Privacy

This Privacy Policy describes how your personal information is collected, used, and shared when you visit or make a purchase from our online shop tommycashshop.com (the “Site”).

The responsible controller and processor of the data of this online shop is Tammements OÜ (Estonian business registry code 14379658), located at Maleva põik 3-20, Tallinn, 11711 Estonia and e-mail info@tommycashshop.com

We will forward collected data, that is required for payment processing purposes, to either Maksekeskus AS or PayPal Holding, Inc., dependent of the choice of the customer at checkout.


PERSONAL INFORMATION WE COLLECT

When you visit the Site, we automatically collect certain information about your device, including information about your web browser, IP address, time zone, and some of the cookies that are installed on your device. Additionally, as you browse the Site, we collect information about the individual web pages or products that you view, what websites or search terms referred you to the Site, and information about how you interact with the Site. We refer to this automatically-collected information as “Device Information.”

We collect Device Information using the following technologies:

- “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org;

- “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps;

- “Web beacons,” “tags,” and “pixels” are electronic files used to record information about how you browse the Site.

Additionally when you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card number, bank account number, purchase history, email address, and phone number).  We refer to this information as “Order Information.”

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.


HOW DO WE USE YOUR PERSONAL INFORMATION?

Personal Information are used to manage the customer’s orders and deliver goods.

Purchase history details (date of purchase, goods, quantity, customer’s data) are used for preparing summaries of goods and services purchased and for analysing customer preferences.

The bank account number is used to reimburse payments to the customer.

Personal Information such as email, phone number and the customer's name are processed to handle any issues relating to the provision of goods and services (customer support).

We use the Order Information that we collect generally to fulfill any orders placed through the Site (including processing your payment information, arranging for shipping, and providing you with invoices and/or order confirmations).  Additionally, we use this Order Information to, when in line with the preferences you have shared with us, provide you with information or advertising relating to our products or services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).


SHARING YOUR PERSONAL INFORMATION

We share your Personal Information with third parties to help us use your Personal Information, as described above.  For example, we use Shopify to power our online store--you can read more about how Shopify uses your Personal Information here: https://www.shopify.com/legal/privacy.  We also use Google Analytics to help us understand how our customers use the Site. Read more about how Google uses your Personal Information here: https://www.google.com/intl/en/policies/privacy/.  You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

The name, phone number and email address are transmitted to the transport service provider selected by the customer. When the goods are delivered by a courier, the customer’s address is also transmitted together with the contact details.

If the accounts of the web shop are kept by a service provider, the Personal Information is transmitted to the service provider for performing accounting operations.

Personal Information may be transmitted to IT service providers if this is necessary for ensuring the functionality of the online shop or for data hosting.

Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.


SECURITY AND ACCESS TO DATA

Personal Information are stored in the servers of Shopify Inc., which are located on the territory of a member state of the European Union or states of the European Economic Area. Data may be transferred to the countries whose data protection levels have been assessed as adequate by the European Commission and to the companies in the USA and Canada who have joined the Privacy Shield framework.

Personal Information can be accessed by the staff of the online shop in order to settle technical issues related to the use of the online shop and to provide customer support.

The online shop takes appropriate physical, organisational and IT security measures to protect Personal Information against accidental or unlawful destruction, loss, alteration or unauthorised access and disclosure.

Personal Information are transmitted to the data processors of the online shop (such as the providers of transport and data hosting services) and processed under contracts concluded between the online shop and the processors. The processors must ensure appropriate safeguards when processing Personal Information.


DO NOT TRACK

Please note that we do not alter our Site’s data collection and use practices when we see a Do Not Track signal from your browser.


LEGAL GROUNDS

Personal Information are processed for the purpose of performing a contract concluded with the customer.

Personal Information are processed for performing legal obligations (such as accounting and the settlement of consumer complaints).


YOUR RIGHTS

If you are a European resident, you have the right to access personal information we hold about you and to ask that your Personal Information be corrected, updated, or deleted. If you would like to exercise this right, please contact us through the customer support e-mail info@tommycashshop.com

Requests regarding your Personal Information are responded to no later than within one month and, when applicable, the period of deletion shall be specified.

Requests to transmit Personal Information submitted via e-mail are responded to within one month. Customer support identifies the person and indicates what Personal Information are to be transmitted.

Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you (for example if you make an order through the Site), or otherwise to pursue our legitimate business interests listed above.

Please note that your information will be transferred outside of Europe, including to Canada and the United States.


DATA RETENTION

When you place an order through the Site, we will maintain your Order Information for our records unless and until you ask us to delete this information.

For online purchases made without a customer account, the Purchase history is stored for three years.

In the event of disputes concerning payments and consumer disputes, Personal Information is stored until the claim is satisfied or until the end of the limitation period.

Personal Information needed for accounting purposes are stored for seven years.


MINORS

The Site is not intended for individuals under the age of 18.


CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.


DISPUTE RESOLUTION

Disputes concerning the processing of Personal Information are settled through our customer support e-mail. The supervisory authority is the Estonian Data Protection Inspectorate (info@aki.ee).


CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at info@tommycashshop.com or by mail using the following address provided:

Maleva põik 3-20, Tallinn, 11711 Estonia