Privacy policy

This translation is provided for convenience; the Spanish version prevails.

Data controller: the owner of Tocky. Their identifying details are in the legal notice. Contact: contact form or hola@tocky.es.

What data we process and why:

• Purchases: name, email, phone, address and order details, to ship your order, invoice you and assist you. Legal basis: the contract.
• Account and dashboard: email, encrypted password, and the plates and destinations you set up, so you can manage your plates. Legal basis: the contract.
• Public profile (optional): if you choose to appear in the business finder or the Tocky League, we show the name, category, city, address, phone and description you enter, plus your Tocky score. You can turn this off at any time from the dashboard. Legal basis: your consent.
• Taps on plates: when someone taps a plate we record the date, time and type of device (iPhone or Android) in aggregate form, without names, without exact location and without storing the full IP address. We use it for the service (dashboard stats, Tocky score, Tocky League), to improve the product and for aggregate statistics that never identify anyone. Stats are always recorded, whether or not you have Tocky Plus; with Plus you see the full detail. Legal basis: the contract and legitimate interest.
• Customer service assistant: if you write in the website chat, we keep the conversation to reply to you and improve the service. If you leave us your email or phone, we contact you about your enquiry. Legal basis: your request and legitimate interest.
• Service emails: dashboard alerts, monthly report, setup reminders and order confirmations.
• Free guide and newsletter: if you leave us your email to download the guide or subscribe, we send it to you and, if the box is ticked, we send you Tocky tips and offers (a few emails, not daily). Legal basis: your consent.
• Offers for other services from the same owner (optional): only if you tick that box, the owner of Tocky may send you offers for their other business services (for example, web design or marketing). Your data does not leave the owner. Legal basis: your consent.
• Offers from partner companies (optional): only if you tick that box, we will send you selected offers from partner companies ourselves. We do not share your data with them: Tocky does the sending. Legal basis: your consent.
• Customers: if you have already bought from us, we may email you information about Tocky products and services similar to those you bought (art. 21.2 LSSI). You can object in every email.
• Cookies: those needed for the store to work and, only if you accept them, measurement and advertising cookies (Meta and Google). You can change your choice in the cookie banner.

Record of consents: we keep which boxes you ticked, the exact text you accepted, the date and the page, so we can prove it. Each box is independent and none is ticked by default. You can withdraw any consent at any time with the unsubscribe link in each email or by writing to us, without affecting anything already done.

If the owner changes: if in the future Tocky is operated by a company belonging to the same owner or the business is transferred, your data would pass to the new controller so they can keep providing you with the same service for the same purposes and with the same consents; we would let you know and you could object.

Who else processes the data (processors): Shopify (store and payments), Cloudflare (dashboard, links, chat and database), Resend (email sending), the manufacturer and the shipping companies (only name and address for delivery) and, if you accept them, Meta and Google. Some are located outside the European Economic Area and apply the European Commission's standard contractual clauses. We do not sell your data.

How long: order data, as long as tax law requires (up to 6 years); account data, while the account is active and for 12 months afterwards; tap statistics, 24 months; newsletter data, until you unsubscribe (the record of consent is kept for as long as needed to prove it); chat conversations, 12 months.

Your rights: you can request access, rectification, erasure, objection, restriction and portability by writing to us via the contact form or at hola@tocky.es. If you're not satisfied, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).