Privacy policy

Togi Toki takes the protection of your personal data seriously. This policy explains what data is collected on the togitoki.com website, why, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

Data controller

The data controller is Jordan D’Osualdo, a sole trader trading under the name Togi Toki, 45 rue du Château, 01640 Saint-Jean-le-Vieux, France. For any question about your data, write to contact@togitoki.com.

What data is collected?

Togi Toki only collects the data needed to process your orders and manage the customer relationship:

  • identity and contact data (first name, surname, email address, postal address, telephone)
  • order data (services chosen, history, exchanges)
  • payment data processed by the payment provider (Togi Toki does not keep bank card numbers)
  • browsing data (via cookies, see the dedicated section)

Why is this data collected?

Your data is used to:

  • process and track your orders
  • send you shipping instructions and confirmations
  • respond to your requests through the contact form
  • meet legal and accounting obligations
  • measure the website’s audience in order to improve it

Depending on the case, processing is based on performance of the contract (order handling), compliance with legal obligations (accounting), legitimate interest (site security, responding to requests) or your consent (non-essential cookies, audience measurement).

Who has access to your data?

Your data is intended for Togi Toki and, where applicable, the processors strictly necessary for the service:

  • the website host (EasyHoster / Kim Communication Limited)
  • the payment providers Stripe and PayPal
  • the carrier Mondial Relay for delivering parcels
  • Google (Google Analytics 4) for audience measurement

Your data is never sold to third parties.

How long is it kept?

Order-related data is kept for the duration of the commercial relationship, then archived for the period required by law (notably ten years for accounting records). Audience-measurement data is kept in line with the retention settings of Google Analytics. Any marketing data is kept for three years from the last contact, unless consent is withdrawn.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data, as well as the right to set directives on what happens to it after your death.

To exercise these rights, write to contact@togitoki.com. Proof of identity may be requested.

If you consider that your rights are not being respected, you may lodge a complaint with the CNIL (the French data protection authority), 3 Place de Fontenoy, 75007 Paris, France, www.cnil.fr.

Cookies

The website uses cookies to function (basket and order management via WooCommerce) and to measure its audience via Google Analytics 4. Audience-measurement cookies are only placed with your consent, obtained through the banner shown on your first visit. You can change your choices at any time.

Transfers outside the European Union

Using Google Analytics 4 may involve a transfer of data to servers located outside the European Union, in particular to the United States. These transfers are governed by the safeguards provided by Google (standard contractual clauses and the EU-US Data Privacy Framework). The host EasyHoster, for its part, stores the website on servers located in France.

Changes to this policy

This policy may be updated at any time. The applicable version is the one published on the website on the date you consult it.