Privacy Policy

1. Who we are

TotnKids is operated by [Company Name Limited], a company registered in England and Wales (company number TBD). Our registered address is [Address TBD]. Our VAT number is [TBD]. For privacy queries, contact privacy@totnkids.com.

2. What information we collect

• Personal data you provide: name, email, billing/shipping address, phone (optional), payment information (handled by Shopify Payments — we don't store card details).
• Behavioural data: pages visited, products viewed, cart actions, browser type, IP address.
• Marketing preferences: email subscription status, SMS subscription status (where applicable).
• Customer service interactions: any communications you send us.

3. Legal bases for processing

• Contract: when you place an order, we process your data to fulfil it.
• Consent: when you sign up for marketing emails or accept non-essential cookies.
• Legitimate interest: for service improvement, fraud prevention, and basic analytics.
• Legal obligation: tax records, regulatory compliance.

4. Cookies

• Functional cookies (always on): cart, checkout, login session.
• Analytics cookies (with consent): Shopify Analytics, Google Analytics.
• Marketing cookies (with consent): Klaviyo, Meta Pixel, TikTok Pixel.
• Manage preferences via the cookie banner on first visit, or update anytime via Settings.

5. Your rights

• Access: request a copy of your data.
• Rectification: correct inaccurate data.
• Erasure: request deletion (subject to legal retention requirements).
• Portability: receive your data in machine-readable format.
• Objection: object to specific processing activities.
• Marketing opt-out: unsubscribe via any marketing email or contact us directly.

6. Data retention

• Order data: 7 years (UK tax requirement).
• Marketing data: until you unsubscribe, then deleted within 30 days.
• Customer service tickets: 2 years from resolution.

7. Who we share data with

• Shopify (commerce platform).
• Klaviyo (email marketing, with consent).
• Cloudflare (CDN, security).
• Our 3PL fulfilment partner (shipping data only).
• Loop Returns (returns processing).
• Customer service tools (Gorgias).
• Legal/regulatory authorities when required by law.

8. International transfers

Most processors are UK or EU-based. Where data is transferred outside the UK/EU, we use Standard Contractual Clauses or rely on adequacy decisions.

9. Security

We use industry-standard encryption (TLS), access controls, and security monitoring. Payment data is processed by PCI-compliant providers.

10. Children's data

Our products are for babies and young children, but accounts are held by adult guardians. We don't knowingly collect data from anyone under 16.

11. Changes to this policy

We'll update the “Last updated” date and notify subscribers of material changes by email.

12. Complaints

Contact privacy@totnkids.com first. You can also complain to the UK Information Commissioner's Office at ico.org.uk or 0303 123 1113.