Privacy policy

Privacy Policy

Last Updated: September 7, 2026

This Privacy Policy describes how Tolhom (the "Site", "we", "us", or "our") collects, uses, and discloses your Personal Information when you visit or make a purchase from https://tolhom.com/.

Contact After reviewing this policy, if you have additional questions, want more information about our privacy practices, or would like to make a complaint, please contact us by e-mail at: marketing@tolhom.com.

  1. Collecting Personal Information When you visit the Site, we collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. We may also collect additional information if you contact us for customer support. In this Privacy Policy, we refer to any information about an identifiable individual as "Personal Information".

Device Information:

  • Purpose of collection: To load the Site accurately for you, and to perform analytics on Site usage to optimize our Site.

  • Source of collection: Collected automatically when you access our Site using cookies, log files, web beacons, tags, or pixels.

  • Disclosure for a business purpose: Shared with our primary processor Shopify and analytics providers.

  • Personal Information collected: Version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Site.

Order Information:

  • Purpose of collection: To provide products or services to you to fulfill our contract, process payment information, arrange for shipping (including multi-package dispatches), provide invoices/order confirmations, communicate with you, screen orders for potential risk or fraud, and send marketing communications when aligned with your preferences.

  • Source of collection: Collected directly from you.

  • Disclosure for a business purpose: Shared with our processor Shopify, authorized payment gateways, fulfillment centers, and logistics carriers.

  • Personal Information collected: Name, billing address, shipping address, payment information (including credit card numbers processed via secure third-party gateways), email address, and phone number.

Customer Support Information:

  • Purpose of collection: To provide customer support and resolve order or delivery inquiries.

  • Source of collection: Collected directly from you.

  1. Minors The Site is not intended for individuals under the age of 16. We do not intentionally collect Personal Information from children. If you are a parent or guardian and believe your child has provided us with Personal Information, please contact us at marketing@tolhom.com to request deletion.

  2. Sharing Personal Information & Third-Party Service Providers We share your Personal Information with service providers to help us provide our services and fulfill our contracts with you, as described above:

  • E-Commerce Platform: We use Shopify to power our online store. You can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.

  • Payment Processing: Your payments are processed securely through authorized PCI-DSS compliant third-party payment gateways (including Oceanpayment and PayPal). We do not store full credit card details on our servers.

  • Fulfillment & Logistics: We share your shipping address and contact details with local fulfillment partners and carriers (such as Amazon Logistics, USPS, DHL, and local postal services) to deliver your orders.

  • Compliance with Laws: We may share your Personal Information to comply with applicable laws and regulations, respond to a subpoena, search warrant, or other lawful requests, or protect our rights.

  1. Behavioural Advertising & Marketing We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you:

  • Analytics: We use tools like Google Analytics and Meta Pixels to help us understand how customers use the Site. You can opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

  • Advertising Partners: We share information about your site usage and purchases with advertising partners to show relevant ads on other websites.

Opt-Out Links for Targeted Advertising:

  1. Legal Basis for Processing (GDPR) Pursuant to the General Data Protection Regulation ("GDPR"), if you are a resident of the European Economic Area ("EEA") or the United Kingdom, we process your personal information under the following lawful bases:

  • Your consent;

  • The performance of the contract between you and the Site;

  • Compliance with our legal obligations;

  • To protect your vital interests;

  • For our legitimate business interests, which do not override your fundamental rights and freedoms.

  1. Retention When you place an order through the Site, we will retain your Personal Information for our accounting and legal records unless and until you ask us to erase this information.

  2. Automated Decision-Making If you are a resident of the EEA, you have the right to object to processing based solely on automated decision-making. We DO NOT engage in fully automated decision-making that has a legal or otherwise significant effect using customer data.

Our platform processor (Shopify) uses limited automated decision-making strictly to prevent fraud (e.g., temporary IP or credit card blacklisting associated with repeated failed transactions).

  1. Selling & Sharing Personal Information (CCPA/CPRA) Our Site does not sell or share Personal Information for monetary compensation. However, we use cookies and tracking tools for interest-based advertising as described in the Behavioural Advertising section.

  2. Your Rights (GDPR & CCPA)

  • EEA/UK Residents: You have the right to access, port, correct, update, or erase the Personal Information we hold about you. Your information will initially be processed in Ireland and transferred outside of Europe (including to Canada and the US) for storage and processing.

  • California Residents: You have the right to access (Right to Know), port, correct, or erase your Personal Information. You may also designate an authorized agent to submit requests on your behalf.

To exercise any of these rights, please contact us at marketing@tolhom.com.

  1. Cookies We use essential, analytical, and advertising cookies to improve your browsing experience. Most web browsers automatically accept cookies, but you can control or block cookies through your browser settings (e.g., https://www.allaboutcookies.org). Please note that blocking cookies may affect site functionality and cart persistence.

  2. Do Not Track Because there is no consistent industry standard for "Do Not Track" signals, we do not alter our data collection practices when we detect such a signal from your browser.

  3. Changes & Complaints We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes.

If you wish to make a complaint, please contact us at marketing@tolhom.com. If you are not satisfied with our response, EEA residents have the right to lodge a complaint with their local Data Protection Authority.