L.O.L. Surprise! Kids


UK Privacy Policy

Fair Processing Notice for LOL Surprise

At MGA Entertainment (UK) Ltd, we respect your personal data. This Fair Processing Notice explains how we will use your personal data when your child uses the LOL Surprise website.

Our head office address is:

Regent Business Park
50 Presley Way
Milton Keynes

The person with responsibility for Data Protection is Kristy Gouldsmith and she can be contacted by emailing gdpruk@mgae.com.


Collecting and using children’s information

Our website is intended to be used mainly by children. Whenever we collect personal information from a child, we only keep the information for the time we need it to provide a service or for the time it’s legally required to be kept on record.

We collect information on IP addresses using cookies. We may collect this information ourselves or ask a third party to process the data on our behalf. We use this data to analyse the performance of our website and to create anonymous reports.

What we do:

use the IP address to determine city and country of the website user but not the precise location;
to track which website pages a user visits or which website they came from; and
retain user data for up to a maximum of 14 months.


What we don’t do:

report on demographics (including age/gender) and/or user interest categories (affinity/in-market segments);

target users with interest-based advertising or re-marketing campaigns; and
benchmark against other companies including:
o benchmarking against channel groupings (display, social, paid search, etc.), location, device types
o benchmarking metrics such as session data, bounce rates, etc.

We will ask for consent for our use of cookies through a pop-up.

Do we use any automated decision making?

We do not use any automated decision making.

Who do we share your personal data with?

We share your data with our software/website providers.

Do we transfer your personal data outside of the EU or EEA?

Our head office is in the United States and customer data is transferred there for administrative purposes. This is a legitimate interest for us as an international business.

We use Standard Contractual Clauses as the data transfer safeguard. Standard Contractual Clauses were drafted by the EU Commission are lawful data transfer safeguard.

How long do we keep your personal data for?

We retain user data for up to a maximum of 14 months 


Your rights as a data subject

You have rights in respect of our processing of your personal data which are:

To access to your personal data and information about our processing of it.  You also have the right to request a copy of your personal data (but we may need to remove information about other people).
To rectify incorrect personal data that we are processing.
To request that we erase your personal data if:
o we no longer need it;
o if we are processing your personal data by consent and you withdraw that consent;
o if we no longer have a legitimate ground to process your personal data; or
o we are processing your personal data unlawfully
To object to our processing if it is by legitimate interest.
To restrict our processing if it was by legitimate interest.
To request that your personal data be transferred from us to another company if we were processing your data under a contract or with your consent and the processing is carried out automated means.
If you want to exercise any of these rights, please contact us.

This website uses cookies to enhance user experience and to analyze performance and traffic on this website. To learn how we collect and use your personal information, click here. Your Privacy Rights


You are entering a movie themed play areaYou are entering a movie themed play area

You are leaving the kid's section of lolsurprise.com to visit the kid's AR experience for LOL Surprise Movie Magic Studios. Are you ready?