PRIVACY POLICY

Contents

1.0 Introduction
2.0 Why We Collect Your Personal Information
3.0 Lawful Basis of Processing Information
4.0 What Information We Collect and Where From
4.2 Third Party Collection of Personal Data
5.0 How Long We Keep Information For
6.0 Security of Personal Information
7.0 Children's Information
8.0 Your Individual Rights
9.0 Consent
10.0 Failure to Provide Personal Information
11.0 Cookies
12.0 Automated Decision Making
13.0 Transfers to Third Parties
14.0 Transfers Outside of the UK
15.0 Right to Complaint
16.0 Additional Information
17.0 Policy Review and Amendments

1.0 Introduction

We, TOVALÉ, take the protection of your personal data very seriously and strictly adhere to the rules laid out by data protection laws and the General Data Protection Regulation (GDPR-UK).

This privacy notice gives you information on how we collect and process your personal data through your use of this site and any data you may provide when you contact us regarding our products and services.

If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us using the details in section 15 of this policy.

2.0 Why We Collect Your Personal Information

We collect your personal data for the following purposes:

To manage communications between you and us
Where necessary to perform a contract with you
To provide you with information you have requested or that may be of interest to you
To ensure safe and effective operation of our website and monitor its performance
For marketing and advertising purposes

3.0 Lawful Basis of Processing Information

We only collect and use personal information about you when the law allows us to. Most commonly, we use it where:

You have given consent to the processing
Processing is necessary for a contract
Processing is required for compliance with a legal obligation
Processing is necessary for our or a third party’s legitimate interests

Where legitimate interest is identified, we undertake a legitimate interest assessment including:

Purpose test – to identify the legitimate interest
Necessity test – to confirm the necessity of processing
Balancing test – to ensure rights and freedoms are not overridden

4.0 What Information We Collect and Where From

We may collect the following personal information when you use our services, place an order, or contact us:

Name, telephone number, email
IP address, shipping address, billing address
Tracking number
Order ID
Transaction details

4.2 Third Party Collection of Personal Data

We may also collect your data through third parties such as Shopify.

Cookies, ad beacons, and similar technologies may be used by our partners to associate activities on our site with other data (e.g., email addresses) for marketing purposes.
You may opt out of such targeting by contacting us at hello@tovaleofficial.com

5.0 How Long We Keep Information For

We only retain your personal data as long as necessary, in accordance with legal requirements and our internal retention policies. For specific data retention timelines, please refer to Section 16.

6.0 Security of Personal Information

We implement strict security measures to prevent unauthorised access, loss, or disclosure of personal data. Access is limited to personnel who need it for business purposes.

We also have procedures for managing potential data breaches and will notify affected parties and regulators where legally required.

7.0 Children's Information

We do not knowingly collect personal information from children. If such information has been collected in error, please contact us via the details in Section 15 and we will remove it promptly.

8.0 Your Individual Rights

You have rights under the GDPR, including:

Right to Object
Right of Access
Right to be Informed
Right to Rectification
Right to Erasure
Right to Restrict Processing
Right to Data Portability

For full explanations or to exercise these rights, please contact us via Section 16.

9.0 Consent

You may withdraw your consent at any time, but this does not affect the lawfulness of any processing carried out before withdrawal.

10.0 Failure to Provide Personal Information

If you do not provide personal data necessary for a contract or legal requirement, we may be unable to provide our services to you and will notify you accordingly.

11.0 Cookies

Our website uses cookies. Please refer to our Cookies Policy for details on the cookies used and how you can manage them.

12.0 Automated Decision Making

Your personal data is not subject to automated decision-making or profiling.

13.0 Transfers to Third Parties

TOVALÉ may share your data with trusted third parties for business purposes. These may include:

Business partners, suppliers, and contractors
Group companies for admin or service provision
IT support and cloud-based software providers
Marketing service providers
Payment processors
Legal or professional advisors
Analytics and SEO providers

All third parties are bound by confidentiality and data protection agreements.

14.0 Transfers Outside of the UK

If personal data is transferred outside the UK:

It will only be processed under our instructions
Safeguards such as International Data Transfer Agreements or Article 49 exceptions will be in place

For more details, please refer to Section 16.

15.0 Right to Complaint

We take data privacy seriously. If you have concerns, please contact us at:

📧 Email: hello@tovaleofficial.com
📫 Post: TOVALÉ, Gateway House, Suite 3.5, Manchester, England, M22 5WY

Or contact the Information Commissioner’s Office (ICO):

ICO, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

16.0 Additional Information

If you have any questions or need further details on how your data is processed, please contact our Data Protection Officer or Compliance Team:

📧 Email: hello@tovaleofficial.com

17.0 Policy Review and Amendments

This policy was last reviewed on 23/08/25.

We may update this policy from time to time and will inform you of significant changes via our website or other appropriate means.