Privacy Policy

Privacy Policy for Tidy Toys

1. Introduction

• At Tidy Toys, we are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, and protect your information when you use our website and services.

2. Data Controller

• The data controller responsible for your personal data is:
  • Tidytoys.dk 
  • info@tidytoys.dk
  • +4591850791

3. Personal Data We Collect

• We may collect and process the following types of personal data:
  • Contact Information: Name, email address, phone number, shipping address.
  • Payment Information: Payment method details (e.g., credit card number), billing address. Note: We do not store full payment card details; these are processed by our payment provider.
  • Account Information: Username, password, order history.
  • Usage Data: Information on how you use our website, such as IP address, browser type, and pages visited.
  • Communication Data: Records of any communications between you and us (e.g., emails, chat support).

4. How We Collect Your Data

• We collect your personal data in the following ways:
  • Directly from You: When you place an order, create an account, sign up for our newsletter, or contact us.
  • Automatically: Through cookies and similar tracking technologies when you browse our website.
  • From Third Parties: In some cases, we may receive data from third-party partners, such as payment processors or social media platforms.

5. How We Use Your Data

• We use your personal data for the following purposes:
  • Order Processing: To process and deliver your orders, manage payments, and handle returns.
  • Customer Service: To respond to your inquiries, provide support, and manage your account.
  • Marketing: To send you promotional offers and updates, if you have opted in to receive them. You can unsubscribe from our marketing communications at any time.
  • Website Improvement: To analyze and improve the functionality and user experience of our website.
  • Legal Compliance: To comply with legal obligations, such as tax and accounting regulations.

6. Legal Basis for Processing

• Under GDPR, we must have a legal basis for processing your personal data. The legal bases we rely on include:
  • Contractual Necessity: Processing your data to fulfill our contract with you (e.g., delivering your order).
  • Consent: Where you have given explicit consent for marketing communications or other specific activities.
  • Legitimate Interests: Processing data for legitimate business purposes (e.g., improving our services) while ensuring that your rights and interests are protected.
  • Legal Obligations: Where we need to comply with a legal requirement.

7. Data Sharing and Disclosure

• We may share your personal data with the following parties:

  • Service Providers: Third-party companies that help us operate our business (e.g., payment processors, shipping companies, IT support).
  • Suppliers: As a dropshipping store, your data may be shared with our suppliers to fulfill your orders.
  • Legal Authorities: If required by law, we may disclose your data to governmental authorities, law enforcement, or legal advisors.

• We do not sell or rent your personal data to third parties for their marketing purposes.

8. International Data Transfers

• Some of our service providers and suppliers may be located outside the European Economic Area (EEA). If we transfer your personal data to countries outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with GDPR.

9. Data Retention

• We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, or as required by law. For example:
  • Order and Account Information: Retained for 5 years for tax and legal purposes.
  • Marketing Data: Retained until you opt out of receiving marketing communications.
  • Cookies and Tracking Data: Retained according to our Cookie Policy.

10. Your Rights

• Under GDPR, you have the following rights regarding your personal data:
  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request corrections to your personal data if it is inaccurate or incomplete.
  • Right to Erasure: You can request the deletion of your personal data, subject to certain conditions.
  • Right to Restrict Processing: You can request that we limit the processing of your personal data.
  • Right to Data Portability: You can request that we transfer your data to another organization, where technically feasible.
  • Right to Object: You can object to the processing of your data for direct marketing or other purposes based on legitimate interests.
  • Right to Withdraw Consent: If we rely on your consent for processing, you can withdraw it at any time.
  • Right to Lodge a Complaint: If you believe that we have violated your rights, you have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

11. Security of Your Data

• We take appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. This includes secure servers, encryption, and access controls. However, please note that no method of data transmission over the internet is entirely secure.

12. Cookies and Tracking Technologies

• Our website uses cookies and similar technologies to improve your browsing experience, analyze site traffic, and personalize content. 

13. Changes to This Privacy Policy

• We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on our website, and your continued use of our services constitutes acceptance of the updated policy.

14. Contact Us

• If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:
  • info@tidytoys.dk
  • +4591850791