Last updated: June 4, 2026
TumbleTots (“TumbleTots,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains what information we collect when you visit tumbletots.shop or place an order, how and why we use it, who we share it with, how long we keep it, and the choices and rights you have. By using our site or buying from us, you agree to the practices described here.
Who we are
TumbleTots is an online store selling baby cushion backpack pillows. We are the controller responsible for the personal information described in this policy. If you have any questions or want to exercise your privacy rights, email us at vulentemanagement@gmail.com.
Information we collect
Information you give us
- Order & contact details — name, email address, shipping and billing address, and the items you order.
- Account details — if you create an account, the email (and any name) associated with it, plus saved addresses and order history.
- Payment details — card and payment information is entered at checkout and processed directly by our payment provider. We do not see or store your full card number.
- Communications — messages you send us through our contact form or by email, and your newsletter sign-up if you choose to subscribe.
Information we collect automatically
- Device & usage data — IP address, device and browser type, pages viewed, referring pages, and how you interact with the site.
- Cookies & similar technologies — used to keep your cart, run the store, measure performance, and support advertising (see “Cookies & tracking” below).
How we use your information
- To process, fulfill, and deliver your orders
- To send order confirmations, shipping, and service updates
- To respond to your questions and provide customer support
- To create and manage your account
- To prevent fraud and keep the store and payments secure
- To operate, analyze, and improve our site and products
- To send marketing emails and show relevant ads, where you have consented or where permitted by law (you can opt out at any time)
- To meet our legal, tax, and accounting obligations
Legal bases (for visitors in the EU/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to fulfill your order); your consent (for marketing emails and non-essential cookies); our legitimate interests (to secure, analyze, and improve the store); and compliance with legal obligations.
Cookies & tracking
We use essential cookies to run the store and remember your cart, analytics cookies to understand how the site is used, and advertising and measurement tools so we can reach new customers and see whether our ads work. The advertising and analytics partners we currently use include Shopify, Meta (Facebook/Instagram) Pixel, Snap Pixel, Microsoft (Bing) UET, Pinterest Tag, and Klaviyo (email). These partners may set their own cookies. You can control or block cookies through your browser settings, and you can opt out of most ad personalization through each platform’s settings.
How we share information
We do not sell your personal information. We share it only with the service providers we need to run the store, and only as far as they need it to perform their service:
- Shopify — hosts our store and processes payments and checkout.
- Shipping & fulfillment partners — to pack and deliver your order and provide tracking.
- Email & marketing tools (e.g. Klaviyo) — to send order, account, and (with consent) marketing emails.
- Analytics & advertising partners (e.g. Meta, Snap, Microsoft, Pinterest) — to measure performance and show ads.
- Legal & safety — when required by law, to enforce our terms, or to protect our rights, customers, or others.
International transfers
We and our providers may process your information in countries other than where you live, including the United States. Where required, we rely on appropriate safeguards for these transfers.
How long we keep your information
We keep personal information for as long as needed to fulfill your order, provide support, and meet legal, tax, and accounting requirements. Order records are typically retained for several years as required by law. Marketing data is kept until you unsubscribe or ask us to delete it.
How we protect your information
We use industry-standard safeguards, including encryption in transit (HTTPS) and secure, PCI-compliant payment processing through Shopify. No method of transmission or storage is completely secure, but we work to protect your information and limit access to it.
Children’s privacy
Our products are made for babies, but our store is intended for use by adults (parents and caregivers). Our site is not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
Your choices
- Marketing emails — unsubscribe any time using the link in any email, or email us to be removed.
- Cookies — manage or block cookies in your browser settings.
- Account — sign in to update your details, or contact us for help.
Your privacy rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. If you are a California resident, you have the right to know what we collect, to request deletion, and to opt out of the “sale” or “sharing” of personal information — and we will not discriminate against you for exercising these rights. To make a request, email vulentemanagement@gmail.com. We may need to verify your identity before responding.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes may be highlighted on this page.
Contact us
Questions about your privacy or this policy? Email us at vulentemanagement@gmail.com or use our contact page.
This policy is provided for general information and does not constitute legal advice. For obligations specific to your business or jurisdiction, consult a qualified attorney.