Free shipping for orders over £300.

Privacy Notice under the UK GDPR and Data Protection Act 2018

This Privacy Notice explains how Genium S.r.l. ("we", "us" or "our"), trading as Toki Pet Shop through the website https://tokipetshop.co.uk ("Website"), collects, uses, stores, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018).

1. Data Controller

The Data Controller is:
Genium S.r.l.
Registered Office: Via Uberto Visconti di Modrone 11/15, 20122 Milan (MI), Italy
Logistics and Administration Office: Via Ettore Ara 10, 13100 Vercelli (VC), Italy
Email: info@tokipetshop.co.uk

2. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

Handling contact requests: to respond to enquiries submitted through the Website.
Legal basis: Legitimate interest (Art. 6(1)(f) UK GDPR) or Consent (Art. 6(1)(a)).
User account registration and management: to allow account registration, access, and use of restricted features.
Legal basis: Consent (Art. 6(1)(a)).
Purchasing products and order management: to process transactions, including the sale of medical and wellness products for pets.
Legal basis: Performance of a contract (Art. 6(1)(b)).
Legal and tax compliance: to meet legal obligations, including accounting and tax requirements.
Legal basis: Legal obligation (Art. 6(1)(c)).
Processing health-related data: only when necessary to handle requests for tax relief that require supporting medical documentation.
Legal basis: Explicit consent (Art. 9(2)(a)).
Website security and fraud prevention: to ensure proper functioning and prevent abuse or fraud.
Legal basis: Legitimate interest (Art. 6(1)(f)).
Marketing communications: with the user’s prior consent, to send promotional emails about products and services. Consent can be withdrawn at any time using the unsubscribe link in each communication or by contacting us at the above email address.
Legal basis: Consent (Art. 6(1)(a)).
Review requests: to collect feedback through third-party platforms in order to improve service quality.
Legal basis: Legitimate interest (Art. 6(1)(f)).

3. Types of Personal Data Processed

Identification data: name, email, shipping/billing address, phone number
Browsing data: IP address, usage logs
Health data: only in connection with tax relief requests
Payment data: required to process transactions

4. Provision of Data and Consequences of Refusal

Providing your personal data is optional but necessary to access the services offered. Failure to provide data may prevent the completion of purchases or access to certain restricted features of the Website.

5. Data Recipients

Personal data may be shared with:

External service providers acting as processors (e.g., IT, logistics, customer support)
Cloud and hosting service providers
Couriers and shipping companies for product delivery from our logistics site in Vercelli (VC), Italy
Platforms used to collect reviews
Tax or legal authorities, where required by law

All third parties are bound by appropriate contracts under Art. 28 UK GDPR to ensure adequate protection.

6. International Data Transfers

We do not currently transfer personal data outside the United Kingdom or the European Economic Area. If an international transfer becomes necessary in the future, it will only be made to countries covered by an adequacy decision under the UK GDPR or the EU GDPR, or by adopting appropriate safeguards recognised by the relevant authorities (e.g., UK International Data Transfer Agreement). In such cases, we will inform data subjects before the transfer takes place.

7. Data Retention Periods

Order and transaction data: up to 10 years from the last transaction
Account data: until deletion by the user or up to 2 years from the last login
Marketing data: until consent is withdrawn or 2 years from the last interaction
Health data: processed only for as long as necessary to handle tax relief requests, then deleted or anonymised
Browsing data: retained for up to 7 days unless required for legal purposes

8. Data Subject Rights

You may exercise the following rights at any time:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to object (including to direct marketing)
Right to data portability
Right to withdraw consent

Exercising your rights is free of charge unless requests are manifestly unfounded or excessive. We will respond within one month of receipt (extendable by two months for complex requests, with prior notice).

To exercise your rights, contact us at: info@tokipetshop.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk

9. Updates to this Notice

This Privacy Notice may be updated periodically. Any significant changes will be communicated through the contact channels you have provided.