Privacy policy
Effective from 4 October 2025
Overview
This Privacy Policy explains how TOFECOL LTD (“we”, “us”, “our”) collects, uses, shares, and protects your personal information when you visit or make a purchase from our website or related services (the “Site”).
By using our Site, you agree to this Policy. If you do not agree, please do not use the Site.
1. Information We Collect
Personal data you provide:
We collect information when you:
• Create an account or place an order
• Subscribe to our newsletter or updates
• Contact us for support or assistance
• Participate in surveys, events, or promotions
This may include:
• Name, email, phone number, and postal address
• Account login details
• Payment details (processed securely via Shopify Payments or third-party gateways such as PayPal or Klarna)
• Any other details you provide voluntarily
Automatically collected data:
We collect basic analytics and technical data, including:
• IP address, browser type, and device information
• Pages viewed and referring URLs
• Cookies and similar technologies
Third-party data:
We may receive limited data from:
• Social media platforms (if you connect or interact)
• Advertising or analytics partners (e.g., Meta, Google)
2. How We Use Your Information
We use your data to:
• Process and deliver your orders
• Provide customer service and account support
• Send order updates and marketing communications (only if you’ve opted in)
• Improve our Site and personalise your experience
• Prevent fraud and ensure security
• Comply with legal and tax obligations
Legal bases for processing:
We process your data under:
• Contractual necessity (fulfilling your order)
• Consent (marketing or newsletter subscriptions)
• Legitimate interests (improving services and preventing fraud)
• Legal obligation (record-keeping and tax compliance)
3. Marketing and Communications
With your consent, we may send updates about new collections, promotions, or events.
You can unsubscribe at any time by clicking the link in our emails or contacting us.
We may also use limited data to tailor advertising through platforms like Meta (Facebook, Instagram) or Google, in accordance with their privacy rules.
4. Sharing Your Information
We only share data when necessary:
• With Shopify, which powers our online store – Shopify’s Privacy Policy
• With delivery partners (e.g., DHL, Royal Mail) to ship your order
• With trusted analytics and marketing partners to improve our Site
• With legal or regulatory authorities if required by law
We do not sell or trade your personal data.
5. Cookies and Tracking
We use cookies to ensure our Site functions properly and to improve user experience. You can adjust your browser settings to disable cookies, though some features may not work correctly.
6. International Data Transfers
We may transfer personal data outside the UK or EEA to trusted service providers (e.g., Shopify, which operates globally).
We rely on Standard Contractual Clauses (SCCs) or other recognised safeguards to ensure your information remains protected.
7. Data Retention
We retain data only as long as necessary for the purposes set out here.
For example, we keep order records for six years to comply with accounting and tax laws. When data is no longer needed, it is securely deleted or anonymised.
8. Your Rights
Under UK GDPR, you have the right to:
• Access and receive a copy of your personal data
• Request correction or deletion of inaccurate data
• Restrict or object to processing in certain cases
• Withdraw consent where applicable
• Request data portability
To exercise any of these rights, please email customerservice@tofecol.com.
You may also contact the Information Commissioner’s Office (ICO) at https://ico.org.uk.
9. Security
We use technical and organisational measures to protect your information. However, no online system is 100% secure, and we cannot guarantee absolute protection.
10. Children’s Privacy
We do not knowingly collect data from anyone under 18. If you believe a child has provided us with information, please contact us for prompt deletion.
11. Do Not Track Signals
Our Site does not currently respond to browser-based “Do Not Track” requests.
12. California Privacy Rights
If you reside in California, you have the right to request access to or deletion of your personal information, and to opt out of its sale (we do not sell personal data). Please contact customerservice@tofecol.com for assistance.
13. Updates to this Policy
We may update this Policy periodically. Any changes will appear on this page with the revised date shown at the top. Continued use of our Site means you accept these updates.
14. Contact Us
For questions about this Policy or your data:
TOFECOL LTD
Email: customerservice@tofecol.com
United Kingdom
TOFE Privacy Team