billing address, email, phone number, what you ordered and what you paid. We use it to take payment, send your order, deal with returns and faults, and answer your questions. Lawful basis: to perform our contract with you.
  • Payment. Card payments are handled by Shopify Payments. PayPal and Klarna payments are handled by PayPal and Klarna. We never see or store your full card number.
  • Your account, if you create one. Your login email, saved addresses and order history. Lawful basis: contract.
  • Messages. What you send us by email, the contact form or the chat on the site. Lawful basis: our legitimate interest in answering you, or contract where it is about an order.
  • Marketing emails, only if you sign up. Your email address and whether you open our emails. We only send these if you tick the box at checkout or join the list. Lawful basis: your consent, which you can withdraw at any time with the unsubscribe link or by emailing us.
  • Reviews. If you leave a review, your display name, rating, review text and any photo are published on the product page. We use your order details to ask for a review after delivery. Lawful basis: legitimate interest in collecting genuine feedback. You can ask us to remove your review at any time.
  • Accounts and tax. Order and payment records. Lawful basis: legal obligation.
  • Fraud prevention. Shopify checks orders for signs of fraud, using details such as your IP address and payment data. If an order is flagged, a person at MAW looks at it before anything is cancelled. Lawful basis: legitimate interest in preventing fraud.
  • How the site is used. Pages viewed, device and browser type and similar data, collected with cookies. Only non-essential cookies you accept. See Cookies below.
  • Job applications. If you email a CV, we keep it for up to six months and then delete it. Lawful basis: legitimate interest, or steps before a contract if we invite you to apply.

What you buy is sensitive, and we treat it that way

An order history in a shop like ours can say something about a person's sex life. We do not use what you buy to build a profile of you, we do not sell it, and we do not share it with advertisers. Only the people who need to see an order to deliver it or help you with it see it.

Who else sees it

We do not sell your data, and we never will. We share only what each of these needs to do its job:

  • Shopify, which runs our shop, checkout, account system, email sending, chat and payments. Shopify processes data for us, and for some features, such as fraud detection and Shop Pay, as a controller in its own right. See Shopify's privacy policy at privacy.shopify.com.
  • Our fulfilment partner, Simply Pleasure Limited, trading as ABS Holdings, of Ringwood, Hampshire. It packs and posts your order from its UK warehouse. It receives your name, delivery address, phone number and the items ordered. It does not receive your email address or payment details.
  • The delivery company that carries your parcel. It receives your name, address and phone number.
  • PayPal and Klarna, if you choose to pay with them. They act as controllers in their own right. Klarna may run credit and identity checks under its own privacy notice.
  • Judge.me, our reviews provider, which receives your name, email and the items ordered so it can ask for and publish your review.
  • Trustpilot, which hosts our public reviews. If we invite you to review an order, Trustpilot receives your name, email address and order reference so it can send the invitation. The Trustpilot badge on our website loads from Trustpilot's servers. Trustpilot acts as a controller for reviews you post there, under its own privacy policy at legal.trustpilot.com.
  • Our accountant and HMRC, as tax and company law require.
  • Our email provider, for messages sent to admin@baeditions.co.uk.
  • The police, courts or regulators, only where the law requires it.

Each processor works under a written contract and may only use your information to provide its service to us.

Sending data abroad

Some of our providers, including Shopify, store or access data outside the UK, for example in Canada, Ireland and the United States. Where that happens the transfer is protected by UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum.

How long we keep it

  • Orders, invoices and payment records: six years from the end of the financial year they relate to, because tax law requires it.
  • Emails, contact form messages and chats: 2 years from our last reply, then deleted, unless they relate to an open claim.
  • Your account: until you ask us to close it.
  • Marketing consent: until you unsubscribe. After that we keep your email address on a do-not-contact list so we do not email you by mistake.
  • Reviews: while the product is on sale, or until you ask us to remove yours.
  • Job applications: up to six months.

Cookies and similar technology

When you first visit, a banner asks what you are happy with. Cookies strictly necessary to run the shop, your bag and checkout are always on. Analytics and marketing cookies are only set if you accept them. You can change your choice at any time with the Cookie preferences link at the bottom of every page.

Your wishlist and recently viewed list are saved in your browser's own storage on your device. They are not sent to us, and they stay there until you clear your browser data. Anyone using the same browser can see them.

Your rights

Under UK data protection law you can ask us to:

  • give you a copy of the personal information we hold about you;
  • correct anything that is wrong;
  • delete it, where we no longer need it or you withdraw consent;
  • restrict how we use it, or object to our using it on the basis of legitimate interests;
  • give it to you, or another business, in a portable format;
  • stop sending you marketing, at any time.

Email admin@baeditions.co.uk. We may need to confirm who you are. We reply within one month, and it is free.

Complaints

If you are unhappy with how we have handled your information, please tell us first at admin@baeditions.co.uk and we will look into it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Children

Our shop is for adults only. We do not knowingly collect information about anyone under 18, and we delete it if we find we have.

Security

Payments are taken on Shopify's secure checkout. Access to order data is limited to the people who need it.

Changes to this page

If we change how we use your information we will update this page and the date at the top. If the change is significant we will tell you by email where we have your address.