Privacy policy

Privacy Policy

Introduction

Toby’s Emporium (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website, place orders, or interact with us.

Business contact:
Toby’s Emporium
Victoria Centre
Nottingham, NG1
Email: infotobysemporium@gmail.com

Information We Collect

We may collect the following personal information:

  • Name, email address, phone number, and shipping/billing address

  • Payment information (processed securely via Shopify/third-party providers)

  • Information about your orders and preferences

  • Device and usage information via cookies and analytics tools (e.g., Google Analytics)

How We Use Your Information

We use your information to:

  • Fulfil your orders and provide customer service

  • Process payments securely

  • Improve our website, products, and services using analytics data

  • Comply with legal obligations

We do not sell your personal information to third parties.

Cookies & Tracking

We use cookies and similar technologies to enhance your browsing experience and collect analytics data:

  • Essential cookies: required for site functionality

  • Analytics cookies: Google Analytics to monitor site traffic and performance

You can manage or disable cookies in your browser settings. Disabling cookies may affect site functionality.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Contractual necessity: to process and deliver your orders

  • Legitimate interests: to improve our website and services

  • Legal obligations: to comply with UK laws and regulations

Sharing Your Information

We may share your personal information with trusted third parties to:

  • Fulfil orders (e.g., courier services like Evri)

  • Process payments (e.g., Shopify Payments)

  • Provide technical support or analytics services (e.g., Google Analytics)

We ensure that any transfers of personal data outside the UK or EEA are protected by appropriate safeguards.

Retention of Data

We retain your personal information for as long as necessary to:

  • Fulfil orders and provide customer service

  • Comply with legal obligations

  • Resolve disputes or enforce agreements

Once no longer needed, data will be securely deleted or anonymised.

Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data

  • Request correction or deletion of your data

  • Restrict or object to processing

  • Withdraw consent where processing is based on consent

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, contact us at: infotobysemporium@gmail.com

Security

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction.

Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with the date of revision.

Last updated: March 2026