Privacy policy
Last updated: August 26, 2025
This Privacy Policy describes how Tobouy (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from tobouy.com (the "Site") or otherwise communicate with us (collectively, the "Services").
By accessing or using our Services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of our Services.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. Updates will be posted on this page with a revised “Last updated” date.
Information We Collect
We collect personal information in the following ways:
- Directly from you: name, email, phone, shipping/billing address, payment details, login credentials, support inquiries.
- Automatically: device and browser data, IP address, usage information, and cookies.
- From third parties: Shopify, payment providers, advertising partners (Google, Meta, etc.), and analytics tools.
How We Use Your Information
- To process and deliver orders, manage accounts, and provide Services.
- To communicate with you (order updates, customer support).
- For marketing, personalization, and advertising (with your consent where required).
- For fraud prevention, security, and legal compliance.
Cookies and Tracking
We use cookies and similar technologies to:
- Enable core functionality (e.g., shopping cart, checkout).
- Improve site performance and analytics.
- Personalize ads and promotions (with your consent in applicable regions).
You can manage cookie preferences in your browser settings or through our cookie banner (EEA/UK users must provide consent for non-essential cookies).
Disclosure of Personal Information
We may share your information with:
- Service providers (Shopify, payment processors, logistics/shipping partners, IT providers).
- Business partners for marketing/advertising.
- Affiliates within our corporate group.
- Legal authorities where required by law.
We do not sell your personal data.
GDPR & EEA/UK Users’ Rights
If you are located in the European Economic Area (EEA) or United Kingdom (UK), the following applies:
Legal Bases for Processing
- Contractual necessity: fulfilling your purchases.
- Legitimate interests: fraud prevention, site improvement, direct marketing.
- Legal obligations: tax, accounting, regulatory compliance.
- Consent: marketing communications, non-essential cookies.
International Data Transfers
Your data may be transferred outside the EEA/UK (e.g., to Shopify, Google, Meta). We use Standard Contractual Clauses (SCCs) or equivalent safeguards to ensure compliance.
Your GDPR Rights
You may request to:
- Access your data.
- Correct or update data.
- Delete your data.
- Restrict or object to processing.
- Withdraw consent at any time.
- Request data portability.
- File a complaint with your local Data Protection Authority (DPA).
To exercise your rights, contact us at support@tobouy.com. We will respond within 30 days as required by GDPR.
Data Retention
We retain personal data as long as necessary to provide Services and comply with legal obligations:
- Order/transaction data: up to 6 years (for tax/regulatory compliance).
- Marketing data: until you unsubscribe or withdraw consent.
- Other data: deleted or anonymized when no longer needed.
Security
We use industry-standard safeguards to protect your data, but no system is 100% secure. Please protect your login credentials and notify us immediately of any suspected account compromise.
Children’s Data
Our Services are not directed to children under 16. We do not knowingly collect data from minors.
International Users
By using our Services outside the United States, you acknowledge your data may be processed and stored abroad.
Contact Us
If you have questions about this Privacy Policy, your data, or to exercise your rights, contact us:
📍 2830 Jackson Ave 5L, Long Island City, NY 11109, United States