Privacy Policy

Last updated: 16 August 2026

This Privacy Policy explains how Totesly collects, uses and discloses personal information when you visit totesly.com or make a purchase from us.

1. Information we collect

Information you give us. When you place an order we collect your name, billing and shipping address, email address, phone number and payment information. When you contact support or subscribe to marketing we collect your email address and the contents of your message.

Information collected automatically. When you visit the site we automatically collect device and browsing information including your IP address, browser type and version, time zone, operating system, referring site, and information about how you interact with the site. This is collected through cookies, log files, web beacons and similar technologies.

Payment information. Payment card details are collected and processed directly by our payment processors (Shopify Payments and associated providers). We do not receive or store full payment card numbers.

2. How we use your information

We use the information we collect to:

Fulfil, ship and confirm your orders, and process payments;
Communicate with you about your order and provide customer support;
Screen orders for potential risk or fraud;
Send marketing communications where you have consented, and from which you may unsubscribe at any time;
Improve and optimise our website, product range and advertising;
Comply with our legal and tax obligations.

3. Sharing your information

We share personal information with the following categories of third party, only as necessary:

Shopify, which powers our online store, to operate the site and process orders;
Payment processors, to take payment and prevent fraud;
Shipping carriers and fulfilment partners, to deliver your order;
Email and marketing platforms, where you have subscribed;
Analytics and advertising providers, to understand site usage and measure campaigns;
Professional advisers and authorities, where required by law or to protect our legal rights.

We do not sell your personal information for money. Depending on your jurisdiction, certain advertising and analytics activity may constitute a sale or share of personal information under applicable law; you may opt out via our Your Privacy Choices page.

4. Cookies

We use cookies and similar technologies to keep your cart, remember preferences, understand how the site is used, and measure the effectiveness of advertising. Most browsers allow you to refuse or delete cookies through their settings; disabling cookies may prevent parts of the site from working correctly.

5. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to request that it be corrected or deleted, to object to or restrict certain processing, to data portability, and to withdraw consent to marketing at any time. Residents of California, Virginia, Colorado, Connecticut and other US states with comprehensive privacy laws, and residents of the European Economic Area and United Kingdom, have additional rights under their respective laws.

To exercise any of these rights, email support@totesly.com. We may need to verify your identity before responding. We will not discriminate against you for exercising your rights.

6. Marketing communications

If you subscribe to our marketing emails you may unsubscribe at any time using the link at the foot of any marketing email, or by emailing us. Transactional messages relating to an order you have placed are not marketing and will continue to be sent.

7. Data retention

We retain order information for as long as necessary to fulfil the order, provide support, and comply with legal, accounting and tax obligations. Where you ask us to delete your information, we will do so unless we are required to retain it for a lawful purpose.

8. International transfers

Your information may be transferred to, stored and processed in the United States and other countries where our service providers operate. Where personal information is transferred out of the European Economic Area or United Kingdom, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Security

The site is served over encrypted HTTPS and checkout is PCI-DSS compliant. While we take reasonable technical and organisational measures to protect your information, no method of transmission or storage is completely secure and we cannot guarantee absolute security.

10. Children

The site is not intended for individuals under the age of majority in their jurisdiction, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or regulatory reasons. The date at the top of this page indicates when it was last revised.

12. Contact

To ask a question or make a complaint about how we handle personal information, email support@totesly.com.