Topphox

Our Commitment to Privacy

At Topphox, we take your privacy seriously and are fully committed to safeguarding the personal data you provide to us when using our website, purchasing products, or interacting with our services. This Privacy Policy outlines how your information is collected, used, shared, stored, and protected in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. What Data We Collect

We collect information directly from you when you place an order, create an account, subscribe to our newsletter, or communicate with us. This includes:

• Personal Identification Information: Name, email address, phone number, shipping address, and billing address.
• Payment Information: Secure tokens and transaction references (we only see the last 4 digits of your card; complete details are encrypted by our payment processors).
• Device and Browsing Data: IP address, browser type, device information, operating system, and pages visited via tracking cookies.
• Order History: Full records of products purchased, transaction dates, and delivery updates.
• Correspondence Records: Records of communications when you contact customer support.

2. How We Use Your Data

We process your personal information for specific, legitimate business purposes, including:

• Processing, packing, and delivering your orders.
• Providing customer support and responding to inquiries.
• Improving website performance, interface design, and product catalog selection.
• Complying with accounting, tax, legal requirements, and fraud prevention protocols.
• Sending promotional emails (only if you explicitly opt-in; you can unsubscribe at any time).

3. Data Sharing & Third Parties

We never sell, rent, or trade your personal data. We only share necessary data with trusted service providers to run our operations:

• Payment Gateways: E.g. Stripe and PayPal, to securely process payments.
• Logistics Partners: E.g. Royal Mail, DPD, and DHL, to deliver your orders.
• Email Service Providers: To deliver order confirmations, tracking updates, and newsletters.
• Legal Authorities: Only when legally required to do so for tax, regulatory reporting, or fraud prevention.

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, satisfy legal, audit, or tax requirements, or resolve disputes. Once no longer needed, your data is securely deleted or anonymized.

5. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: Request details of the personal data we hold about you.
• Correction: Request update or correction of inaccurate personal data.
• Deletion ("Right to be Forgotten"): Request the removal of your data (subject to legal retention requirements).
• Restriction & Objection: Object to or limit the processing of your data.
• Withdraw Consent: Instantly unsubscribe from any marketing list.

To exercise any of these rights, please contact us via our official website Contact Form or support email.

6. Data Security

We implement strict security measures to protect your personal data, including industry-standard SSL encryption for all data transmissions, secure hosting environments, restricted database access control, and payment gateway compliance to prevent unauthorized access.