Privacy Policy

Effective date: August 6, 2026

Last updated: August 6, 2026

This Privacy Policy explains how Tonny Collectables collects, uses, discloses, retains, and protects personal information.

Privacy summary: We collect information needed to operate our store, process orders, provide customer support, secure our website, understand website performance, and communicate with customers. We do not sell personal information for money. Certain analytics or advertising activities may be considered “sharing,” “targeted advertising,” or a “sale” under some state privacy laws. Where required, you may opt out through our Privacy Choices page or a recognized browser-based opt-out signal.

1. Scope of This Privacy Policy

This Privacy Policy applies to the Tonny Collectables website, tonnycollectables.com, our online store, customer accounts, contact forms, email communications, newsletters, promotions, and other services that link to this Privacy Policy collectively referred to as the “Services.”

“Tonny Collectables,” “we,” “our,” and “us” refer to [TC Holding, LLC], doing business as Tonny Collectables.

This policy does not apply to independently operated third-party websites, applications, payment providers, social-media platforms, or services that have their own privacy policies.

2. Notice at Collection

At or before the time we collect personal information, we collect the categories described below for the business and commercial purposes identified in this policy. We retain each category only for as long as reasonably necessary for the disclosed purposes, our legal obligations, dispute resolution, fraud prevention, and enforcement of our agreements.

Category	Examples	Primary purposes
Identifiers and contact information	Name, email address, telephone number, billing address, shipping address, account username, customer number, IP address and online identifiers.	Account administration, checkout, order fulfillment, customer support, communications, security and fraud prevention.
Customer and transaction records	Products purchased, order history, payment status, discounts, returns, refunds, shipment details and customer correspondence.	Processing orders, accounting, inventory management, returns, warranty or dispute handling, legal compliance and support.
Payment-related information	Payment method, billing information, transaction identifier, payment authorization and limited card details supplied by the payment processor, such as card brand and last four digits.	Payment processing, refunds, fraud prevention, accounting and transaction verification.
Internet and device activity	Browser type, device type, operating system, IP address, pages viewed, referring pages, link interactions, session information, cookie identifiers and approximate location derived from an IP address.	Website operation, analytics, debugging, personalization, security, fraud detection and measuring marketing performance.
Account and authentication information	Login credentials, password hashes, account settings, saved addresses and account activity.	Creating and securing accounts, authenticating users and preventing unauthorized access.
Communications and submitted content	Contact-form messages, reviews, photographs, support requests, survey responses and other content you voluntarily provide.	Responding to requests, publishing approved reviews, resolving issues, improving products and maintaining business records.
Marketing preferences	Newsletter enrollment, communication preferences, campaign interactions and unsubscribe status.	Sending requested marketing, recording consent and honoring opt-out requests.
Inferences	General preferences or interests inferred from purchases, browsing activity and interactions with the Services.	Personalizing the store, recommending relevant products and understanding customer interests.

To exercise a privacy right or opt out of certain processing, visit Your Privacy Choices or contact us using the methods listed at the end of this policy.

3. Personal Information We Collect

Information you provide directly

We may collect information when you:

Create or update a customer account.
Place, modify, cancel, return or dispute an order.
Enter billing, shipping or contact information.
Subscribe to emails, stock alerts or product notifications.
Contact customer support or submit a website form.
Post a review or submit photographs or other content.
Participate in a promotion, survey, giveaway or loyalty program.

Information collected automatically

When you use our Services, our website and service providers may automatically collect device, browser, network, usage and interaction information through server logs, cookies, pixels, software development kits and similar technologies.

Sensitive personal information

Depending on how you use our Services, account credentials and payment-related information may qualify as sensitive personal information under certain state laws. Full payment-card details are normally handled directly by our payment processors rather than stored by Tonny Collectables.

We do not use sensitive personal information to infer characteristics about you. We do not intentionally request Social Security numbers, government identification numbers, medical information, precise geolocation, biometric templates or information about race, religion, sexual orientation or immigration status.

Please do not submit sensitive information through product reviews, contact forms or other open-text fields.

4. Sources of Personal Information

We may obtain personal information from:

You or someone acting on your behalf.
Your interactions with our website and communications.
WooCommerce, WordPress and website extensions we operate.
Payment processors and fraud-prevention providers.
Shipping carriers, fulfillment services and address-verification providers.
Email, customer-support and marketing service providers.
Analytics and advertising providers, subject to your choices.
Social networks when you interact with our pages or content.
Publicly available sources where permitted by law.

5. How We Use Personal Information

We may use personal information to:

Operate, maintain and improve the Services.
Create and manage customer accounts.
Process payments, orders, shipments, cancellations and refunds.
Communicate about orders, accounts, preorders and customer-service requests.
Verify addresses and prevent payment or account fraud.
Maintain inventory, transaction, tax and accounting records.
Provide product recommendations and personalize website content.
Send newsletters, stock notifications and promotional communications.
Analyze website usage and marketing performance.
Detect, investigate and prevent unauthorized activity or security incidents.
Enforce our policies, terms, contracts and legal rights.
Comply with legal, tax, regulatory and law-enforcement obligations.
Establish, exercise or defend legal claims.
Complete a merger, acquisition, restructuring, financing or sale of assets.

We may combine information collected through different portions of the Services when permitted by law and consistent with this policy.

6. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, local storage, server logs and similar technologies to operate the website, remember preferences, maintain shopping carts, authenticate accounts, measure website activity, prevent fraud and support advertising.

Types of cookies

Strictly necessary cookies: Required for checkout, account login, shopping-cart functions, security and core website operation.
Functional cookies: Remember settings and improve website features.
Analytics cookies: Help us understand website performance and visitor interactions.
Advertising cookies: May measure advertising, attribute purchases or deliver advertisements based on activity across websites or services.

Where required by law, nonessential cookies will not be activated until you provide the required consent. You may review or change available choices through our Privacy Choices interface.

Global Privacy Control

Where required by applicable law, we process a recognized Global Privacy Control or other legally recognized universal opt-out signal as a request to opt out of the sale or sharing of personal information and targeted advertising for the browser or device sending the signal.

Because these signals are generally browser- and device-specific, you may need to enable the signal separately on each browser or device you use. We may request additional information when you seek to apply an opt-out choice beyond the browser or device associated with the signal.

Do Not Track

Some browsers offer a “Do Not Track” setting. Because there is not one universally accepted technical standard for ordinary Do Not Track signals, our Services may not respond to those signals. This does not affect our treatment of legally recognized Global Privacy Control or universal opt-out signals.

7. How We Disclose Personal Information

We may disclose personal information to the following categories of recipients for legitimate business purposes:

Website and hosting providers: Providers supporting WordPress, WooCommerce, website hosting, content delivery, backups and technical maintenance.
Payment providers: Payment gateways, banks, fraud-prevention providers and transaction processors.
Shipping and fulfillment providers: Carriers, fulfillment partners, label providers and address-verification services.
Communication providers: Email delivery, newsletter, customer-support and notification providers.
Analytics and advertising providers: Providers that measure usage, campaign performance or advertising, subject to applicable consent and opt-out rights.
Professional advisers: Accountants, attorneys, insurers, auditors and consultants.
Government and legal recipients: Courts, regulators, law enforcement or other parties when disclosure is required or permitted by law.
Business-transaction recipients: Potential or actual purchasers, investors, lenders, successors and their advisers in connection with a corporate transaction.

We may also disclose information at your direction or with your consent.

Service providers are authorized to process personal information only as permitted by their agreements with us and applicable law.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including fulfilling orders, maintaining business and tax records, preventing fraud, complying with law, resolving disputes and enforcing agreements.

Information	General retention approach
Orders, transactions, refunds and tax records	Generally retained for up to seven years after the transaction, or longer when required for a legal, tax, audit or dispute-related purpose.
Customer accounts	Retained while the account remains active and for a reasonable period afterward for security, fraud prevention and recordkeeping.
Customer-support communications	Retained for as long as reasonably necessary to resolve the request, maintain service records and address disputes.
Marketing subscriptions	Retained until you unsubscribe. Limited suppression information may be retained afterward to ensure we continue honoring the opt-out request.
Website logs and security information	Retained for a limited period based on security, troubleshooting, fraud-prevention and operational needs.
Cookie and analytics information	Retained according to our configured cookie durations and the applicable provider’s retention settings.

We may delete, anonymize or aggregate information when it is no longer reasonably necessary. Backup copies may remain for a limited period until overwritten through ordinary backup procedures.

10. Data Security

We use reasonable administrative, technical and physical safeguards designed to protect personal information against accidental loss, unauthorized access, misuse, alteration and disclosure.

Our safeguards may include, as appropriate:

Encrypted website connections.
Restricted administrative access.
Strong authentication and access-control measures.
Software, plugin and system updates.
Backups, logging and security monitoring.
Payment processing through specialized third-party providers.
Vendor review and contractual data-protection requirements.
Procedures for responding to suspected security incidents.

No website, transmission method or storage system is completely secure. We therefore cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your password and for notifying us promptly if you believe your account has been compromised.

When required by applicable law, we will provide legally required notifications regarding a qualifying security breach.

11. Payment Information

Payment transactions are processed by the payment providers displayed during checkout. Payment-card information is transmitted directly to those providers and is governed by their privacy and security practices.

Tonny Collectables generally does not receive or store complete payment-card numbers or card-security codes. We may receive limited transaction information, such as the payment method, payment status, transaction identifier, card brand and last four digits.

Do not send payment-card information through email, product reviews, social-media messages or our general contact form.

12. Marketing Communications

We may send marketing emails when you request them, subscribe to our mailing list or when otherwise permitted by law.

You may unsubscribe from promotional emails at any time by using the unsubscribe link provided in the message or by contacting us. We may retain your email address on a suppression list so that we can honor your request.

Unsubscribing from marketing will not prevent us from sending non-promotional communications concerning an order, refund, account, security issue, policy update or customer-service request.

We do not authorize third parties to use our customer mailing list for their own independent marketing unless you have been provided with the legally required notice and choice.

13. U.S. State Privacy Rights

Depending on your state of residence and whether the applicable law applies to Tonny Collectables, you may have the right to:

Confirm whether we process your personal information.
Access or obtain a copy of personal information about you.
Correct inaccurate personal information.
Delete certain personal information.
Obtain a portable copy of information you provided.
Opt out of the sale of personal information.
Opt out of sharing or targeted advertising.
Opt out of certain profiling with legal or similarly significant effects.
Limit certain uses of sensitive personal information.
Withdraw consent where processing depends on consent.
Appeal a denial of a privacy request where applicable.
Receive equal service without unlawful discrimination for exercising a privacy right.

Submitting a request

You may submit a request through either of the following methods:

Web form: Submit a Privacy Request
Email: [support@tonnycollectables.com]

Please describe the right you wish to exercise and provide sufficient information to identify the relevant account or transaction.

Verification

We may need to verify your identity before fulfilling certain requests. Verification may require matching information supplied with information already maintained in our records. We will request only information reasonably necessary for verification.

We may be unable to complete a request when we cannot reasonably verify your identity, when an exception applies, or when fulfilling the request would conflict with applicable law.

Authorized agents

Where permitted by law, an authorized agent may submit a request on your behalf. We may require proof of the agent’s authority and may contact you directly to verify your identity or confirm that you authorized the request.

Appeals

When applicable law provides an appeal right, you may appeal our decision by replying to our decision notice or emailing us with the subject line “Privacy Request Appeal.”

Non-discrimination

We will not unlawfully discriminate against you for exercising an applicable privacy right. We may offer lawful programs, discounts or promotions when the terms comply with applicable law and any required notice is provided.

14. Supplemental Notice for California Residents

This section supplements the remainder of this policy and applies to California residents where the California Consumer Privacy Act, as amended, applies to Tonny Collectables.

Categories collected

During the preceding 12 months, we may have collected the following categories of personal information, depending on your interactions with us:

Identifiers.
Customer-record information.
Commercial information.
Internet or electronic-network activity.
Approximate geolocation information.
Audio, electronic or visual information you voluntarily submit.
Professional information when supplied in a business inquiry.
Inferences based on interactions with the Services.
Limited sensitive personal information, including account credentials and payment-related information handled by payment providers.

The specific examples, sources, purposes, recipients and retention criteria are described throughout this Privacy Policy.

Disclosure for business purposes

During the preceding 12 months, we may have disclosed identifiers, customer records, commercial information, device or internet activity, approximate location information, communications and limited sensitive information to the service-provider categories described in Section 7.

Sale or sharing

We have not sold personal information in exchange for money. Depending on the website tools enabled, we may disclose identifiers and internet or device activity to analytics or advertising providers in a way that may qualify as “sharing” for cross-context behavioral advertising or a “sale” under California law.

California residents may opt out through Your Privacy Choices or by enabling a recognized Global Privacy Control signal.

California rights

Subject to applicable limitations and verification requirements, California residents may request access, correction, deletion and information about collection, use, disclosure, sale or sharing. They may also opt out of sale or sharing and limit qualifying uses or disclosures of sensitive personal information.

We do not use or disclose sensitive personal information for purposes that require a right-to-limit notice unless otherwise disclosed at or before collection.

Minors

We do not knowingly sell or share personal information belonging to consumers under 16 years of age.

California Shine the Light

We do not disclose customers’ personal information to unaffiliated third parties for those third parties’ own direct-marketing purposes without providing any notice and choice required by applicable law.

Financial incentives

We do not currently offer a program that we treat as a financial incentive or price or service difference under California privacy law. If we introduce such a program, we will provide any legally required program-specific notice before enrollment.

15. Children’s Privacy

The Services are intended for a general audience and are not directed to children under 13 years of age. We do not knowingly collect personal information online from a child under 13 without legally required parental consent.

Customers who are not legally able to enter a binding purchase agreement should use the Services only with the involvement and permission of a parent or legal guardian.

If you are a parent or guardian and believe a child under 13 submitted personal information to us, contact us so that we can investigate and take appropriate action.

16. Third-Party Websites and Services

The Services may contain links to third-party websites, embedded content, social-media features, payment services or other external services.

We do not control the privacy, security or content practices of independently operated third parties. Your interaction with those services is governed by the third party’s own terms and privacy policy. Review those policies before providing personal information.

17. Business Transfers and Legal Disclosures

Personal information may be disclosed or transferred as part of a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, sale of assets or similar business transaction.

We may also preserve or disclose information when we reasonably believe doing so is necessary to comply with law, respond to lawful process, protect customers, investigate fraud, enforce agreements or protect the rights, property or safety of Tonny Collectables or others.

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our Services, technology, service providers, business practices or legal obligations.

The revised policy will display a new “Last updated” date. When required by law, we will provide additional notice or request consent before a material change takes effect.

Your continued use of the Services after an update does not waive any consent or notice requirement imposed by applicable law.

19. Contact Tonny Collectables

Privacy email:
[support@tonnycollectables.com]

Privacy-request form:
Submit a Privacy Request

Privacy and cookie choices:
Your Privacy Choices

Please do not include complete payment-card numbers, account passwords, government identification numbers or other unnecessary sensitive information in a privacy request.

Return to the top