Privacy Policy.

Last updated: March 2025 · We keep this simple and honest.

Short version: We collect what we need to process your order. We don’t sell your data. We don’t share it with advertisers. We use it to serve you better.

1. Data We Collect

• Name, phone number, and delivery address — to process and deliver your order
• E-mail address — to send order confirmation and updates
• Payment information — processed and encrypted by Shopify; we never see or store card details
• Device and browsing data — via cookies for site functionality and analytics
• WhatsApp number — only if voluntarily provided for order tracking or marketing updates

2. How We Use Your Data

• To confirm, process, and deliver your order
• To contact you regarding order status
• To respond to customer service enquiries
• To send marketing communications — only if you have opted in
• To improve our website through anonymous analytics

3. Data Sharing

We do not sell, rent, or share your personal data for commercial purposes. We share data only with:

• Courier partners — your name, address, and phone number to facilitate delivery
• Shopify Inc. — as our e-commerce and payment platform provider
• Meta (Facebook/Instagram) — anonymised ad performance data only, if you have consented to analytics cookies

4. Data Retention

We retain your order and personal data for 3 years from your last purchase, for legal and accounting purposes. You may request deletion at any time — see Section 6.

5. Cookies

This site uses cookies for essential functionality, analytics, and marketing. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.

6. Your Rights

You have the right to request access to, correction of, or deletion of your personal data. To exercise these rights:

E-mail: support@team-toplyn.shop
We respond to all data requests within 14 business days.

7. Security

All data transmitted through this site is encrypted via SSL/TLS. Payment data is handled by Shopify’s PCI DSS-compliant infrastructure. We take reasonable measures to protect your data against unauthorised access.