Privacy Policy

tootystore.com (“we,” “our,” or “us”) is committed to upholding your privacy and ensuring the protection of your personal data. This Privacy Policy outlines how we collect, use, disclose, retain, and safeguard your personal information when you visit our website, tootystore.com, interact with us, or utilize our services. We strive to process your information with transparency, fairness, and in full compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant international standards.

1. Introduction

Your privacy and trust are important to us. This Privacy Policy demonstrates our commitment to the responsible handling of personal data and our dedication to respecting your rights. Whether you are browsing our site, making a purchase, or contacting customer support, we take serious precautions to protect your information and honor privacy-first principles.

2. Scope of This Privacy Policy and Data Controller Information

This Privacy Policy applies to the website tootystore.com and all related services offered on or through it. For purposes of the GDPR, the data controller responsible for your personal data is Tooty Store, which manages tootystore.com. If you have any questions regarding this Policy, you may contact us at [email protected].

3. Categories of Data We Collect

We may collect the following categories of data:

a) Usage Data
Includes data about your visits to our website such as your IP address, browser type, language preferences, time zone, referring URLs, and how you interact with different elements of our site.

b) Account Data
Includes identifiers and contact details such as your full name, shipping and billing addresses, phone number, and email address when you register or place an order.

c) Profile Data
Includes demographic information, shopping preferences, purchase history, and information you voluntarily provide to personalize your experience.

d) Communication Data
Includes records of your interactions with our customer support team, correspondence sent via email or web forms, and communication preferences.

e) Technical Data
Includes details about the device and software you use to access tootystore.com, such as operating system, device model, browser version, and screen resolution.

f) Transaction Data
Includes payment method details (processed securely via third-party providers), order history, invoice data, and delivery information required for processing purchases.

g) Preference Data
Includes your explicit marketing preferences and your interests in our products and services as indicated through behavior or consent.

4. Legal Bases for Processing Personal Data

We process your personal data under the following legal bases:

– Performance of Contract: To fulfill obligations related to purchases and services you request.
– Legitimate Interests: For purposes such as analytics, fraud detection, cybersecurity, and improving our services, provided these interests are not overridden by your rights.
– Consent: Where required, we obtain your informed consent for data processing activities such as marketing communications and non-essential cookie placement.
– Legal Obligation: To comply with tax, regulatory, and accounting requirements.

5. Your Rights Under GDPR and CCPA

Depending on your jurisdiction, you may have the following rights regarding your data:

– Right of Access: Obtain a copy of your personal data we hold.
– Right to Rectification: Correct inaccurate or incomplete information.
– Right to Erasure: Request deletion of your data, subject to applicable exceptions.
– Right to Restriction: Request limitation of data processing under certain conditions.
– Right to Data Portability: Receive your data in a structured, machine-readable format and transmit it to another controller.
– Right to Object: Object to processing on grounds of legitimate interest or for direct marketing.
– Right Not to be Discriminated Against: Exercise your privacy rights without discrimination under applicable law.

To exercise any of the above rights, please contact us at [email protected].

6. Security Measures

We implement a comprehensive range of organizational and technical safeguards to protect your personal data, including but not limited to:

– Encryption of data at rest and in transit
– Role-based access control
– Regular data backups and disaster recovery planning
– Staff training in privacy and data protection
– Secure monitoring and intrusion detection systems

7. International Data Transfers

When personal data is transferred outside of the country in which you reside—for instance, to servers in the U.S. or the European Union—we ensure that adequate safeguards are in place, including data processing agreements and Standard Contractual Clauses as approved under GDPR. We assess local data protection frameworks and implement supplementary measures when necessary.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for legal, regulatory, accounting, or reporting obligations. Approximate retention periods include:

– Account and Transaction Data: Retained for 7 years
– Communication Data: Retained for 3 years
– Usage, Technical, and Preference Data: Retained for 2 years
– Cookies and Analytics Data: Retained in accordance with their respective expiration periods or until revoked

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance user experience. The following categories of cookies may be present on tootystore.com:

– Essential Cookies: Required for site functionality and securing transactions.
– Functional Cookies: Enable website personalization and remember user preferences.
– Performance & Analytics Cookies: Help us understand user engagement and improve usability.
– Marketing Cookies: Enable targeted advertising and promotions across channels.

10. Cookie Management and Compliance

Upon first visit to tootystore.com, you are presented with a cookie consent banner. You can manage your preferences or revoke consent at any time through the cookie settings link found in the footer of our website. We provide opt-out mechanisms that comply with both GDPR and CCPA requirements. Do Not Track (DNT) signals are also honored where applicable.

11. Children’s Privacy

We do not knowingly collect or process personal data from children under the age of 13. If you believe that a child has provided us with personal information without appropriate consent, please contact us immediately at [email protected] so that we may take appropriate action, including deletion of the data.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in technology, legal requirements, or our internal practices. Any significant updates will be communicated through prominent notices on tootystore.com and/or via direct communication depending on your account preferences. We encourage you to review this policy regularly.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or our data handling practices, please contact us at:

Email: [email protected]

We are committed to full compliance with applicable privacy laws and diligent in reviewing our practices. Your trust is our priority, and we welcome inquiries related to how your data is handled.