Who we are
TOS Treats is a Manchester-based food and drink business. For data-protection purposes, TOS Treats is the controller of personal information collected through this website. Contact us at toyositostin72@gmail.com or through our contact form.
Information we collect
- Order and delivery details, including your name, email address, telephone number, delivery address, postcode and order instructions.
- Order records, selected products, delivery method, payment status and correspondence about your purchase.
- Messages submitted through the contact form.
- Your email address and sign-up source when you actively join the mailing list.
- Essential technical information used for security, checkout continuity and administration.
Card and PayPal credentials are collected by the payment provider you choose. TOS Treats does not receive or store your full card number.
Why we use it
- Contract: to take payment, prepare, deliver and support your order.
- Legal obligation: to maintain tax, accounting, food-safety and transaction records where required.
- Legitimate interests: to answer enquiries, prevent misuse, improve service and resolve disputes.
- Consent: to send product news and offers when you actively subscribe. You can withdraw consent at any time.
Who receives information
We share only what is necessary with service providers that help us operate: Stripe or PayPal for payments; the delivery provider selected for your order; Railway and our website host for secure infrastructure; and Resend for transactional or requested marketing email. We may also disclose information when required by law or to protect legal rights.
If a provider processes information outside the UK, we expect it to use an approved legal safeguard for the transfer.
How long we keep it
- Transaction and accounting records: normally up to six years where required.
- Contact enquiries: normally up to 12 months after the conversation ends, unless needed for an order or dispute.
- Marketing details: until you unsubscribe or the list is no longer used. We may retain a minimal suppression record so we respect an opt-out.
- Unsuccessful checkout information: only for as long as reasonably needed for security and troubleshooting.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability or to object to our use of your information. You can withdraw marketing consent at any time using the unsubscribe page. We normally respond within one month.
You may complain to the UK Information Commissioner’s Office at ico.org.uk. We would appreciate the opportunity to address your concern first.
Security and changes
We use access controls, secure connections and restricted administration to protect information. No internet service is completely risk-free. We may update this notice when our services or legal obligations change; the latest date is shown above.