UK & EU Privacy Rights Framework

Your Data, Your Control

Exercise your GDPR and UK Data Protection rights quickly and securely. At MengSNS, we honor your autonomy over your personal information, purchase history, and marketing preferences.

Overview of Your Legal Rights

Under the UK General Data Protection Regulation (UK GDPR) & EU GDPR, you are entitled to the following core rights:

Right of Access

You have the right to request a formal copy of the personal data we hold about you (Subject Access Request - SAR), including purchase logs, Teddy Perks reward balance, and customer service transcripts.

Article 15 GDPR

Right to Rectification

If any stored record—such as your shipping address, legal spelling of your name, phone number, or email—is inaccurate or incomplete, you may demand prompt correction.

Article 16 GDPR

Right to Erasure (Forgotten)

Also known as the 'Right to be Forgotten'. You can request total deletion of your profile, loyalty perks, and analytical tracking data where no statutory retention duties apply.

Article 17 GDPR

Right to Restrict Processing

You may request that we temporarily suspend active processing of your data while an objection, correction, or legal inquiry is being resolved by our compliance team.

Article 18 GDPR

Data Portability

Obtain and reuse your personal data in an easily accessible, structured, commonly used, and machine-readable JSON or CSV format to transfer to another provider.

Article 20 GDPR

Right to Object & Opt-Out

Instantly stop direct email marketing newsletters, personalized behavioral recommendations, and remarketing cookies at any moment without penalty or loss of basic services.

Article 21 GDPR

Submit a Privacy Request

Complete the form below to initiate an official request. Our Data Protection Officer reviews all submissions with cryptographic verification to protect your security.

Identity Verification Requirement: To safeguard against unauthorized data exposure, we will send an automated cryptographic authorization link to your submitted email address. You must click this link within 48 hours to validate that you are the lawful account holder.

Response Timeline

1
Instant Acknowledgment

Confirmation email dispatched within minutes with reference ticket number.

2
Identity Verification

Secure link verification ensures only authorized owners access personal files.

3
Fulfillment within 30 Days

As mandated by GDPR Art. 12(3), all compliant requests are finalized within 30 calendar days at zero administrative fee.

Data Protection Officer

For escalation, independent inquiries, or complex rights requests, you can contact our nominated Data Protection Officer directly:

  • Office: MengSNS Compliance & Legal
  • Direct Email: [email protected]
  • Response Window: 24–48 working hours
  • ICO Registration: Registered Data Controller with the UK Information Commissioner’s Office (ICO).

Children's Privacy

MengSNS designs plush toys conforming to EN71 and ASTM F963 safety standards. We never knowingly collect or market directly to children under the age of 13. Parents or guardians may exercise all access and erasure rights on behalf of minors at any time.

Frequently Asked Questions

Clear explanations regarding personal data handling and customer protection.

Is there any fee for requesting my data?

No. Under GDPR, submitting Subject Access Requests or requesting profile erasure is completely free of charge. In rare cases of manifestly unfounded or repetitive requests, an administrative handling fee may be assessed in accordance with ICO guidelines.

What happens to my Teddy Perks balance upon deletion?

If you request an account deletion (Right to Erasure), any accrued Teddy Perks, loyalty points, and purchase badges tied to your account will be permanently eliminated and cannot be reinstated after deletion completes.

Can you delete past order tax invoices?

Under UK statutory accounting and tax regulations (HMRC), MengSNS is required by law to retain transactional records and VAT invoices for up to 6 years. Personal marketing data is erased, while billing records remain anonymized and archived for regulatory compliance.

How do I lodge a complaint with authorities?

While we encourage contacting our DPO first to promptly resolve your concerns, you maintain the legal right to submit a formal grievance directly to the UK Information Commissioner's Office (ICO) at ico.org.uk.