Sorry to hear that, hopefully the colleague's son hasn't done anything "harmful" to your toys.
If your girlfriend had bought the stuff from your account, she should have just left the address as yours and let them post it to you, then brought the item to work to give him.
Note for future ref: Don't ever share your account with anyone. I have had colleagues who wanted me to help them sell stuff as well etc - I just said no as they can set up an account and do it themselves. I don't even agree to lending the other half my PayPal account!![]()