Do Not Sell My Personal Information

Your Privacy Rights Under GDPR

Last updated: 18 December 2025

At Tosore, we respect your privacy and are committed to protecting your personal data. We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and, where applicable, the EU General Data Protection Regulation (GDPR) for customers in the European Union and European Economic Area (EEA).

Your Rights Under GDPR

If you are located in the UK, EU, or EEA, you have the right to:

  • Access your personal data and request information about how it is used
  • Rectify inaccurate or incomplete personal data
  • Request erasure of your personal data, where legally permitted
  • Restrict processing of your personal data in certain circumstances
  • Object to the processing of your personal data
  • Data portability, allowing you to receive your data in a commonly used format
  • Lodge a complaint with your local data protection authority

Personal Data We Collect

We may collect and process the following categories of personal data:

  • Contact details (such as name, email address, and phone number)
  • Shipping and billing addresses
  • Payment information (processed securely by third-party payment providers)
  • Order and purchase history
  • Technical data (such as IP address, browser type, and device information)

How We Use Your Data

Your personal data is processed for the following purposes:

  • To process and deliver orders
  • To provide customer support
  • To communicate about your order or account
  • To improve our website and services
  • To send marketing communications, where you have given consent

We do not sell or trade personal data. Information may be shared only with trusted service providers (such as payment processors and delivery partners) where necessary to fulfil orders and operate our services.

How to Exercise Your Rights

If you would like to exercise any of your GDPR rights or have questions about how your data is handled, please contact us at:

Email: info@tosore.com

We aim to respond to all requests in accordance with applicable data protection laws.