Privacy Policy for tomatograffiti.com

1. Who We Are

Our website address is: https://www.tomatograffiti.com/.

• We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR).

2. What Personal Data We Collect and Why

• Order Information: When You place an Order, We collect Your name, email address, shipping address, and phone number. We use this information to fulfil Your contract, process payment, and deliver the Goods. Legal basis: Performance of a contract.
• Payment Information: All payments are processed by secure third-party payment processors (e.g., Stripe, PayPal). We do not store Your card details on our servers.
• Communication Data: If You contact Us, We keep a record of that correspondence. Legal basis: Legitimate interests (to respond to and manage customer queries).
• Technical & Usage Data: We use Cookies to analyse traffic and improve our site. For more details, see our Cookie section below. Legal basis: Consent for non-essential cookies.

3. How We Share Your Data

• We share Your data with third parties only to the extent necessary to run our business and fulfil your order:
  • Payment Processors: (e.g., Stripe, PayPal) to take payments.
  • Delivery Companies: (e.g., Royal Mail, DPD, international couriers) to deliver your order. For international orders (Custom Goods), this will involve transferring your address data outside the UK.
  • Print-on-Demand Partner (For Print Shop): If We use a third-party UK-based printer to fulfil Print Shop orders, We will share Your design and shipping address with them under a data processing agreement.
  • Service Providers: Such as web hosting, email marketing, and analytics providers.

4. International Transfers

• For international orders of Custom Goods, Your name and address will be transferred to the chosen courier service and may therefore be transferred outside the UK. We rely on the courier’s compliance with UK data protection law for these transfers.

5. Data Retention

• We will retain Your personal data only for as long as is necessary for the purposes set out in this policy, including to fulfil legal, accounting, or reporting requirements (e.g., retaining invoice data for HMRC for 6 years).

6. Your Rights Under UK GDPR

• You have the right to:
  • Access the personal data We hold about You.
  • Request correction of inaccurate data.
  • Request erasure of Your data (“right to be forgotten”).
  • Object to processing or request restriction of processing.
  • Data portability.
  • Withdraw consent (where processing is based on consent).
• To exercise any of these rights, please contact us at email:hello@tomatograffiti.com
• You have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO).

7. Cookies

• Our site uses cookies to distinguish You from other users, help Us provide a better experience, and analyse site traffic.
• You can set Your browser to refuse all or some browser cookies. However, blocking essential cookies may affect how the website functions.

8. Changes to This Policy

• We may update this policy from time to time. The current version will always be posted on our Website.

9. How to Contact Us

• For questions about this policy or your data, please email us at email:hello@tomatograffiti.com