1. Who is responsible for your information?
Wimbledon Welwyn Trading Limited, trading as Ātotoi, is the controller of personal data covered by this policy. Our company number is 16426299.
Registered office:
71–75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ
Privacy contact: privacy@atotoi.me
2. Information we use
Information you give us
If you email us, we receive the information in your email, such as your name, email address and message. Please do not send sensitive personal information unless it is necessary.
Information created when you visit
We use Cloudflare's Web Analytics to receive aggregated, cookie-free information about website performance and use, such as page paths, referring host, country, device type, browser and operating system. We also use Cloudflare to help deliver and protect the website.
Optional analytics information
If you choose to enable analytics, PostHog records the specific events we have configured: a landing-page view and a click through to our Etsy shop, including the CTA location. We do not enable PostHog autocapture, session recordings, error tracking or device-model collection on this site.
Your preference
We store your analytics choice in theatotoi_consentcookie so that we can remember it. This cookie does not identify you directly.
3. Why we use information and our legal bases
Running and protecting the website
We use limited technical and security information to make the site available, prevent misuse, diagnose problems and remember your cookie choice. We do this for our legitimate interests in operating a secure, reliable website and, in relation to your preference, to meet our privacy obligations.
Responding to you
We use correspondence you send us to respond to your request and to keep an appropriate record of it. Depending on the request, this is necessary for our legitimate interests or to take steps you ask us to take.
Optional analytics
We use PostHog only with your consent, to understand the volume of visits and whether people use our Etsy calls to action. You can withdraw consent at any time through Cookie settings.
4. Analytics and cookies
Cloudflare Web Analytics
Cloudflare Web Analytics is enabled to help us understand website performance and high-level traffic. It is designed to work without cookies or browser storage. Cloudflare states that its Web Analytics service does not collect or use visitors' personal data; its performance data relates to the current webpage.
PostHog product analytics
PostHog is optional. It is not loaded until you accept analytics. If accepted, PostHog may use cookies or local browser storage to recognise an analytics browser and record the limited events described above. We use its EU cloud project, hosted in Frankfurt.
Managing your choice
You can accept, reject or withdraw optional analytics using the controls shown when you first visit or the Cookie settings button below. Withdrawing consent stops future PostHog collection and clears PostHog data stored by this website from your browser where possible.
5. Who receives information?
We do not sell personal information or use it for targeted advertising. We use service providers to help operate the site. They process information on our behalf or, where they act independently, under their own notices.
- Cloudflare helps deliver, protect and measure the performance of the website.
- PostHog provides optional product analytics after you consent.
- Email providers may process messages sent to our privacy contact address.
We may also disclose information where required by law or necessary to establish, exercise or defend legal claims, or in connection with a business reorganisation or sale.
6. International transfers
We are based in the United Kingdom. Our PostHog project is in the EU (Frankfurt). Some suppliers, including Cloudflare, operate global infrastructure, so information may be processed outside the UK or European Economic Area.
Where a transfer of personal data needs a safeguard under applicable law, we use the appropriate transfer mechanism, such as an adequacy decision or contractual safeguards.
7. How long we keep information
- Analytics preference: the consent cookie lasts for up to 180 days unless you change or clear it.
- PostHog analytics: we retain events only for as long as needed to understand and improve the launch site, subject to the retention settings in our PostHog project. We review those settings regularly.
- Cloudflare Web Analytics: Cloudflare provides us with dashboard reports for up to six months.
- Emails: we keep correspondence for as long as needed to respond and keep an appropriate business record, then delete or anonymise it where appropriate.
8. Your privacy rights
Depending on where you live and the law that applies, you may have rights to request access to, correction of, deletion of, or restriction of the use of your personal information. You may also have the right to object to certain processing and to receive a portable copy of information you provided to us.
Where we rely on consent, you can withdraw it at any time. To exercise a right, emailprivacy@atotoi.me. We may need to verify your identity before acting on a request.
If you are in the UK, you can complain to the Information Commissioner's Office. If you are in the EEA, you may also complain to your local data-protection authority. We would appreciate the chance to address your concern first.
9. Etsy, social media and other external links
The site links to Etsy and may link to social media services. Once you leave our site, the destination service is responsible for its own collection and use of information. We encourage you to read its privacy notice before providing information or making a purchase.
In particular, Etsy is responsible for the account, checkout, payment, order and fulfilment information it processes on its marketplace. We do not receive your payment-card details from Etsy through this landing site.
10. Changes to this policy and how to contact us
We may update this policy when our website, suppliers or legal obligations change. We will post the updated version here and change the “Last updated” date. If we introduce a materially different use of personal information, we will provide any additional notice or choice required by law.
Questions or requests: privacy@atotoi.me.