Privacy Policy

Last updated: March 20, 2026

This Privacy Policy explains how personal information is collected, used, disclosed, stored, transferred, and otherwise processed in connection with the Lucas Play websites, online storefronts, checkout pages, customer support channels, marketing communications, and the sale and fulfilment of Lucas Play products.

Please read this Privacy Policy carefully. By using our website, interacting with us, or purchasing from us, you acknowledge that your personal information will be handled as described in this Privacy Policy, subject always to applicable law.

1. Who we are

The Lucas Play brand, together with its intellectual property, brand assets, product framework, and group-level governance, is owned and governed by:

Lucas Play Group L.L.C–FZ
Meydan Free Zone
Dubai, United Arab Emirates

(“Lucas Play Group”, “Lucas Play”, “we”, “us”, or “our”, where the context relates to the brand owner and group governance function)

Lucas Play products are sold through authorised local operating companies acting under licence and authority from Lucas Play Group.

Authorised operating companies

United States
Lucas Play Creations LLC
Wyoming, United States

Canada
Lucas Play Creations Canada Inc.
Canada

Depending on the nature of the interaction, the relevant Lucas Play entity may act as a data controller, business, organisation, or similar primary decision-maker under applicable privacy law, or as a processor / service provider handling data on behalf of another Lucas Play entity or third-party platform.

In practice:

a. Lucas Play Group L.L.C–FZ generally governs group-level brand operations, intellectual property stewardship, product governance, selected central administration, compliance oversight, and certain shared systems or reporting functions; and
b. the Authorised Distributor for the relevant territory generally handles customer transaction administration, fulfilment, customer service, returns handling, territory operations, and related processing associated with local sales.

The role played by each entity may vary depending on the processing activity, the sales channel, and the law that applies.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal information collected or processed through:

a. the Lucas Play website and online storefronts;
b. checkout, payment, fraud screening, and order management processes;
c. customer service, warranty, returns, or support communications;
d. marketing communications and subscription forms;
e. cookies, pixels, SDKs, analytics tools, and similar tracking technologies on our digital properties; and
f. third-party commerce platforms, marketplaces, fulfilment systems, and service providers used in connection with Lucas Play operations where this Policy is made applicable.

This Privacy Policy does not necessarily apply to third-party websites, apps, or services that operate under their own privacy notices, even where they are linked from our website or used in connection with our services.

3. The personal information we collect

We may collect, receive, generate, infer, or otherwise process the following categories of personal information, depending on your interaction with us:

Identity and contact information

This may include your name, billing address, shipping address, email address, telephone number, account identifiers, and similar contact details.

Order and transaction information

This may include order details, purchase history, product selections, basket contents, discounts used, shipping method, order value, refund information, returns records, and related transactional information.

Payment and fraud prevention information

Payments are typically processed through third-party payment providers and commerce platforms. We may receive limited payment-related information such as payment status, payment method type, billing verification status, fraud flags, risk indicators, chargeback information, and transaction identifiers, but we do not ordinarily store full card numbers.

Customer communications

This may include emails, web forms, support tickets, chat messages, social media messages sent to us, product reviews, survey responses, complaint details, warranty claims, and other correspondence you send to us or that is generated in the course of assisting you.

Device, browsing, and technical information

This may include IP address, browser type, device type, device identifiers, operating system, session behaviour, referral URLs, pages viewed, time spent, clicks, interactions, timestamps, crash data, and similar website and app usage information.

Marketing and preference information

This may include email subscription status, communication preferences, wish list activity, product interests, campaign engagement data, and inferred preferences based on browsing or purchase activity where permitted by law.

User-generated content

This may include reviews, ratings, photos, videos, testimonials, and other content you choose to submit.

Compliance and verification information

Where necessary, we may collect information relevant to fraud prevention, legal compliance, sanctions screening, account verification, dispute management, or enforcement of our legal rights.

4. Children’s privacy

Lucas Play products are intended to be purchased by adults. Our website is not directed to children for independent commercial use, and we do not knowingly collect personal information directly from children in a manner prohibited by applicable law.

If you believe that a child has provided personal information to us contrary to applicable law, please contact us so that we can take appropriate steps.

5. How we collect personal information

We collect personal information:

a. directly from you, when you place an order, create an account, sign up for emails, submit a form, contact support, enter a promotion, post a review, or otherwise interact with us;
b. automatically, through cookies, server logs, pixels, analytics tools, and similar technologies when you use our website or digital properties;
c. from service providers and partners, including commerce platforms, payment processors, fulfilment providers, fraud prevention tools, customer support systems, marketing systems, and analytics providers;
d. from marketplace or channel partners, where you purchase through a third-party sales channel; and
e. from group operational processes, where data is shared internally within the Lucas Play structure for legitimate operational, legal, governance, security, reporting, or brand management purposes.

6. How we use personal information

We use personal information where reasonably necessary for our business operations and in accordance with applicable law, including to:

a. provide, operate, maintain, and improve our website, storefront, and digital services;
b. process, validate, administer, and fulfil orders;
c. arrange payment processing, shipping, delivery, returns, refunds, exchanges, and customer support;
d. communicate with you about orders, deliveries, returns, product care, safety, and service issues;
e. administer accounts, wish lists, subscriptions, and customer preferences;
f. provide marketing communications where you have requested them, consented where required, or where otherwise permitted by law;
g. analyse website traffic, campaign performance, customer behaviour, and operational performance;
h. personalise content, product presentation, and communication where permitted;
i. detect, investigate, prevent, and respond to fraud, misuse, unlawful activity, chargebacks, security incidents, and policy breaches;
j. comply with legal, tax, accounting, audit, regulatory, product safety, and record-keeping obligations;
k. exercise, establish, protect, or defend legal rights, claims, and positions; and
l. support internal governance, reporting, brand control, quality assurance, and group operational oversight across the Lucas Play structure.

7. Legal bases and grounds for processing

Where applicable law requires a legal basis or recognised ground for processing, we may process personal information on one or more of the following bases:

a. because it is necessary to perform a contract or take steps at your request before entering into a contract;
b. because it is necessary for compliance with a legal or regulatory obligation;
c. because it is necessary for our legitimate interests or the legitimate interests of an affiliated entity or service provider, provided those interests are not overridden by your rights where applicable law so requires;
d. because you have provided consent, including for certain forms of marketing or optional cookies, where consent is required; and
e. on any other basis permitted by applicable law in the jurisdiction concerned.

Because privacy laws vary by territory, not every legal basis described above will apply in every case or every jurisdiction.

8. How personal information is disclosed

We may disclose personal information to the following categories of recipients, to the extent reasonably necessary for the purposes described in this Privacy Policy:

Within the Lucas Play structure

We may share personal information between Lucas Play Group L.L.C–FZ and the relevant Authorised Distributor for purposes including order administration, brand governance, customer service coordination, product quality, legal compliance, financial administration, fraud prevention, internal reporting, and operational oversight.

Commerce and technology providers

This may include hosted commerce platforms, website operators, order management systems, ERP or back-office tools, CRM platforms, email platforms, analytics tools, fraud prevention systems, cloud providers, and customer support tools.

Payment and financial service providers

This may include payment processors, payment gateways, anti-fraud tools, chargeback handling providers, banks, and transaction service providers.

Shipping, fulfilment, and logistics providers

This may include warehousing providers, 3PLs, fulfilment partners, shipping carriers, customs brokers, and returns-processing providers. For example, where applicable to the sales channel and territory, order and return data may be shared with authorised fulfilment partners used to store inventory, fulfil customer orders, generate shipping labels, receive returned goods, and support returns administration, including Amazon Multi-Channel Fulfillment (MCF) and associated authorised warehouse or returns-processing locations.

Professional advisors and compliance recipients

This may include lawyers, accountants, auditors, insurers, tax advisers, corporate service providers, and regulatory or governmental bodies where disclosure is required or reasonably necessary.

Advertising and marketing partners

Where permitted by law and consistent with your preferences and settings, we may share limited information with marketing, analytics, and advertising partners to measure campaigns, improve reach, or provide more relevant advertising.

Corporate and transaction recipients

We may disclose data in connection with a reorganisation, restructuring, financing, merger, acquisition, asset sale, corporate diligence exercise, or similar transaction, subject to appropriate confidentiality and lawful handling.

Law enforcement and legal process

We may disclose personal information where required to do so by law, court order, regulatory request, lawful authority, or where reasonably necessary to investigate, prevent, or address unlawful conduct, fraud, security issues, or legal claims.

We do not sell personal information in the ordinary sense of transferring personal data for money. However, some privacy laws define “sale”, “sharing”, or “targeted advertising” broadly, and certain cookie- or advertising-related data flows may fall within those definitions depending on the jurisdiction and configuration of our website.

9. International transfers

Lucas Play operates through a cross-border structure. As a result, personal information may be accessed, stored, or processed in multiple jurisdictions, including the United Arab Emirates, the United States, Canada, and other countries in which our service providers, technology systems, advisors, or operational partners are located.

Where personal information is transferred across borders, we take steps intended to support lawful handling under applicable law, which may include:

a. intra-group data access controls and governance measures;
b. contractual data protection clauses;
c. vendor due diligence and contractual safeguards;
d. technical and organisational security controls; and
e. transfer mechanisms or exemptions recognised by applicable law.

Because privacy and data-transfer laws differ by country, data transferred to another jurisdiction may become subject to the laws of that jurisdiction. We nevertheless seek to process personal information in a manner consistent with this Privacy Policy and applicable law. s, pixels, analytics, and similar technologies

10. Cookies, pixels, analytics, and similar technologies

We and our partners may use cookies, pixels, tags, scripts, SDKs, local storage, and similar technologies on our website and digital properties.

These technologies may be used to:

a. ensure website functionality and security;
b. remember your preferences and shopping activity;
c. understand traffic, navigation, and performance;
d. analyse user interactions and website effectiveness;
e. support checkout, fraud detection, and session continuity;
f. measure advertising effectiveness; and
g. provide or support marketing, retargeting, and audience-building activities where permitted.

Some cookies or tracking technologies are necessary for the operation of the site, while others are optional and may be subject to consent requirements depending on your location.

You may be able to manage certain cookie preferences through our cookie banner, consent manager, browser settings, or applicable opt-out mechanisms. Please note that disabling certain technologies may affect site functionality.

11. Marketing communications

Where permitted by law, we may send you marketing emails, promotional messages, launch updates, restock alerts, or brand communications if you have subscribed, opted in, requested such communications, or otherwise where we are lawfully permitted to do so.

You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or by contacting us. Unsubscribing from marketing will not prevent us from sending you non-promotional service communications relating to orders, product safety, returns, or account administration.

12. Privacy rights and choices

Depending on your location and the law that applies, you may have rights or choices relating to your personal information, which may include the right to:

a. request access to personal information we hold about you;
b. request correction of inaccurate or incomplete information;
c. request deletion of certain personal information;
d. request restriction of, or object to, certain processing;
e. withdraw consent where processing depends on consent;
f. request portability of certain information where applicable;
g. opt out of certain forms of marketing or targeted advertising; and
h. make a complaint to a relevant privacy regulator or supervisory authority.

These rights are not absolute and may be subject to legal exceptions, identity verification, proportionality, retention obligations, technical feasibility, and the applicable law in your jurisdiction.

To exercise a privacy request, please contact us using the details in the “Contact us” section below. We may require sufficient information to verify your identity and authority before acting on a request.

13. Data retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, as otherwise disclosed in this Privacy Policy, or as required or permitted by law.

Retention periods may vary depending on factors such as:

a. whether the data is needed to fulfil orders or administer the customer relationship;
b. whether the data is needed for returns, disputes, product safety, fraud prevention, or chargeback management;
c. whether the data is required for tax, accounting, legal, audit, or regulatory record-keeping;
d. whether the data is relevant to an ongoing complaint, claim, or investigation; and
e. whether deletion has been requested and can lawfully be effected.

When personal information is no longer required, we may delete it, anonymise it, aggregate it, or otherwise retain it only in a form that no longer identifies an individual, subject to applicable law and legitimate record-keeping requirements.

14. Data security

We implement and maintain reasonable administrative, technical, physical, and organisational safeguards designed to protect personal information against unauthorised access, misuse, loss, alteration, disclosure, or destruction.

Such safeguards may include access controls, role-based permissions, encryption in transit, secure hosting environments, vendor controls, authentication measures, monitoring, and internal governance procedures. No internet transmission or data storage system can be guaranteed to be completely secure, but we take data security seriously and seek to apply protections appropriate to the nature of the information and the processing involved. party services and platforms

Our website and operations may integrate with or rely upon third-party services, such as Shopify, payment processors, carriers, analytics tools, CRM systems, review platforms, email service providers, and advertising technologies.

Those third parties may process personal information under their own privacy notices, contractual roles, and legal obligations. We encourage you to review their policies where relevant. This Privacy Policy does not override the privacy practices of independent third-party services to the extent they operate under their own terms and notices.

15. Third-party services and platforms

Our website and operations may integrate with or rely upon third-party services, such as Shopify, payment processors, carriers, warehouse and fulfilment partners, Amazon Multi-Channel Fulfillment (MCF), analytics tools, CRM systems, review platforms, email service providers, and advertising technologies.

Those third parties may process personal information under their own privacy notices, contractual roles, and legal obligations. We encourage you to review their policies where relevant. This Privacy Policy does not override the privacy practices of independent third-party services to the extent they operate under their own terms and notices.

16. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time to reflect changes in our website, operations, sales channels, service providers, legal obligations, or privacy practices.

The updated version will be posted on the website with the revised “Last updated” date. Where required by law, we will take additional steps to notify you or obtain consent in relation to material changes.

17. Contact us

For privacy-related questions, requests, or complaints, please contact:

Lucas Play Privacy Office
Email: privacy@lucasplay-creations.com

For territory-specific customer transaction matters, you may also contact the relevant operating company:

United States
Lucas Play Creations LLC
5830 East 2nd Street, Suite 7000 #15524, Casper, Wyoming. 82609, United States
notice@lucasplay-creations.com

Canada
Lucas Play Creations Canada Inc.
Vancouver, British Columbia. Canada
notice@lucasplay-creations.com

For group-level privacy governance, brand governance, or legal notices:

Lucas Play Group L.L.C–FZ
Meydan Free Zone
Dubai, United Arab Emirates
notice@lucasplay-creations.com