Privacy policy.

Last updated: October 2026

Information we collect

When you place a cash-on-delivery order, this website stores your name, phone number, delivery address, optional email, order notes, the items ordered, and the order total. When you send a contact message, the website stores your name, email address, subject, message, and the date it was sent.

How we use it

We use these details to process and deliver orders, contact customers about their order, answer customer questions, manage stock and fulfilment, and protect the store from misuse. This starter store does not request or store bank card details and does not integrate an online payment gateway.

Who can see it

Order and contact details are stored in the website’s hosting database and are available to authorized store administrators. Delivery details may be shared with the courier as needed to fulfil an order. This website does not intentionally sell customer personal information.

Cookies and sessions

The site uses a server session to keep track of your shopping bag and protect forms. These are necessary for the store’s basic functions.

Access or corrections

If you need to correct information connected to an order or ask about your data, use the contact page and include enough details for us to identify the relevant order. We may need to retain transaction records for legitimate operational or legal reasons.

Website traffic logs

For basic site analytics and operational security, TORUNNO records the IP address presented by the web server, the time of a page visit, the page path, the referring page's domain/path (without query strings), browser and device information derived from the browser user-agent, and the browser's language preference. The log does not record form contents, passwords, checkout fields, or URL query-string values. Visits to admin pages and requests made by signed-in administrators are excluded.

Traffic logs are automatically deleted after 30 days and are visible only to authenticated store administrators. IP addresses and browser details can be personal data. Shared networks, proxies, and automated crawlers can affect visitor estimates; the log does not identify a person's name or precise physical location.