Privacy Policy
Last updated: May 2026
This Privacy Policy explains how Tomtops (“we”, “us”, or “our”) collects, uses, and protects information when you visit tomtops.com. This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.
1. Data Controller
Tomtops is operated by an individual based in France. For any privacy-related requests, please contact us via our contact page.
2. What Data We Collect
We do not require you to create an account or submit personal information to browse our website. However, the following data may be collected automatically:
- Usage data: Pages visited, time spent on pages, browser type, operating system, and referring URLs — collected via analytics tools.
- Cookies: Small files stored on your device. See our Cookie Policy for full details.
- Contact form data: If you contact us, we collect your name and email address solely to respond to your inquiry.
3. How We Use Your Data
- Analyze website traffic and improve our content
- Understand which products and articles are most useful to our readers
- Respond to inquiries submitted through our contact form
- Comply with legal obligations
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Third-Party Services
- Google Analytics: Website traffic analysis. Google Privacy Policy.
- Amazon Associates: Affiliate tracking. When you click an Amazon link, Amazon may set cookies on your device. Amazon Privacy Notice.
- Other affiliate partners: Third-party retailers may use their own tracking technologies when you click through to their websites.
5. Legal Basis for Processing (GDPR)
- Legitimate interests: Analytics and site improvement
- Consent: Non-essential cookies (you may withdraw consent at any time via our cookie banner)
- Contract performance: Responding to contact form submissions
6. Data Retention
Analytics data is retained for 26 months. Contact form data is retained only as long as necessary to respond to your inquiry and is then deleted.
7. Your Rights (GDPR)
If you are located in the EU or EEA, you have the following rights:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure (“right to be forgotten”)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
To exercise any of these rights, please contact us via our contact page. You also have the right to lodge a complaint with the CNIL (France’s data protection authority).
8. International Data Transfers
Some third-party services we use may transfer data outside the European Economic Area. These transfers are subject to appropriate safeguards including Standard Contractual Clauses approved by the European Commission.
9. Children’s Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.
11. Contact
For any privacy-related questions, please use our contact page.