Privacy Policy | Twins and Tot Shop

Last updated on 30 September 2025

Introduction

At Twins and Tot Shop (“we,” “us,” or “our”), we recognise our duty of care with regards to your data and will always endeavour to do the right thing with the personal data you share with us. This policy explains what personal data we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR). It applies whenever you visit https://twinsandtotshop.com/ (the “Website”), purchase our products or any related services (collectively, the “Services”).

How we collect data

We collect data in two main ways:

Direct interactions

You may give us your personal information when interacting with the Website, purchasing products, filling in forms or by corresponding with us via email, Live Chat or otherwise. This includes personal data you provide when you:

register for products or services;
interact with our Community Forum;
contribute to our blog;
subscribe to our service or publications;
request marketing to be sent to you;
pay for products or services;
enter a competition, promotion or survey; or
provide us feedback.

Automated technologies or interactions

As you interact with the Website, we may automatically collect Technical Data about your equipment and browsing actions. We collect this personal data by using cookies, server logs and other similar technologies. Please see the Cookie section below for more information.

What data we collect

Depending on how you use the Website, we may collect:

Identity Data including your name and email address.
Profile Data including your username, password, account handle, preferences, Website contributions, comments and survey responses.
Contact Data including phone number, email address and post code.
Financial Data including your banking details which are collected securely (and optionally stored) by our payment processor.
Technical Data including device identifiers, internet protocol (IP) addresses, cookie identifiers, beacon identifiers, pixel tags or similar technology that can be used to identify a particular consumer or device.
Usage Data including information about how you use the Website, products and services.
Electronic Communications Data including emails and interactions through our Live Chat.
Marketing Data including your preferences in receiving marketing from us.

Unless listed above, we do not normally collect any Special Categories of Personal Data (which includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). However, if you choose to include such information in any of your contributions on the Website, we will treat them as Special Category Information items and follow all official guidance on processing such information.

Our lawful basis for processing your information

We will only use your personal information when the law allows us to. Most commonly, we may use your personal information in the following circumstances:

Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
Where we have your Consent to do so.
Where we need to perform a contract which we have entered into with you.
Where we need to comply with a legal obligation.
Where it is necessary to protect the vital interests of you or another person.
Where it is needed in the public interest or for official purposes.

See Art. 6 of the GDPR to find out more about the types of lawful basis that we will rely on to process your personal data.

Purposes for which we will use your personal data

Below is a description of the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data.

Purpose/Activity	Type of data	Lawful Basis for Processing
To create an account on the Website.	i. Contact Data ii. Profile Data iii. Technical Data iv. Usage Data	Legitimate Interest
To post content on the Website.	i. Contact Data ii. Profile Data iii. Technical Data iv. Usage Data	Legitimate Interest
To send you emails that you have requested from us.	i. Marketing Data ii. Contact Data	Consent
To provide you with information about other goods and services we offer that are similar to those that you may have already purchased.	i. Contact Data ii. Usage Data iii. Profile Data	Legitimate Interest
To carry out our obligations arising from any contracts entered into between you and us (including the Website Terms and Conditions) and to provide you with the information, products and services that you request from us.	i. Contact Data ii. Identity Data iii. Usage Data iv. Financial Data	Performance of a Contract
To notify you about changes to our service.	i. Contact Data	Comply with a legal obligation
To administer the Website and for internal operations, including troubleshooting, data analysis, Website security, testing, research, statistical and survey purposes.	i. Technical Data ii. Usage Data	Legitimate Interest

Marketing

You are always in control of your personal data, and if you choose to stop receiving our marketing information, you may click on the unsubscribe link at the bottom of our marketing material. If you unsubscribe from marketing material, you will still receive the necessary emails for the management of your account (to reset your password, for example).

Community Forum

Registered members of the Website can start discussions and add comments to existing discussions on the Website’s Community Forum under our Terms and Conditions. When you register, an anonymous Account Handle is automatically generated for you and you can change it at any time in your Community Profile. Of your Profile Data, only your Account Handle is published publicly alongside your content. Publishing content on the Community Forum is optional, but if you do, we always store that content. If you delete your account, the content will be anonymised. The content you publish on the Community Forum is public and visible to anyone on the internet and can be indexed by search engines. If you choose to publish personal data on your Community Profile, it is visible to registered members of the Website and is not discoverable by search engines.

Third-party links

The Website may include links to third-party websites, plugins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave the Website, we encourage you to read the privacy notice of every website you visit.

Data security

We use up-to-date industry standards and practices to protect personal data from loss, misuse, and unauthorised access or disclosure. These steps take into account the sensitivity of the personal data we collect, process, and store, and the current state of technology. Given the nature of communications and technology, we cannot guarantee that personal data in our care will be absolutely safe from intrusion by others during transmission through the internet or while stored on our systems or otherwise.

Data retention

We will retain your personal data in accordance with applicable laws, regulations, and contractual agreements. Generally, we do not retain personal data longer than necessary to provide our services, resolve disputes and for reasonable business and lawful needs. When we no longer require your personal data, we will either delete or anonymise it or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will securely store your personal data and isolate it from any further processing until deletion is possible.

Sharing your data

We never sell your data. The personal data that we collect from you may be transferred to third-party service providers (including web hosting, payment processors, email and Live Chat support). We may transfer your personal data outside of the country where it was collected to a foreign country. We utilise a variety of mechanisms to ensure the security and legitimacy of these transfers. By submitting your personal data, you agree to us transferring, storing, or processing it in a foreign country with less stringent data protection laws than the country in which it was collected. We will take all steps reasonably necessary to ensure that your personal data is treated securely. All sub-processors and third-party service providers are under appropriate contractual obligations to ensure the safety and confidentiality of your personal data.

Children and minors

The Website is not intended for children under the age of 18. We do not, knowingly, or intentionally, collect personal data about children who are under 18 years of age.

Cookies

We will ask for your consent to allow any cookies which identify you, your location or your profile before we place them on your device. We may use “cookies” or other technologies or files (collectively, “cookies”) to identify how visitors make use of the Website. This aggregated tracking of personal data may be used to help us improve and enhance the Website experience for all of our users. You can manage or refuse cookies in your browser settings, though some features may not work as well. See our Cookie Policy for more details. To find out more about cookies, visit www.allaboutcookies.org.

Your rights

We always aim to comply both with the spirit as well as the letter of the law and to be responsible with your data. As well as keeping up-to-date with laws about data, we also aim to make sensible decisions based on common sense, listening to users’ views and industry best practices.

Your rights include:

Your right of access – You have the right to ask us for copies of your personal information.
Your right to rectification – You have the right to ask us to rectify personal information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
Your right to restriction of processing – You have the right to ask us to restrict the processing of your personal information in certain circumstances.
Your right to object to processing – You have the right to object to the processing of your personal information in certain circumstances.
Your right to data portability – You have the right to ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights, although we may request that you provide additional information to verify your identity. If you make a request, we have one month to respond to you from the time your request is received and verified.

To exercise your data protection rights, please email us at [email protected].

Questions or complaints regarding our Privacy Policy

If you have any concerns or queries about this Privacy Policy or our data protection, contact us at [email protected].

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The date provided at the beginning of this Privacy Policy is the latest revision date. Changes take effect immediately upon posting unless stated otherwise. Please check back frequently to see any updates or changes to our Privacy Policy.

If the updates are significant, we may notify users via email or a notice on the Website before the changes take effect.

Furthermore, it is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.