Privacy Policy

Last updated: 17 August 2026

Tommo’s Totes respects your privacy and is committed to protecting your personal information.

This Privacy & Cookie Policy explains what information we collect when you visit our website, contact us or place an order, how we use that information, who we may share it with and the choices you have regarding your personal data and cookies.

Who We Are

Tommo’s Totes is responsible for the personal information collected through this website and acts as the data controller for that information.

If you have any questions about this policy or how your personal information is used, please contact us:

Email: info@tommostotes.co.uk

Information We Collect

The information we collect depends on how you use our website.

When you place an order, create an account, make an enquiry or otherwise interact with us, we may collect information including:

  • Your name
  • Billing and delivery addresses
  • Email address
  • Telephone number
  • Details of the products you order
  • Order and transaction information
  • Account details, if you create an account
  • Messages or information you provide when contacting us
  • Information about how you use our website
  • Technical information such as your browser type, device type and referring website

Payment details are normally processed securely by our chosen payment provider. We do not generally receive or store your complete payment card details.

How We Use Your Information

We may use your personal information to:

  • Process and fulfil your orders
  • Take and manage payments
  • Arrange delivery of your purchases
  • Contact you about an order
  • Respond to enquiries and customer service requests
  • Manage returns, refunds or complaints
  • Maintain customer accounts
  • Prevent fraud and maintain the security of our website
  • Keep appropriate financial, tax and business records
  • Understand how visitors use our website
  • Improve our website, products and customer experience
  • Send marketing communications where you have chosen to receive them
  • Meet our legal and regulatory obligations

We will not sell your personal information to third parties.

Our Legal Bases for Using Your Information

Under UK data protection law, we must have a lawful reason for processing your personal information.

Depending on the circumstances, we may rely on:

Contract

We need certain information to process an order, take payment, deliver your products and provide the services you have requested.

Legal Obligation

We may need to retain or process certain information to comply with tax, accounting, consumer protection or other legal requirements.

Legitimate Interests

We may process information where it is reasonably necessary for the operation and improvement of our business, provided that our interests do not override your rights and freedoms.

This may include fraud prevention, website security, customer service and improving our services.

Consent

Where required, we will ask for your consent. This may include certain marketing communications and the use of non-essential cookies or similar technologies.

Where we rely on consent, you can withdraw it at any time.

Orders and Payments

When you place an order, we collect the information necessary to process your purchase.

This normally includes your name, contact details, billing address, delivery address and information about the products you have ordered.

Payment information is processed by the payment service used during checkout. Payment providers may process your information in accordance with their own privacy policies.

Deliveries

We may share your name, delivery address, telephone number, email address and relevant order information with delivery companies, couriers or fulfilment providers where necessary to deliver your order.

They should only receive the information reasonably required to provide the delivery service.

Who We Share Information With

We may share personal information with trusted organisations that help us operate our business, including:

  • Payment processors
  • Delivery and courier companies
  • Website hosting providers
  • Website and IT support providers
  • Email service providers
  • Analytics providers
  • Accountants and professional advisers
  • Government, regulatory or law enforcement authorities where legally required

Where another organisation processes personal information on our behalf, we take reasonable steps to ensure that appropriate data protection arrangements are in place.

How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet our legal, accounting and regulatory obligations.

Order, invoice and transaction information may need to be retained for several years to meet accounting and tax requirements.

Customer service enquiries and other correspondence may be retained where reasonably necessary to maintain records of our communications with you or resolve disputes.

When information is no longer required, we will delete or anonymise it where appropriate.

Keeping Your Information Secure

We take reasonable technical and organisational measures to protect personal information against accidental loss, misuse, unauthorised access, alteration or disclosure.

However, no internet-based service can guarantee complete security.

International Transfers

Some of the organisations that provide services to us may process information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that the information is protected in accordance with UK data protection law.

This may include relying on countries recognised as providing an adequate level of protection or using appropriate contractual safeguards.


Cookie Policy

Last updated: 17 August 2026

What Are Cookies?

Cookies are small files that websites can store on your computer, smartphone, tablet or other device.

They are commonly used to make websites work correctly, remember preferences, maintain shopping baskets and provide information about how visitors use a website.

We may also use similar technologies, such as local storage, scripts or tags.

The Types of Cookies We Use

Strictly Necessary Cookies

These cookies are required for the website to operate correctly.

For example, our online shop may use cookies to:

  • Remember products added to your basket
  • Maintain your shopping session
  • Allow the checkout process to work
  • Remember certain website or cookie preferences
  • Help protect the website against fraud or misuse

Because these technologies are necessary to provide services you have requested, they may not require consent.

Disabling these cookies through your browser may prevent parts of the website from working correctly.

Analytics Cookies

We use Google Analytics to help us understand how people use our website.

Google Analytics can provide information such as:

  • The number of visitors to the website
  • Pages that are viewed
  • How visitors arrived at the website
  • General device and browser information
  • How visitors interact with different parts of the website
  • Approximate geographic information

We use this information to understand website performance and improve the experience we provide to visitors.

Google Analytics may use cookies including:

_ga
Used to distinguish website visitors.

ga[ID]
Used to maintain information about a visitor’s session.

These cookies may remain on your device for up to two years, depending on our Analytics configuration and your browser settings.

Google Analytics 4 does not log or store visitors’ IP addresses.

Where consent is required for our use of Analytics cookies, these cookies will only be used in accordance with the choices you make through our cookie controls.

Cookie Preferences

When you first visit our website, you may be shown a cookie notice allowing you to manage your preferences.

You can choose whether to allow optional cookies such as analytics cookies.

You can also change or withdraw your preferences later using the cookie settings available on the website.

Rejecting optional cookies should not prevent you from using the core functionality of our website, although some non-essential features may work differently.

Managing Cookies Through Your Browser

Most web browsers also allow you to control cookies through their settings.

Depending on your browser, you may be able to:

  • View stored cookies
  • Delete existing cookies
  • Block some or all cookies
  • Prevent websites from storing new cookies
  • Configure different rules for different websites

Please be aware that blocking strictly necessary cookies may prevent parts of our website, including the shopping basket or checkout, from functioning correctly.

Marketing Communications

If you choose to receive marketing emails from us, we may use your contact information to send you news, offers, product updates or other relevant information.

You can unsubscribe from marketing communications at any time by using the unsubscribe option included in our emails or by contacting us.

Unsubscribing from marketing will not prevent us from contacting you about an existing order or another service-related matter.

Your Data Protection Rights

Depending on the circumstances, UK data protection law gives you rights relating to your personal information.

These may include the right to:

  • Ask for a copy of the personal information we hold about you
  • Ask us to correct inaccurate or incomplete information
  • Ask us to delete your information in certain circumstances
  • Ask us to restrict how your information is used
  • Object to certain types of processing
  • Request the transfer of certain information to another organisation
  • Withdraw consent where processing is based on consent

If you wish to exercise any of these rights, please contact us.

We may need to confirm your identity before dealing with certain requests.

Complaints

If you are unhappy with how we have handled your personal information, please contact us first so that we have an opportunity to investigate your concerns.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator responsible for data protection.

Links to Other Websites

Our website may contain links to websites operated by other organisations.

We are not responsible for the privacy practices, security or content of third-party websites. We recommend reviewing the privacy policy of any external website you visit.

Changes to This Policy

We may update this Privacy & Cookie Policy from time to time to reflect changes to our website, the services we use or applicable laws and regulations.

The latest version will always be published on this website, with the date of the most recent update shown at the top of the page.

Contact Us

If you have any questions about this Privacy & Cookie Policy or how we use your personal information, please contact:

Tommo’s Totes
Email: info@tommostotes.co.uk