Privacy Policy

Privacy Policy

Effective Date: 01 January 2025
Last Updated: 01 January 2025

This Privacy Policy explains how Tuttibear (“we”, “our”, “us”) collects, uses, and protects personal data when you interact with our website tuttibear.com, place an order, subscribe to our newsletter, or contact our support team.

Tuttibear is a consumer brand operated by DAT SUPPLY LTD. Customer fulfillment services for Tuttibear orders are handled by Sublime e Otimista – Unipessoal Lda in Portugal.

1. Who We Are

The data controller responsible for your personal information is:

DAT SUPPLY LTD
United Kingdom
(Brand owner and data controller for Tuttibear)

Consumer order processing and fulfillment is carried out by:

Sublime e Otimista – Unipessoal Lda
Avenida Doutor Fernando Raimundo Rodrigues, Nº 1525
3885-412 Esmoriz, Ovar, Aveiro, Portugal
NIF: 518587649

2. How to Contact Us

For questions about this Privacy Policy or your personal data, contact us at:
Email: privacy@dat.supply

3. What Personal Data We Collect

We collect only the information necessary to process your order, operate our website, improve our services, and communicate with you. This includes:

3.1 Information You Provide Directly

  • Name
  • Email address
  • Shipping and billing address
  • Phone number
  • Order details
  • Messages sent through contact forms or customer support

3.2 Payment Information

Payments are processed securely by third-party providers such as Shopify Payments, Stripe, Revolut, and PayPal. We do not store full credit card details.

3.3 Automatically Collected Data

  • IP address
  • Device and browser information
  • Pages viewed and site navigation
  • Interaction with emails (opens/clicks)

3.4 Cookies and Tracking Technologies

We use cookies to ensure the website operates correctly, to analyse traffic, to personalise content, and to measure marketing performance.

4. How We Use Your Information

  • To process, prepare, and deliver your orders
  • To send order confirmations and shipping updates
  • To provide customer support and handle returns
  • To improve website functionality and shopping experience
  • To send marketing emails (when you consent)
  • To detect and prevent fraud
  • To comply with legal and tax obligations

5. Legal Basis for Processing (GDPR)

  • Contract: to fulfill your purchase and manage your order
  • Consent: for newsletters and marketing communications
  • Legitimate interest: fraud prevention, website security, service improvement
  • Legal obligation: tax, accounting, consumer protection

6. Data Sharing and Processors

We share information only with trusted partners necessary to operate Tuttibear:

  • Shopify – ecommerce and checkout platform
  • Stripe / PayPal / Revolut – payment processing
  • Sublime e Otimista – Unipessoal Lda – order fulfillment and logistics
  • Shipping carriers – CTT, DPD, DHL, UPS, and others
  • Klaviyo – email marketing, abandoned cart emails
  • Google Analytics – site usage analytics
  • Meta Pixel – advertising and campaign measurement
  • Cloudflare – security and performance optimisation

We do not sell or rent personal information to third parties.

7. International Transfers

Your data may be stored or processed on secure servers outside your country when required for ecommerce, analytics, or customer communication services. All transfers comply with GDPR requirements using contractual safeguards.

8. How Long We Keep Your Data

  • Order and payment information: 7–10 years (legal requirement)
  • Email marketing data: until you unsubscribe or request deletion
  • Customer support messages: up to 24 months

9. Your Rights Under GDPR

You may request at any time:

  • Access to your personal data
  • Correction of inaccurate data
  • Deletion of your data (right to be forgotten)
  • Restriction of processing
  • Objection to marketing communications
  • Withdrawal of consent
  • Data portability

To exercise your rights, email: privacy@dat.supply

10. Minors

Tuttibear products and website are not intended for individuals under 18. We do not knowingly collect data from minors.

11. Cookies

For more details about how cookies are used, please refer to our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time due to operational or legal changes. The “Last Updated” date will always reflect the latest version.

13. Contact Information

If you have questions, concerns, or privacy requests, please contact us at:
Email: privacy@dat.supply

You may also contact your local data protection authority if you believe your rights have been violated.