Privacy Policy
1. Introduction
Trotap (hereinafter referred to as “we,” “us,” “our,” or the “Company”) is committed to protecting the privacy and rights of our users. This Privacy Policy explains how we collect, use, share, and protect personal information obtained through our website, www.trotap.com, mobile applications, and other related services.
2. Data Controller
Business name: Trotap
Contact email: contact@trotap.com
3. Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us:
Identification and contact information: name, address, email address, and phone number.
Billing and payment information: payment details and purchase history.
Browsing information: IP address, device type, operating system, and browsing activity on our website.
Marketing and communication data: marketing preferences and participation in promotions.
Demographic information and preferences: gender, age, interests, and information collected through voluntary surveys.
4. How We Use Your Personal Data
We may use your personal data for the following purposes:
Order processing: to process, manage, and deliver the products and services you purchase.
Customer service: to communicate with you about your orders, respond to inquiries, and provide customer support.
Marketing and personalized advertising: to send you marketing communications, show you relevant ads on third-party platforms such as Google, Facebook, Instagram, and TikTok, and measure the effectiveness of our advertising campaigns.
Service improvement and analytics: to personalize your experience on our website, analyze trends, and improve the functionality and performance of our services.
Legal and regulatory compliance: to comply with our legal obligations, resolve disputes, and enforce our agreements.
5. Legal Basis for Processing
We process your personal data on the following legal bases:
Performance of a contract: when processing is necessary to fulfill our obligations under a purchase or other agreement with you.
Consent: for specific activities, such as certain marketing communications, when you have provided your prior consent.
Legitimate interests: to improve our products and services, conduct business and security analytics, and protect our business.
Compliance with legal obligations: when processing is necessary to comply with applicable laws, including accounting and tax requirements.
6. Cookies and Similar Technologies
We use cookies and similar tracking technologies to improve your experience on our website. These may include:
Essential cookies: required for the website to function properly.
Performance and analytics cookies: used to understand how visitors use our website and to improve its performance.
Functional cookies: used to remember your preferences and personalize your experience.
Advertising and marketing cookies: used to provide more relevant advertising on third-party platforms.
You can configure your browser to accept or reject cookies. Please note that disabling certain cookies may affect the availability or functionality of some features of our website.
7. Sharing Personal Data with Third Parties
We may share your personal data with third parties in the following circumstances:
Service providers: including Shopify (our ecommerce platform), payment providers such as PayPal and Stripe, shipping carriers such as DHL and Correos, and digital marketing providers and platforms such as Google, Facebook, Instagram, and TikTok.
Business transfers: if the Company is involved in a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred as part of that transaction.
Legal compliance: when disclosure is necessary to comply with legal obligations, court orders, regulatory requirements, or other lawful requests.
We take appropriate steps to ensure that third parties processing personal data on our behalf comply with the GDPR and other applicable data protection laws.
8. International Data Transfers
Some of our service providers may be located outside the European Economic Area (EEA). When personal data is transferred outside the EEA, we take appropriate measures to protect it, including the use of Standard Contractual Clauses approved by the European Commission or transfers to countries covered by an adequacy decision.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal requirements. This may include:
Contact and billing information: retained for as long as necessary to comply with legal, accounting, and tax obligations.
Marketing data: retained until you withdraw your consent, opt out, or request deletion where applicable.
Browsing data: generally retained for a limited period for analytics, security, and service improvement purposes.
10. Your Rights
Under the GDPR, you have certain rights regarding your personal data, including:
Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may request that inaccurate or incomplete information be corrected.
Right to erasure (“right to be forgotten”): you may request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to applicable legal requirements.
Right to restriction of processing: you may request that we limit the processing of your personal data in certain circumstances.
Right to data portability: you may request that we provide your personal data in a structured, commonly used, and machine-readable format or, where applicable, transfer it to another data controller.
Right to object: you may object to the processing of your personal data for direct marketing purposes or when processing is based on our legitimate interests.
Right to withdraw consent: where processing is based on your consent, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at contact@trotap.com. We will respond to your request within one month. In certain complex cases, this period may be extended by up to two additional months, as permitted by applicable law.
11. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures may include:
Encryption: we use encryption and secure protocols to protect data transmitted online.
Restricted access: access to personal data is limited to employees, contractors, and service providers who need it to perform their duties.
Security testing and monitoring: we conduct security reviews and testing to identify and address potential vulnerabilities.
12. Children’s Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child without the required consent of a parent or legal guardian, we will take appropriate steps to delete that information.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any significant changes will be posted on this page and, where required, we may notify you through other appropriate means. We recommend reviewing this Privacy Policy periodically to stay informed about how we protect your information.
14. Contact
If you have any questions or concerns about this Privacy Policy or how we process your personal data, please contact us at:
Email: contact@trotap.com