Privacy policy

Last updated: 10 August 2026

1. Who is responsible for your personal data

Glodinas Holding B.V., trading as Tommy Murr, is the data controller for the personal data described in this policy, except where another party acts as an independent controller.

Glodinas Holding B.V.
Leyweg 336
2545 ED 's-Gravenhage
Netherlands
KVK: 80777317
VAT ID: NL861796615B01
Email: info@tommymurr.com
Phone: +31 (0)6 21 40 23 08

2. Personal data we process

Depending on how you interact with the store, we may process:

  • identity and contact details, such as your name, email address, telephone number, billing address and delivery address;
  • order and transaction information, including products viewed or purchased, order status, returns, refunds and communications about an order;
  • payment-related information and payment confirmation. Full card details are processed by Shopify and the selected payment provider rather than stored by Tommy Murr;
  • account information, preferences and customer-service communications;
  • device, browser, IP address, cookie identifiers and information about how the storefront is used;
  • marketing preferences and information about interactions with marketing messages or advertisements; and
  • fraud-prevention, security and compliance information.

3. How we collect personal data

We collect information directly from you when you browse, place an order, create an account, submit a form, request a return or contact us. We also receive information automatically through the storefront and from service providers such as Shopify, payment providers, fulfilment partners, carriers and fraud-prevention providers.

4. Why we process personal data

We process personal data for the following purposes and legal bases where the GDPR applies:

  • Contract: to operate the store, accept and fulfil orders, process payments, arrange delivery, provide tracking, handle returns and provide customer service;
  • Legal obligations: to maintain tax and accounting records, respond to lawful requests, meet product-safety and consumer-law duties and prevent unlawful transactions;
  • Legitimate interests: to secure the store, prevent fraud, diagnose technical problems, improve services, manage disputes and understand store performance, provided those interests are not overridden by your rights;
  • Consent: where required for non-essential cookies, certain analytics, personalised advertising or electronic marketing. You may withdraw consent at any time; and
  • Legal claims and vital interests: where necessary to establish, exercise or defend legal claims or protect a person’s vital interests.

5. How we share personal data

We share personal data only where reasonably necessary with:

  • Shopify, which hosts the storefront, checkout and related commerce services;
  • payment providers selected during checkout;
  • suppliers, fulfilment partners and carriers, including CJ Dropshipping and its logistics partners, to prepare, dispatch, track and deliver orders;
  • technology, hosting, analytics, security and customer-support providers used to operate and protect the store;
  • professional advisers and public authorities where required for accounting, legal compliance, claims or lawful requests; and
  • a buyer, investor or successor if the business or relevant assets are reorganised, sold or transferred, subject to appropriate safeguards.

We do not sell personal data for money. Depending on the technologies enabled and the law where you live, some advertising-related disclosures may be treated as “sale,” “sharing” or targeted advertising. Where required, the storefront provides an opt-out mechanism.

6. Shopify

The store is powered by Shopify. Information submitted through the storefront is processed by Shopify to provide and improve its commerce services. Shopify can also act as an independent controller for certain processing. Read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal for more information.

7. International transfers

Shopify, suppliers, fulfilment partners and other providers may process personal data outside the European Economic Area or United Kingdom, including in Canada, the United States and China. Where required, we rely on an adequacy decision, approved standard contractual clauses or another legally recognised transfer safeguard. You may contact us for further information about safeguards relevant to your data.

8. Cookies and similar technologies

We use cookies and similar technologies required for storefront operation, checkout, security and customer preferences. With consent where required, optional technologies may support analytics, marketing and personalised advertising. Use the Cookie preferences control on the storefront to review or change available choices. Withdrawing consent does not affect processing that occurred before withdrawal.

9. Marketing

We send electronic marketing where permitted by law, including where you consented or where an existing-customer exception applies. You can unsubscribe using the link in a marketing message or by contacting us. We may still send non-marketing communications about orders, accounts, security or legal matters.

10. Retention

We retain personal data only as long as reasonably necessary for the purposes described above. Retention periods depend on the type of information, the duration of the customer relationship, tax and accounting requirements, fraud-prevention needs, warranty and consumer-law periods, dispute limitation periods and legal obligations. When information is no longer required, we delete or anonymise it where reasonably possible.

11. Security

We use reasonable organisational and technical measures designed to protect personal data. No transmission or storage method is completely secure. Keep account credentials confidential and contact us if you suspect unauthorised access.

12. Your rights

Depending on the law where you live, you may have rights to request access to, correction of, deletion of or portability of personal data; restrict or object to processing; withdraw consent; and complain to a supervisory authority. These rights can be subject to legal conditions and exceptions.

To exercise a right, email info@tommymurr.com. We may request information necessary to verify identity and authority. We will respond within the period required by applicable law.

If you are in the European Economic Area, you can complain to your local data-protection authority. Our lead Dutch supervisory authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Where US state privacy laws apply, you may also have rights to opt out of sale, sharing or targeted advertising and to appeal a decision concerning a privacy request. Where available, use the storefront privacy opt-out page or contact us. We honour legally recognised browser-based opt-out signals where required.

13. Children

The store is intended for adults purchasing pet products. We do not knowingly collect personal data from children who cannot legally consent to the relevant processing. A parent or guardian who believes a child provided personal data can contact us to request review or deletion.

14. Third-party links

The storefront may link to websites operated by third parties. Their privacy and security practices are governed by their own notices. Review those notices before providing personal data.

15. Changes to this policy

We may update this policy to reflect changes in our services, providers or legal obligations. We will publish the revised version and update the date above. Where required, we will provide additional notice or request consent.

16. Contact

For privacy questions or requests, contact Glodinas Holding B.V. at info@tommymurr.com, call +31 (0)6 21 40 23 08, or write to Leyweg 336, 2545 ED 's-Gravenhage, Netherlands.