Privacy Policy
How Toledo Marketplace collects, uses, and protects your personal data
Last updated: October 2026
1. Data Controller
The data controller responsible for your personal data is Toledo Marketplace, operated via the website toledo.one. You can reach us at info@toledo.one.
2. Data We Collect
When you use our marketplace or create an account, we may collect:
- Identity data: name, username, billing and delivery addresses
- Contact data: email address, telephone number
- Transaction data: order history, payment references, delivery records
- Technical data: IP address, browser type, device information, pages visited, session duration
- Account data: login credentials (passwords are stored in encrypted form only)
- Communication data: messages sent through our contact forms or support channels
3. How We Use Your Data
- Processing and fulfilling your marketplace orders
- Managing your account and providing customer support
- Processing payments through secure third-party payment providers
- Sending order confirmations, shipping updates, and delivery notifications
- Improving our website, product recommendations, and overall user experience
- Sending promotional communications (only with your explicit consent)
- Preventing fraud and ensuring marketplace security
- Complying with applicable legal obligations
4. Legal Basis
We process your data based on: (a) the performance of a contract when you place an order or create an account; (b) your consent for marketing communications; (c) our legitimate interests in improving services, preventing fraud, and maintaining marketplace security; and (d) compliance with legal obligations.
5. Data Sharing
We share your personal data only with trusted third parties who assist in operating our marketplace: payment processors for secure transactions, shipping carriers for order delivery, and IT service providers for hosting and maintenance. When you purchase from a third-party seller on our marketplace, we share the necessary delivery information with that seller to fulfil your order. We do not sell your personal data to third parties.
6. Cookies
Our website uses essential cookies to enable core functionality such as your shopping cart, user sessions, and CSRF protection. We may also use analytics cookies to understand how visitors interact with our marketplace. You can manage your cookie preferences through your browser settings at any time.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Order records are kept in accordance with applicable commercial record-keeping obligations. You may request deletion of your account data at any time, subject to legal retention requirements.
8. Your Rights
You have the right to:
- Access your personal data and receive a copy
- Rectify inaccurate or incomplete data
- Request erasure of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, contact us at info@toledo.one.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including SSL/TLS encryption for all data in transit, secure server infrastructure, and regular security audits. Payment information is processed through PCI DSS-compliant providers and is never stored on our servers.
10. Contact
If you have questions about this privacy policy or wish to exercise your data rights, please contact us at info@toledo.one.