Dollytoria LTD operates this online store and website, including all related information, content, features, tools, products, and services (collectively referred to as "Services"). This Privacy Policy explains how we collect, use, and disclose your personal information when you use our Services, make a purchase, or otherwise interact with us.
By using our Services, you acknowledge that you have read and understood this Privacy Policy.
1. Personal Information We Collect
We collect the following personal information depending on how you interact with our Services:
-
Contact Information: Name, email address, billing and shipping addresses, phone number.
-
Financial Information: Payment card details, payment confirmation, transaction information.
-
Account Information: Username, password, preferences, and settings.
-
Transaction and Usage Information: Products viewed, added to cart or wishlist, orders, returns, exchanges, and interactions with the Services.
-
Device and Network Information: IP address, browser type, device identifiers, and other technical data.
-
Communications: Emails, messages, and inquiries you send to us.
We may also infer information about your preferences based on your interactions with the Services.
2. How We Use Your Information
We use your information for the following purposes:
-
To Provide and Improve Our Services: Process orders, produce made-to-order products, arrange shipping, handle returns or exchanges, send notifications, and customize your shopping experience.
-
Marketing: Send promotional emails, newsletters, and personalized advertisements (you may opt out at any time).
-
Security and Fraud Prevention: Authenticate accounts, detect fraud, ensure a secure shopping experience.
-
Customer Support: Respond to inquiries and maintain our business relationship.
-
Legal Compliance: Comply with applicable laws, respond to government requests, and enforce our Terms of Service.
3. How We Share Your Information
We may share your information with:
-
Shopify and Service Providers: Payment processors, shipping companies, IT services, analytics, and apps integrated with our store.
-
Business Partners and Marketing Services: Only as needed to provide advertising and marketing that you have consented to.
-
Legal Authorities or in Case of a Business Transaction: To comply with the law, protect our rights, or in the event of a merger, acquisition, or bankruptcy.
All third parties we share your information with are required to handle your data securely and in full compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) for EU customers. These third parties must also adhere to strict privacy and security standards to ensure the safety of your personal data.
4. Cookies, Tracking, and Third-Party Services
Our Services use cookies, analytics, and other tracking technologies. These may include:
You can manage your preferences or opt out where required by law. For EU/UK customers, we respect Do Not Track signals and allow opting out of targeted advertising via the Shopify Privacy Portal.
5. Data Retention
We retain your personal information only as long as necessary to:
-
Fulfill your orders and provide our Services.
-
Comply with legal obligations (tax, accounting, regulatory).
-
Resolve disputes or enforce agreements.
Typical retention period: up to 4 years for transaction records, unless longer retention is required by law.
6. Your Rights (EU/UK)
If you live in the EU or UK, you may have the following rights:
-
Access: Request a copy of your personal information.
-
Correction: Correct inaccurate information.
-
Deletion: Request deletion of your personal data (with exceptions for legal obligations).
-
Restriction: Limit processing of your personal data.
-
Objection: Object to processing based on legitimate interests or marketing.
-
Portability: Request your data in a portable format.
-
Withdraw Consent: Where processing relies on consent, you may withdraw it.
To exercise your rights, contact us at dollytoria@gmail.com. We will respond promptly in accordance with GDPR/UK law.
7. International Transfers
Your personal information may be processed outside your country of residence. For transfers from the EU or UK, we rely on Standard Contractual Clauses or equivalent legal safeguards.
8. Children’s Privacy
Our Services are not directed at children under 16. We do not knowingly collect personal information from children. Parents may request deletion of any information provided by a child.
9. Security
We implement reasonable measures to protect your personal information. However, no security is perfect or impenetrable.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Effective Date.”
11. Contact
Data Controller: Sofiya Rizova, Dollytoria LTD
Address: 7 Simeon Fisinski St., Smolyan 4700, Bulgaria
Email: dollytoria@gmail.com
Phone: +359898270648