Privacy policy
This Privacy Policy explains how TOOCAA (“TOOCAA”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you visit our website, create an account, place an order, contact us, or otherwise use our services.
By accessing or using our website or services, you acknowledge that you have read and understood this Privacy Policy.
Please note that our store is operated by Shopify. Shopify may process certain personal data on our behalf for hosting, payment, order management, and related services. You may also review Shopify’s privacy-related information for more details about its data processing practices.
1. Personal Data We Collect
We may collect the following categories of personal data:
Information you provide directly:
- Name
- Email address
- Phone number
- Shipping and billing address
- Account login details
- Order and payment-related information
- Communications you send to us, including customer support inquiries, emails, and other correspondence
Information collected automatically: When you visit our website or use our services, we may automatically collect certain technical information, such as:
- IP address
- Browser type
- Device type and model
- Operating system
- Unique device identifiers
- Website usage data, including pages visited, time spent, and interaction records
- Server log information
Marketing and subscription information: If you subscribe to our newsletter, SMS messages, or other promotional communications, we may collect your contact details and preferences in accordance with applicable law and your consent where required.
2. How We Use Personal Data
We use personal data for the following purposes:
- To create and manage your account
- To process and fulfill orders
- To provide customer service and technical support
- To communicate with you regarding your orders, account, or inquiries
- To operate, maintain, improve, and secure our website and services
- To analyze website performance and user experience
- To detect, prevent, and investigate fraud, abuse, security incidents, or other unlawful activity
- To send marketing communications where permitted by law or based on your consent
- To comply with legal obligations and enforce our terms and policies
We will only process your personal data where we have an appropriate legal basis to do so under applicable law.
3. Cookies and Analytics
We use cookies and similar technologies to operate our website, remember your preferences, analyze traffic, and improve user experience. These technologies may include:
- Essential cookies necessary for website functionality
- Preference cookies to remember user settings
- Analytic cookies, including cookies used by Google Analytics, to understand how visitors use our website
You can control or disable cookies through your browser settings. Please note that some website features may not function properly if cookies are disabled. Where required by applicable law, we will request your consent before placing non-essential cookies on your device.
4. Marketing Communications
We may send you promotional emails, SMS messages, or other marketing communications if you have subscribed to receive them or where otherwise permitted by law.
You may opt out of marketing communications at any time by:
- Clicking the unsubscribe link in our marketing emails
- Following the opt-out instructions in SMS messages
- Contacting us directly
Opting out of marketing messages will not affect transactional or service-related communications, such as order confirmations or customer support messages.
5. How We Share Personal Data
We do not sell your personal data for monetary consideration. We may share personal data with the following categories of third parties where necessary:
- Website hosting and e-commerce platform providers
- Payment processors
- Logistics and shipping providers
- Customer support service providers
- IT, cloud storage, and security service providers
- Analytics and marketing service providers
- Professional advisors (legal, accounting, or compliance)
- Government authorities or regulators where required by law
We require third-party service providers to handle data in accordance with applicable law and confidentiality obligations.
6. Data Retention
We retain personal data only for as long as necessary for order fulfillment, customer service, recordkeeping, and legal compliance. When no longer required, data will be deleted or anonymized.
7. International Data Transfers
Your personal data may be transferred to and processed in countries other than your own. We take appropriate measures to ensure adequate safeguards for these transfers.
8. Children’s Privacy
Our services are not directed to children. If you believe a child has provided us with personal data unlawfully, please contact us for deletion.
9. Data Security
We use reasonable administrative, technical, and organizational measures (such as SSL/TLS encryption and access controls) to protect your data. However, no method is 100% secure.
10. Your Rights
Depending on your location, you may have the right to access, correct, delete, or object to the processing of your data. To exercise your rights, please contact us.
11. Changes to This Privacy Policy
We may update this policy to reflect changes in our practices. Material changes will be posted on this page with an updated “Last Updated” date.
12. Contact Us
Email: service@toocaa.com
Business Hours: Monday to Friday, 9:00–18:00
Last Updated: March 2026
California Privacy Notice
If you are a California resident, you have certain rights under California law, including the right to know, access, and delete your personal information. You also have the right not to be discriminated against for exercising these rights. To submit a request, please contact us at the email above.