Privacy policy

At Tool & Tote, we respect your privacy and are committed to protecting your personal information. This policy explains how we collect, use and safeguard your data when you visit our website or make a purchase, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are
Tool & Tote is the data controller for the personal information described in this policy.

2. Information We Collect
We collect the information needed to process your orders and provide a reliable shopping experience:

  • Order details: Your name, email address, phone number, delivery address and billing address.
  • Payment information: We do not store credit or debit card numbers on our servers. Payments are handled directly by secure, encrypted payment providers.
  • Communications: Messages you send us, such as support enquiries, return requests and photos you provide for damaged or faulty items.
  • Technical data: Basic device information, such as your IP address and browser type, which helps us improve site performance and protect against fraudulent transactions.

3. How We Use Your Information and Our Legal Basis
We only use your personal information where the law allows. The main purposes are:

  • Order fulfilment: Processing and delivering your orders for lawn mowers, power tools, garden equipment and storage products (legal basis: performance of a contract).
  • Customer support: Sending order confirmations, delivery updates, and handling enquiries, returns and refunds (legal basis: performance of a contract).
  • Site security and fraud prevention: Monitoring transactions to protect our customers and our business (legal basis: our legitimate interests).
  • Legal compliance: Keeping tax, accounting and regulatory records as required by UK law (legal basis: legal obligation).
  • Marketing and analytics: Analysing site performance and showing relevant products, including through Google Shopping (legal basis: your consent where required, otherwise our legitimate interests).

4. Sharing Data with Third Parties
We do not sell your personal information. We share necessary data only with service providers who help us run our business:

  • Payment providers: Financial institutions and payment services that process payments at checkout.
  • Delivery partners: Couriers and carriers that deliver your orders.
  • Marketing and analytics providers: Third-party tools such as Google, used to analyse performance and display our products.
  • Professional advisers and authorities: Accountants, legal advisers and public bodies where we are required to do so by law.
  • SMS and mobile data protection: Mobile numbers and SMS opt-in consent collected at checkout are kept confidential. We never share, rent or sell phone numbers or opt-in data to third parties or affiliates for marketing purposes.

5. International Transfers
Some of our service providers, including our website platform and Google, may process data outside the United Kingdom. Where this happens, we make sure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or adequacy arrangements, to protect your data.

6. Data Retention
We keep your personal information only for as long as necessary to fulfil orders, resolve issues and meet legal, tax and accounting requirements. For example, we generally keep order and invoice records for six years, as required for UK tax purposes.

7. Cookies & Tracking Technologies
We use cookies to keep your shopping cart active, remember your preferences and analyse website performance. Where required by UK law, we ask for your consent before setting non-essential cookies, such as analytics and advertising cookies. You can manage or withdraw your consent at any time through our cookie banner or your browser settings.

8. Your Privacy Rights
Under UK data protection law, you have the right to:

  • Access: Request a copy of the personal information we hold about you.
  • Rectification: Ask us to correct inaccurate or incomplete information.
  • Erasure: Ask us to delete your personal data in certain circumstances.
  • Restriction: Ask us to limit how we use your data.
  • Portability: Ask for your data in a portable format.
  • Objection: Object to processing based on our legitimate interests, or to direct marketing at any time.
  • Withdraw consent: Withdraw any consent you have given, at any time.

To exercise any of these rights, email support@toolandtote.store. We will respond within one month. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Data Security
Our website uses Secure Sockets Layer (SSL) encryption to protect data transmitted during checkout. We maintain physical, administrative and technical measures to safeguard your personal details against unauthorised access, loss or misuse.

10. Children’s Privacy
Our website is not intended for anyone under the age of 18, and we do not knowingly collect personal information from children.

11. Changes to This Policy
We may update this policy from time to time. The latest version will always be available on our website.