PRIVACY POLICY

We take your privacy with earnest intent which is why we take steps to ensure your privacy is always protected. We believe it is important to let you know what information is collected by our website www.totintor.com (the “website”), for what reasons we collect the information, and how we use it. Capitalized words not otherwise defined herein shall have the meaning given to such terms in the terms of use. The website does collect personal data, which enables us to provide you with the uttermost personalized shopping experience. This also allows us to contact you regarding your purchases and/or for marketing purposes.

It is crucial to highlight that we do not sell your personal data, or any other data collected to anyone.

HOW DO WE COLLECT INFORMATION?

We collect information about you when you engage in the following ways:

• When you place an order or contact us.
• When you subscribe to our newsletters and other marketing platforms.
• When you register on our site you will be asked to submit some personal information, such as your name and contact information.
• When you ask for information, provide a review or feedback, or comment on articles published on the website.

 

When you register your personal information with the website, you consent to the use of your personal data according to this privacy policy and those consents which you approve during the registration process and/or by your continued use of the website

NON-PERSONAL DATA WE COLLECT

Subject to your consent to the terms of this privacy policy, we will collect the internet browser you use, your number of visits to the website, your average time spent on website, pages viewed, etc. We use this information to improve usability and to improve content and functionality.

WHAT TYPES OF PERSONAL DATA DO WE COLLECT?

• Personal Information: Name, email address, billing and shipping addresses, phone number, purchase history, date of birth ,
• Device Information: IP address, browser type, operating system.
• Behavioral Data: Browsing patterns on our website, products viewed, interactions with website elements.
• Other: Potentially information related to conflict mineral sourcing, AML verification (if applicable).

The personal data we collect includes contact information such as date of birth, product preferences and payment information, email address and home address, and in addition, we may collect certain personal data from external sources (referred to as "personal data"). We do not store any payment information past the point of purchase. Your email address may be used for marketing and offers we think are most relevant for you, unless you chose otherwise. We do only collect the information stated which is classified as ‘identifiers’ by the CCPA and/or GDPR.

HOW WE USE YOUR PERSONAL DATA?

Personal data allows us to provide you with the following:

• Order Processing and Fulfillment: To process transactions, ship your items, and provide customer support.
• Website Personalization and Analytics: To understand how you use our site, improve user experience, and analyze website performance.
• Marketing and Promotions: To send you communications about new products, promotions, or events only if you have opted-in for such communications.
• Fraud Prevention and Security: To protect our website, business, and customers from fraudulent activity or security risks.
• Compliance with Laws and Regulations: To comply with legal obligations, including potential reporting on conflict minerals or AML programs.
• Personalized shopping experience which targets information, services, content, and offers that are relevant to you and your online shopping habits and needs
• To alert you of any administrational, product, or service changes.
• For social media, promotions, or marketing events, etc.
• To improve usability, content, and functionality.

 

"We will retain your information solely to the extent necessary to fulfill our legitimate interests, including marketing, fraud prevention, and record-keeping purposes. We will not sell your personal data or other collected data to any third party. Your data will be stored securely. You may request the removal of your data by following this link and selecting 'Something Else' and then 'Data Protection' under the 'topic' field."

We may disclose your personal information if required by law or if you violate our Terms of Service.

SHARE OF INFORMATION

We share your information with trusted third-party service providers necessary to operate our business. These include:

• Payment gateways
• Shipping carriers
• Email marketing platforms

We ensure these third parties maintain appropriate data security and only use your data for the specified purposes.

 

 

SHOPIFY

This webstore is hosted on Shopify. Shopify provides us with the online e-commerce platform that allows us to sell our products and services to you.

Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

Payment

• When you opt for a direct payment gateway during checkout, Shopify securely stores your encrypted credit card data in compliance with the Payment Card Industry Data Security Standard (PCI-DSS). This data is retained solely for the duration necessary to process your transaction and is subsequently deleted.
• All direct payment gateways strictly follow PCI-DSS standards, overseen by the PCI Security Standards Council – a collaborative initiative of leading card brands like Visa, MasterCard, American Express, and Discover.
• PCI-DSS requirements ensure the secure management of credit card information by our store and all associated service providers.
• For further details, please consult Shopify's Terms of Service.

(https://www.shopify.com/legal/terms) or Privacy Statement (https://www.shopify.com/legal/privacy).

THIRD-PARTY SERVICES

• Third-party providers we utilize generally collect, use, and disclose your information only to the degree required for them to fulfill their services to us.
• Specific third-party services (such as payment gateways and transaction processors) have their own privacy policies. These govern the information we must provide for your purchase-related transactions.
• We strongly advise reviewing these third-party privacy policies. This will clarify how they will manage your personal information.
• Be aware that certain providers may operate in jurisdictions distinct from yours or ours. If you engage a third-party service, your information may fall under the laws of the jurisdiction(s) where that provider or its facilities reside.
• For instance, if you are located in Canada and your transaction involves a US-based payment gateway, your personal information used for the transaction may be subject to disclosure under US laws, including the Patriot Act.
• Upon leaving our store's website or being redirected to a third-party site/application, you are no longer bound by our Privacy Policy or Terms of Service.

Links: Clicking links within our store may redirect you away from our site. We are not liable for the privacy practices of external sites. We urge you to familiarize yourself with their privacy statements.

DATA SECURITY

The security of your Personal Data is important to us. We implement SSL (Secure Sockets Layer): Shopify employs SSL certificates to ensure encrypted communication between users and their servers, ensuring that data transmitted between the user and the website remains private and secure.

Secure Servers: Shopify utilizes highly secure servers to prevent unauthorized access to data. These servers are protected by various layers of security to ensure the integrity and reliability of the data.

Firewalls: Shopify employs advanced firewall technologies to protect its servers from unauthorized access and malicious activities. Firewalls are configured to filter and block unwanted traffic, further safeguarding data security.

Data Encryption: Shopify employs strong data encryption to ensure that sensitive data is stored securely. This typically includes AES (Advanced Encryption Standard) encryption, which is one of the most secure encryption methods available today.

Payment information is transferred in a secure manner to our payment providers. However, no method of data transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee the absolute security of your personal data. If you have any questions or security concerns, please contact us using to.tintor@gmail.com

YOUR RIGHTS

• Right to Access, Correct, or Delete: You have the right to access, correct, or request deletion of your personal data (subject to certain exceptions).
• Right to Restrict Processing or Object: You may have the right to restrict or object to certain processing of your data.
• Right to Data Portability: You may have the right to receive your data in a portable format.
• Right to Opt-Out of Marketing: You can unsubscribe from marketing communications at any time.
• Right to Opt-Out of "Sale": Under the CCPA, you have the right to opt-out of the "sale" of your personal information.

CCPA Rights (California Residents)

 

You may contact us at any time, and request:

• To access any personal data relating to you in which we hold.
• To access your data without any personal charge.
• To know whether we share or sell your personal data.
• That we do not sell your personal data.
• That we delete your personal data.
• To exercise these rights without it affecting the services and prices we offer.

 

Your email should include adequate details of your request and you may be further requested to provide additional details in order to authenticate your identity for us to thereby accommodate your requests. Please note that these rights are not definite and requests are subject to any applicable legal requirements.

The CCPA grants California residents specific rights regarding their personal information. Here's how you could address these in your privacy policy:

• Right to Know: California residents can request to know the categories and specific pieces of personal information we collect, use, disclose, and sell.
• Right to Delete: California residents can request that we delete their personal information, subject to certain exceptions.
• Right to Opt-Out of Sale: California residents have the right to opt-out of the "sale" of their personal information.
• Right to Non-Discrimination: We will not discriminate against California residents for exercising their rights under the CCPA.

Exercising Your CCPA Rights

To submit a request related to your rights under the CCPA, please contact us.

We will verify your request and process it, after which we will let you know more about it. We strive to respond within 45 days of receiving verifiable requests.

GDPR Rights (EU Residents)

If you are a resident of the European Union, the General Data Protection Regulation (GDPR) grants you certain rights regarding your personal data. These rights include:

• Right to Access: You have the right to know what personal data we collect about you and how we use it. You can request a copy of your personal data.
• Right to Rectification: You have the right to correct any inaccurate or incomplete personal data we hold about you.
• Right to Erasure ("Right to be Forgotten"): Under certain circumstances, you have the right to request that we delete your personal data.
• Right to Restriction of Processing: You may have the right to request that we limit the way we use your personal data.
• Right to Data Portability: You may have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit this data to another data controller.
• Right to Object: You may have the right to object to the processing of your personal data in certain situations, including for direct marketing purposes.

Exercising your GDPR Rights

To exercise any of your rights under the GDPR, please contact us at info@totintor.com. We will verify your identity before processing your request. We aim to respond to valid requests within one month, though complex requests may require additional time.

Additional Notes for EU Residents

• Legal Basis for Processing: We process your personal data under various legal bases depending on the circumstances, including for the fulfillment of contracts (e.g., processing orders), legitimate interests (e.g., fraud prevention), and where you have given us your express consent (e.g., for certain marketing communications).
• International Transfers: If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
• Data Protection Authority: You have the right to lodge a complaint with a supervisory authority in your EU country of residence if you believe that the processing of your personal data infringes upon the GDPR.

Consent Management and Withdrawal

Where we rely on your consent as the legal basis for processing your personal data (for example, to send you marketing emails), you have the right to withdraw your consent at any time. Here's how you can manage your consent preferences:

• Marketing Communications: Every marketing email will include a prominent "unsubscribe" link. Clicking this link will automatically remove you from our mailing list.
  
  
• [Other Consent-Based Activities]: If you have consented to other data uses (e.g., participation in surveys, personalization features), you can withdraw that consent by sending us an email.
• Cookie Preferences: You can control the use of non-essential cookies on our website through our cookie consent tool which is shown via banner on the site or a using the settings button.

Important Notes

• Withdrawal May Not Affect Past Processing: If you withdraw consent, please note that it may not affect the lawfulness of processing based on your consent before it was withdrawn.
• Some Processing Still Necessary: We may need to retain certain information for legal purposes, such as record-keeping or to complete transactions that began before the withdrawal of consent.

INTERACTION WITH THIRD PARTY PRODUCTS

This privacy policy solely addresses our own practices. It does not extend to companies we do not own or control, nor to third-party services. We are not liable for the privacy practices of these external entities. Please carefully review the policies of any third-party service before engaging with them.

CHILDREN PRIVACY

Our services are not intended for children under the minimum age for providing consent in the jurisdiction they reside in (such as 16 in certain countries in the EU; “Legal Age”), and we do not knowingly obtain personal information from children under the Legal Age without parental consent. If we learn that we have collected such information, we will delete it as quickly as possible. If you are aware of any personal information in our possession which may relate to children under the Legal Age, please contact us.

COOKIES

Our website uses cookies to improve functionality and your experience. You can manage your cookie preferences through cookie/consent banner at the bottom of our website homepage.

• The website places small packets of data or „cookies“, onto users’ computers and mobile devices. It is a standard practice that online businesses apply. Cookies are an integral part of assisting the website in providing a high quality online shopping experience for our users.
• With cookies enabled, we can determine the buying and browsing behavior of all users, and we can personalize content and ads, to provide social media features and analyze traffic.
• Users are able to disable cookies from their browser, if they wish too. However, with disabling cookies we may be unable to provide you with some of the services offered by the website
• We may also share information about your use of our website with our social media, advertising and analytics partners, who may combine it with other information you provided to them or that they have collected from your use of their services.
• Your use of the website shall mean that you consent to our Cookie Policy described here.

MANAGE COOKIES PREFERENCES

Here is a list of cookies that we use. We’ve listed them here so you that you can choose if you want to opt-out of cookies or not:

_session_id, unique token, sessional, allows Shopify to store information about your session
(referrer, landing page, etc).
_shopify_visit, no data held, persistent for 30 minutes from the last visit, used by our website provider’s internal stats tracker to record the number of visits
_shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, counts the number of visits to a store by a single customer.
cart, unique token, persistent for 2 weeks, stores information about the contents of your cart.
_secure_session_id, unique token, sessional
storefront_digest, unique token, indefinite if the shop has a password, this is used to determine if the current visitor has access.

Update privacy preferences.

UPDATES TO OUR PRIVACY POLICY

We may update this Privacy Policy from time to time. We will notify you of significant changes via email you have provided us with. For minor or any changes you can also occasionally check our privacy policy to review current policy.

Contact Us If you have questions or wish to exercise your data privacy rights, please contact us at: to.tintor@gmail.com