Privacy policy

PRIVACY POLICY

This Privacy Policy explains how TOVYNX collects, uses, stores and shares your personal information when you visit our online store, make a purchase, contact us or otherwise use our services.

By using our store, you acknowledge that your personal information will be handled as described in this Privacy Policy.

WHO WE ARE

TOVYNX is the business responsible for the personal information collected through this online store.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us through our Contact Us page.

PERSONAL INFORMATION WE COLLECT

Depending on how you interact with our store, we may collect:

Your name
Billing and delivery address
Telephone number
Contact information
Order and transaction details
Products viewed, added to your basket or purchased
Returns, refunds and customer service communications
Device, browser and network information
IP address and approximate location
Information collected through cookies and similar technologies
Marketing preferences and communication history
Information used to prevent fraud and protect our store

Payment information is processed securely by Shopify and the relevant payment provider. TOVYNX does not directly store complete payment card details.

HOW WE COLLECT INFORMATION

We may collect personal information:

Directly from you when you place an order, create an account, complete a form or contact us
Automatically when you browse or use our store
From Shopify, payment providers, delivery companies and service providers
From advertising or analytics partners where permitted by law and based on your consent when required

HOW WE USE YOUR INFORMATION

We may use personal information to:

Process and fulfil your orders
Take and verify payments
Arrange delivery and provide order updates
Handle returns, refunds and customer enquiries
Maintain and improve our online store
Personalise your shopping experience
Detect and prevent fraud, misuse and security threats
Comply with tax, accounting and other legal obligations
Establish, exercise or defend legal claims
Send marketing communications when you have consented or when otherwise permitted by law
Measure store performance and advertising effectiveness, subject to applicable consent requirements

LEGAL BASES FOR PROCESSING

Where the EU GDPR, Irish data protection law or UK GDPR applies, we process personal information under one or more of the following legal bases:

Contract: Processing is necessary to accept, manage, deliver or refund your order.
Legal obligation: Processing is necessary to comply with tax, accounting, consumer protection or other legal requirements.
Legitimate interests: Processing is necessary to operate, secure and improve our business, prevent fraud and respond to customers, provided those interests do not override your rights.
Consent: We rely on your consent for certain marketing, advertising, analytics and non-essential cookies. You may withdraw your consent at any time.

HOW WE SHARE PERSONAL INFORMATION

We may share relevant personal information with trusted third parties that help us operate our store, including:

Shopify, which hosts and operates our online store
Payment processors and financial institutions
Suppliers, fulfilment partners and delivery companies
Customer service, technical support and security providers
Analytics, advertising and marketing providers, where permitted
Professional advisers, insurers, auditors and accountants
Government bodies, regulators or law enforcement when legally required

We only share information that is reasonably necessary for the relevant service or legal purpose.

We do not sell your personal information for money.

SHOPIFY

Our store is hosted by Shopify. Shopify processes personal information when you visit our store, place an order or use Shopify services.

Shopify may process information in countries outside your place of residence and may use information as described in its own privacy notices. You can learn more by visiting Shopify’s Consumer Privacy Policy.

SUPPLIERS AND ORDER FULFILMENT

We may share the information required to fulfil an order with suppliers and delivery partners. This can include your name, delivery address, telephone number and order details.

These partners receive only the information reasonably necessary to prepare, ship and deliver your purchase or resolve a problem with your order.

INTERNATIONAL DATA TRANSFERS

Some service providers, suppliers or delivery partners may process personal information outside Ireland, the European Economic Area or the United Kingdom.

Where required, appropriate safeguards will be used, such as an adequacy decision, approved contractual protections or another lawful transfer mechanism.

COOKIES AND SIMILAR TECHNOLOGIES

Our store uses cookies and similar technologies to:

Operate essential store functions
Remember your preferences and shopping basket
Maintain security and prevent fraud
Understand store performance
Support analytics, advertising and personalisation where permitted

Non-essential cookies will be used only after obtaining consent where required. You can manage your choices through the cookie banner or privacy settings available on our store.

Blocking certain cookies may affect how some parts of the store function.

MARKETING COMMUNICATIONS

We may send marketing communications only when we have an appropriate legal basis.

You may withdraw your consent or unsubscribe at any time by using the unsubscribe option in a marketing message or by contacting us through our Contact Us page.

Stopping marketing communications does not prevent us from sending necessary messages about an order or customer service request.

HOW LONG WE KEEP INFORMATION

We retain personal information only for as long as reasonably necessary to:

Fulfil the purposes described in this policy
Provide customer service
Maintain business and transaction records
Comply with tax, accounting and legal requirements
Resolve disputes and enforce agreements
Prevent fraud and maintain security

Retention periods vary depending on the type of information and the legal or operational reason for keeping it. When information is no longer required, it will be deleted, anonymised or securely disposed of where reasonably possible.

DATA SECURITY

We use reasonable administrative, technical and organisational measures designed to protect personal information.

However, no online transmission or storage system can be guaranteed to be completely secure. You should protect your account credentials and contact us if you believe your information or account has been compromised.

YOUR PRIVACY RIGHTS

Depending on your location and applicable law, you may have the right to:

Request access to your personal information
Request correction of inaccurate or incomplete information
Request deletion of your information
Restrict certain processing
Object to certain processing
Request a portable copy of information you provided
Withdraw consent at any time
Object to direct marketing
Submit a complaint to a data protection authority

These rights may be subject to legal limitations or exceptions.

To submit a privacy request, contact us through our Contact Us page. We may need to verify your identity before completing the request.

AUTOMATED DECISION-MAKING

Our service providers may use automated systems to help identify potentially fraudulent or high-risk transactions. Where applicable law provides rights concerning solely automated decisions with significant effects, you may contact us to request further information.

CHILDREN’S PRIVACY

Our store is not intended for children, and we do not knowingly collect personal information directly from children in violation of applicable law.

If you believe a child has provided personal information to us, please contact us through our Contact Us page.

THIRD-PARTY LINKS

Our store may contain links to websites or services operated by third parties. We are not responsible for their privacy practices. We recommend reviewing the privacy policy of any third-party service you visit.

CHANGES TO THIS POLICY

We may update this Privacy Policy when our practices, services or legal obligations change. The updated version will be posted on this page with a revised “Last updated” date.

COMPLAINTS

If you have concerns about how TOVYNX handles your personal information, please contact us through our Contact Us page so we can investigate.

You may also have the right to complain to the relevant supervisory authority, including:

The Data Protection Commission in Ireland
The Information Commissioner’s Office in the United Kingdom

CONTACT US

For privacy questions or requests, please contact TOVYNX through our Contact Us page.