Privacy policy

Last updated: January 12, 2026

toccera (operated by (toccera), “we”, “us”, “our”) operates this store and website, including all related information, content, features, tools, products and services (together, the “Services”) to provide you with a curated shopping experience. Our store is hosted on Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you visit, use, or make a purchase through the Services, or when you communicate with us.

If there is a conflict between our Terms and this Privacy Policy, this Privacy Policy controls only with respect to the collection, processing, and disclosure of personal information.

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Who We Are (Data Controller)

For the purposes of applicable data protection laws (including the GDPR where applicable), the data controller is:

Elevator (toccera)
Oder 20, 2491DC ’s-Gravenhage, The Netherlands
KvK: 92295525 — VAT: NL004947371B32
Email: support@toccera.com

2. What We Mean by “Personal Information”

“Personal information” means information that identifies you or can reasonably be linked to you (directly or indirectly). It does not include information that has been anonymized or de-identified so it cannot reasonably be linked to you.

3. Personal Information We Collect

Depending on how you interact with the Services, we may collect the following categories of personal information:

A. Contact & order details

· Name, email address, phone number (if provided)

· Billing address and shipping address

· Order details (products purchased, order number, timestamps)

B. Payment information

Payment method and transaction details (e.g., payment confirmation, partial card details where provided by payment processors)

Note: Payment processing is handled by Shopify and/or payment providers. We do not store full payment card numbers ourselves.

C. Account information (if you create an account)

Username, password (stored and managed via Shopify), preferences and settings

D. Customer support communications & evidence

Messages you send to us (for example: support inquiries)

Photos, videos, and screenshots you share with us (for example: photos of the product and packaging, or tracking screenshots) to help verify and resolve an issue

E. Device, usage & technical data

· IP address, device identifiers, browser type, network information

· Pages viewed, clicks, browsing actions, timestamps, and how you interact with the Services

F. Reviews & user-generated content (if you post it)

Content you submit (such as product reviews) and associated metadata

G. Inferences

We may generate inferences based on your activity (for example, product preferences) to improve the Services and (where permitted) personalize your experience.

4. Sources of Personal Information

We collect personal information from:

· Directly from you (e.g., checkout, account creation, support emails, reviews)

· Automatically (e.g., via cookies and similar technologies when you browse)

· Shopify and service providers acting on our behalf (e.g., payments, analytics, hosting, customer support tools)

· Logistics and delivery partners (e.g., shipment status and delivery confirmations)

· Marketing/advertising partners (where used and permitted)

5. How We Use Personal Information

We use personal information for the following purposes:

A. Provide and operate the Services (contractual necessity)

· Process payments and complete purchases

· Fulfill orders, arrange shipping, and provide tracking updates (including via tracking tools)

· Manage your account (if applicable)

· Process returns, refunds, replacements, cancellations, and customer requests

B. Customer support and issue resolution

· Respond to your inquiries and provide support

· Verify and resolve order issues, including investigating delivery issues (e.g., “delivered but not received”) and verifying damaged/defective/wrong-item claims

· Maintain records of support interactions

C. Improve and personalize the Services (legitimate interests / consent where required)

· Understand how customers use the Services

· Improve website performance, product offerings, and customer experience

· Personalize content and recommendations (where applicable)

D. Marketing and advertising (consent where required; otherwise as permitted by law)

· Send marketing communications (e.g., email) where you have opted in or where permitted

· Show ads and measure campaign effectiveness (including interest-based advertising where enabled)

E. Security, fraud prevention, and abuse prevention (legitimate interests / legal compliance)

· Detect, investigate, and help prevent fraudulent or harmful activity

· Secure accounts, payments, and the Services

· Protect customers, the public, and our business

F. Legal and compliance purposes

· Comply with applicable laws, regulations, and lawful requests

· Enforce our Terms and policies

· Establish, exercise, or defend legal claims

6. Cookies and Similar Technologies

We and our partners may use cookies, pixels, SDKs, and similar technologies to:

· Operate the Services (essential functionality)

· Remember preferences

· Analyze usage and improve performance

· Support advertising and measurement (where enabled)

Where required by law, we will ask for your consent before placing non-essential cookies.

Global Privacy Control (GPC): If your browser/device sends a GPC signal, we will treat it as a request to opt out of certain forms of targeted advertising for that browser/device where required by applicable law and where technically feasible.

7. How We Disclose (Share) Personal Information

We may disclose personal information to third parties for legitimate purposes, including:

A. Shopify

Our store is hosted on Shopify, and information you submit through the Services is processed by Shopify to help provide and improve the Services.

B. Service providers (processors)

Vendors who perform services on our behalf, such as:

· Payment processing

· Website hosting and IT support

· Analytics and reporting

· Customer support tooling

· Cloud storage

C. Fulfillment, logistics, and carriers

We share necessary order and delivery details with fulfillment partners, shipping carriers, and tracking providers to deliver your order and provide shipment updates.
Note: Depending on destination and logistics, some orders may be fulfilled and shipped from locations outside your country of residence (including China).

D. Marketing and advertising partners (where used)

We may share information with marketing partners to help provide and measure advertising. Some of these activities may be considered “targeted advertising” or “sharing” under certain laws. See Section 10 for opt-out choices.

E. Affiliates and corporate transactions

We may share information within our corporate group, and in connection with a business transaction (e.g., merger, acquisition, reorganization, insolvency), subject to applicable law.

F. Legal and protection reasons

We may disclose information to comply with law, respond to valid legal process, enforce policies, and protect rights and safety.

8. Relationship with Shopify

Shopify may process certain information about your interactions with our store (and, depending on Shopify features enabled, across other merchants and Shopify services) to provide and improve Shopify’s services and features.

Where Shopify acts as an independent controller for certain processing, Shopify is responsible for that processing and for handling certain privacy requests related to it. You can learn more through Shopify’s privacy resources and portals provided by Shopify.

9. International Transfers

We may transfer, store, and process your personal information outside your country of residence. If you are in the EEA or the UK and we transfer personal information internationally, we rely on recognized transfer mechanisms (such as Standard Contractual Clauses) or other lawful bases, unless the destination is deemed to provide adequate protection under applicable law.

10. Your Rights and Choices

Your rights depend on where you live and the laws that apply. These may include:

A. Access / Know

Request access to the personal information we hold about you.

B. Delete

Request deletion of personal information, subject to legal exceptions (e.g., records we must keep for legal/compliance purposes).

C. Correct

Request correction of inaccurate or incomplete information.

D. Portability

Request a copy of certain personal information in a portable format.

E. Object / Restrict (EEA/UK and certain jurisdictions)

Object to or request restriction of certain processing, including where we rely on legitimate interests.

F. Withdraw consent (where we rely on consent)

Withdraw consent at any time for processing based on consent (this does not affect prior processing).

G. Marketing communications

You can opt out of promotional emails at any time using the unsubscribe link in our emails. Even if you opt out, we may still send non-promotional messages (e.g., order confirmations, shipping updates, support replies).

H. Targeted advertising / “sale” or “sharing” (where applicable)

Depending on your jurisdiction, you may have the right to opt out of processing for targeted advertising or the “sale”/“sharing” of personal information as defined by applicable law. You can:

· Adjust cookie preferences (where available), and/or

· Contact us at support@toccera.com to submit an opt-out request.

Identity verification

We may need to verify your identity before processing certain requests. Where permitted, you may use an authorized agent to make requests on your behalf, subject to verification and proof of authorization.

11. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, including to:

· Provide the Services and fulfill orders

· Maintain business records and comply with legal obligations

· Resolve disputes and enforce agreements

· Prevent fraud and misuse

Support communications and any evidence you share (such as photos/videos) may be retained as needed to resolve your request and for fraud prevention/auditing, consistent with applicable law.

12. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please avoid sending sensitive information via unsecured channels.

13. Children’s Privacy

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in their jurisdiction. If you believe a child has provided us personal information, please contact us at support@toccera.com to request deletion.

14. Complaints

If you have concerns about how we process personal information, please contact us at support@toccera.com.

If you are located in the EEA or the UK, you may also have the right to lodge a complaint with your local data protection authority.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, or legal requirements. We will post the updated version on our website and revise the “Last updated” date.

16. Contact Us

For privacy questions or to exercise your rights, contact:
support@toccera.com

Or write to:
Elevator (toccera)
Oder 20, 2491DC ’s-Gravenhage, The Netherlands