Privacy Policy

Last updated: 26 October 2026

Tiny Tugz™ ("we", "us", "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how Tiny Tugz B.V. collects, uses, shares, stores and protects personal information when you visit www.tinytugz.com, purchase our products, contact us or otherwise interact with our services (collectively, the "Services").

We process personal data in accordance with the EU General Data Protection Regulation (GDPR), applicable Dutch privacy legislation and other relevant data protection laws.

Please read this Policy to understand how we handle your information and the rights available to you.

1. Who We Are

Tiny Tugz B.V. is a company incorporated in the Netherlands and is the data controller responsible for personal data processed in connection with our Services, except where another organisation acts as an independent controller.

Company: Tiny Tugz B.V.
Address: Korte Lijnbaanssteeg 1, 1012 SL Amsterdam, The Netherlands
KVK registration: 94501955
Email: hello@tinytugz.com
Website: www.tinytugz.com

For questions about this Policy or your personal data, please contact us using the details above.

2. Personal Data We Collect

We collect personal information that is reasonably necessary to operate our business and provide our Services.

a. Information You Provide

Depending on how you interact with us, this may include:

• Contact details: Name, email address, telephone number, billing address and shipping address.

• Order information: Products purchased, order history, delivery instructions, transaction amounts, payment status, returns and refunds.

• Account information: Account identifiers, contact details and preferences associated with your customer account.

• Communications: Customer service requests, correspondence, complaints and information you voluntarily provide.

• Marketing preferences: Newsletter subscriptions, consent choices and communication preferences.

• Reviews: Product ratings, written feedback and photographs voluntarily submitted through our review services.

b. Information Collected Automatically

When you visit our website, we or our technology providers may collect:

• IP address and approximate geographical location.

• Browser, device and operating system information.

• Pages visited, products viewed and website interactions.

• Shopping cart activity and referral sources.

• Cookie identifiers and similar technical information.

• Advertising interactions and conversion events, where permitted.

Some information is necessary for the website to function. Other information is collected only where the required consent or other lawful basis applies.

c. Information From Third Parties

We may receive relevant information from service providers, including:

• Shopify and connected e-commerce services.

• Payment service providers.

• Suppliers, fulfilment partners and delivery companies.

• Advertising and analytics platforms.

• Customer review and support providers.

For example, we may receive payment confirmation from a payment provider or delivery updates from a courier.

We do not require customers to provide sensitive personal information to make ordinary purchases.

3. Why We Process Your Data and Our Legal Basis

We process personal data only where we have a lawful basis under the GDPR.

Purpose	Legal basis
Processing purchases, payments, shipping, returns and refunds	Performance of a contract
Providing customer support relating to purchases	Performance of a contract or legitimate interests, as applicable
Maintaining accounting records and complying with tax requirements	Legal obligation
Detecting fraud, protecting our website and preventing misuse	Legitimate interests or legal obligation, as applicable
Improving website functionality and analysing performance	Legitimate interests where permitted, or consent where required
Sending promotional emails and newsletters	Consent, or legitimate interests where permitted for existing customers under applicable electronic marketing rules
Personalised advertising and non-essential tracking	Consent where required
Establishing, exercising or defending legal claims	Legitimate interests or legal obligation, as applicable

 

Where we rely on legitimate interests, these include protecting our business, preventing fraud, answering enquiries, improving customer service and maintaining the reliability of our Services. We assess these interests against the rights and freedoms of individuals.

You may withdraw consent at any time where consent is our legal basis. Withdrawal does not affect processing lawfully carried out before withdrawal.

4. Cookies, Analytics and Advertising Technologies

Our website uses cookies, pixels and similar technologies to operate our Services and, where permitted, understand visitor behaviour and measure advertising performance.

These technologies may include:

Essential technologies

Necessary for functions such as shopping carts, checkout, security, account access and remembering privacy preferences.

Analytics technologies

Used to understand website traffic, product interest, visitor interactions and the effectiveness of our website.

Advertising technologies

Our advertising and measurement partners may include Google and Meta Platforms.

Where enabled, technologies such as Google advertising tags and the Meta Pixel may collect information about website visits, product views, shopping cart interactions and purchases.

With the required consent, this information may be used for advertising measurement, audience creation, remarketing and personalised advertising.

Your cookie choices

Non-essential tracking technologies that require consent will be used only after you provide valid consent.

You can accept, reject or adjust optional tracking through the Cookie preferences control available on our website.

You can withdraw or change your consent at any time. Withdrawing consent does not prevent you from using essential shopping functions.

You can also manage certain cookies through your browser settings.

For further information about Shopify's cookies, see Shopify's Cookie Policy.

5. Shopify and Other Service Providers

Our website is hosted by Shopify, which provides e-commerce technology, hosting, checkout and related services.

Shopify processes personal data in connection with your use of our website and purchases. Depending on the Shopify services and features enabled, Shopify may also process certain information for its own purposes, including improving shopping services and providing personalised experiences.

For information about Shopify's processing, see the Shopify Consumer Privacy Policy.

You can manage certain Shopify-specific privacy choices through Shopify's Privacy Portal.

We may also use third-party providers for:

• Payment processing and fraud prevention.

• Product sourcing and order fulfilment.

• Shipping, tracking and delivery.

• Marketing and analytics.

• Customer reviews, including Loox where enabled.

• Customer communications and technical support.

These providers receive only the personal information reasonably required for their respective services, subject to applicable law and their contractual responsibilities.

6. Suppliers, Fulfilment and Delivery

Tiny Tugz works with independent suppliers and fulfilment partners to deliver products across supported European markets.

When you place an order, we may share relevant information with the supplier, fulfilment provider or delivery company responsible for your purchase.

This may include:

• Customer and recipient names.

• Delivery addresses and contact information.

• Products ordered and quantities.

• Order references and delivery instructions.

This information is shared for order fulfilment, shipping, customer support, returns and related purposes.

We do not authorise suppliers to use customer information for their independent marketing merely because they receive that information to fulfil an order.

7. Marketing Communications

We may send newsletters, product updates, special offers and other marketing communications when permitted by applicable law.

You may receive marketing emails if you have provided consent or, where legally permitted, as an existing customer receiving information about similar products.

You can unsubscribe at any time using the link in our marketing emails or by contacting hello@tinytugz.com.

Unsubscribing from marketing does not affect necessary transactional communications, such as order confirmations, shipping notifications and customer service responses.

8. How We Share Personal Data

We may disclose personal information to:

• E-commerce and technology providers.

• Payment processors and financial institutions.

• Suppliers, logistics companies and couriers.

• Advertising, analytics and review service providers.

• Professional advisers, including accountants and legal advisers.

• Government authorities, regulators or courts where legally required.

We do not sell customer contact lists for monetary compensation.

Where legally permitted and subject to required consent, some information may be shared with advertising partners for personalised advertising, measurement or related services.

We may also disclose relevant data in connection with a lawful merger, acquisition, restructuring or transfer of our business, subject to applicable data protection requirements.

9. International Data Transfers

Although Tiny Tugz B.V. is established in the Netherlands, some of our technology providers, suppliers and service partners may process personal information outside the European Economic Area (EEA).

Where personal data is transferred to countries without an applicable adequacy decision, we rely on appropriate transfer safeguards where required by law, such as European Commission-approved Standard Contractual Clauses or other lawful transfer mechanisms.

We take applicable legal and contractual requirements into account when selecting service providers.

You may contact us for further information about the safeguards relevant to your personal data.

10. Data Retention and Security

We retain personal data only for as long as necessary for the purposes described in this Policy, or where a longer period is required or permitted by law.

Our retention approach includes:

• Order and accounting records: Generally retained for seven years where required under Dutch tax and accounting legislation. Certain records may require longer retention.

• Customer accounts: Retained while the account remains active and for any further period necessary to meet legal obligations or resolve outstanding matters.

• Customer support correspondence: Retained for as long as reasonably necessary to manage enquiries, complaints, disputes or related obligations.

• Marketing information: Retained while we have a lawful basis for marketing, subject to withdrawal, objection and applicable suppression-record requirements.

• Cookie and analytics data: Retained according to the applicable purpose, configured retention period and legal requirements.

When personal data is no longer required, we delete, anonymise or otherwise securely dispose of it, subject to legal obligations.

We use appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure and loss.

However, no internet-based service or electronic storage method can guarantee absolute security.

11. Children's Privacy

Tiny Tugz sells products intended for babies and children. However, our website and purchasing Services are intended for adults, including parents, guardians and other authorised purchasers.

We do not knowingly solicit personal information directly from children for marketing purposes.

In some circumstances, a parent or guardian may voluntarily provide limited information relating to a child, such as delivery details, product feedback or customer service information.

We ask customers not to include unnecessary personal or sensitive information about children in reviews or communications.

If you believe that a child has provided personal information directly to us without appropriate authorisation, please contact hello@tinytugz.com so we can review the circumstances and take appropriate action.

12. Your Privacy Rights

Under the GDPR and other applicable data protection laws, you may have the right to:

• Request access to your personal data.

• Correct inaccurate or incomplete information.

• Request deletion of your personal data, subject to legal exceptions.

• Request restriction of processing.

• Object to processing based on legitimate interests.

• Object at any time to processing for direct marketing.

• Receive certain personal data in a portable format.

• Withdraw consent where processing relies on consent.

• Challenge qualifying decisions based solely on automated processing.

• Lodge a complaint with a competent data protection authority.

Advertising platforms may use automated processing to help select or personalise advertisements. We do not ordinarily use such advertising activity to make solely automated decisions that produce legal or similarly significant effects concerning customers.

Exercising your rights

Please send privacy requests to hello@tinytugz.com.

We may request reasonable information to verify your identity before responding.

We aim to respond within one month, subject to any lawful extension or exception.

Some personal data cannot be deleted immediately where we must retain it to meet legal obligations, including tax and accounting requirements.

Providing necessary billing, payment and delivery information is required to complete a purchase. Without that information, we may be unable to fulfil your order. Optional marketing information is not required to purchase products.

13. Complaints

If you have concerns about how Tiny Tugz handles personal information, please contact us at hello@tinytugz.com.

You also have the right to complain to the relevant supervisory authority.

Our principal supervisory authority in the Netherlands is:

Autoriteit Persoonsgegevens (AP)
Website: https://autoriteitpersoonsgegevens.nl

You are not required to contact Tiny Tugz before exercising your right to lodge a complaint.

14. Third-Party Websites

Our website may contain links to websites and services operated by independent third parties.

These parties may have their own privacy policies and data processing practices.

We encourage you to review their privacy policies before providing personal information.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in our business practices, service providers, legal requirements or the technologies we use.

The latest version will be published on our website with an updated revision date.

Where legally required, we will provide additional notice or obtain consent before introducing material changes to how personal data is processed.

16. Contact Us

For privacy enquiries, requests or complaints, contact:

Tiny Tugz B.V.
Korte Lijnbaanssteeg 1
1012 SL Amsterdam
The Netherlands

Email: hello@tinytugz.com
Website: https://www.tinytugz.com
KVK: 94501955