Data and Security

We handle contact details, sourcing and styling briefs, correspondence, and relevant order and invoice records. Our main website uses Vercel and Firebase; Shopify supports the shop and checkout. Email, messaging, document and delivery providers support our service. The Privacy Policy explains purposes, lawful bases, sharing, retention and your rights.

Administrative access is authenticated and restricted to authorised team members. Public enquiry forms accept submissions without making client records publicly readable. We take reasonable technical and organisational steps to protect information; no system can guarantee perfect security.

Payments are processed through Shopify and the payment providers available at checkout, or the payment method agreed for a service. We do not store full payment-card numbers on our own website servers. Never send passwords, authentication codes or complete card details through an enquiry form or unsolicited message.

We retain information for the operational, legal and accounting purposes described in our Privacy Policy, and review or remove it when it is no longer needed. Contact info@tufffinds.com to exercise data rights or report a suspected security issue. Our business contact details are on the Contact Information page.