Privacy Policy

*Last updated: March 31, 2026*

Tomlov Lab operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Tomlov Lab is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us.

For the purposes of the *UK General Data Protection Regulation (UK GDPR)* and the Data Protection Act 2018, Tomlov Lab is the Data Controller of your personal information.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you. We collect the following specific types of personal information to provide our Services and for marketing purposes:

• *Contact details: Your Name, Email address, Phone number, Billing address, and Shipping address*.
• *Device information: Your IP address*, browser type and version, time zone setting, geolocation data, and operating system.
• *Order information:* Details about what you bought, your payment method (e.g., credit card last 4 digits), and transaction history.
• *Usage information:* How you navigate our site, which pages you view, and your interaction with our ads.

Cookies and Tracking Technologies

We use Cookies and similar tracking technologies (pixels, beacons) to collect and use Personal Information about you, including to serve interest-based advertising.

*How We Use Cookies:* We use cookies for the following purposes:

1. *Strictly Necessary Cookies:* These are required for the website to function (e.g., adding items to your cart, secure checkout). You cannot switch these off.
2. *Performance and Analytics Cookies: These allow us to count visits and traffic sources so we can measure and improve the performance of our site (e.g., Google Analytics*).
3. *Marketing and Advertising Cookies: These may be set through our site by our advertising partners (e.g., Google Ads, Meta/Facebook*). They may be used to build a profile of your interests and show you relevant adverts on other sites (Retargeting).

*Cookie Consent (GDPR): If you are visiting from the United Kingdom (UK) or the European Economic Area (EEA), you will be presented with a Cookie Banner* upon your first visit. We will only set non-essential cookies (Analytics and Marketing cookies) if you click "Accept" or explicitly consent via the banner. You can withdraw your consent or change your preferences at any time through our website's cookie settings.

Personal Information Sources

We may collect personal information from the following sources:

• *Directly from you* including when you create an account, visit or use the Services, or communicate with us.
• *Automatically through the Services* including from your device via Cookies as described above.
• *From our service providers* including Shopify, payment processors, and shipping partners.

How We Use Your Personal Information

Depending on how you interact with us, we may use personal information for the following purposes:

• *Provide, Tailor, and Improve the Services.* To process your payments, fulfill your orders, arrange for shipping, and provide customer support.
• *Marketing and Advertising.* To send marketing communications (email/SMS) and to show you online advertisements for products on other websites (e.g., Google Shopping, Facebook Feeds).
• *Security and Fraud Prevention.* To detect, investigate or take action regarding possible fraudulent or illegal activity.
• *Legal Reasons.* To comply with applicable laws (e.g., tax laws) or respond to valid legal process.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes:

• *Service Providers:* With Shopify, payment gateways, and shipping companies (e.g., Royal Mail, FedEx) to fulfill your orders.
• *Advertising Partners: We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners, specifically Google and Meta*.
• *Legal Obligations:* To comply with applicable laws and regulations.

Your Rights (UK & EEA)

If you live in the UK or EEA, you have specific rights regarding your personal information under the GDPR:

• *Right to Access:* You have the right to request a copy of the personal information we hold about you.
• *Right to Erasure:* You have the right to ask us to delete your personal information ("Right to be forgotten").
• *Right to Correction:* You can ask us to correct inaccurate information.
• *Right to Withdraw Consent:* Where we rely on your consent to process your data (e.g., for marketing emails or cookies), you can withdraw this consent at any time.

To exercise any of these rights, please contact us at [email protected].

International Transfers

Please note that we may transfer, store and process your personal information outside the UK/EEA, including to Canada (where Shopify is based) and the United States. We ensure that such transfers are covered by appropriate safeguards, such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs).

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised Privacy Policy on this website and update the "Last updated" date.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at:

*Tomlov Lab Attn: Returns Department, Tomlov Lab, United Kingdom*

*Phone: Email:* [email protected]