Privacy Policy

Last updated: 7 Nov 2025

This Privacy Policy explains how TeddyBearCup (“we,” “us,” “our”) collects, uses, shares, and protects your personal information when you visit our website, place an order, or contact us (collectively, the “Services”). If you have any questions, email support@teddybearcup.com.

1) Who we are

TeddyBearCup is an e-commerce store. We act as the “data controller” for information we collect directly from you. We also use trusted service providers (“processors”) to operate our store, payments, shipping, analytics, and advertising.

2) Information we collect

Information you provide

  • Contact details (name, email, phone, shipping/billing address)

  • Order details (products, amount, delivery preferences)

  • Payment info (tokenized by our payment processor; we do not store full card numbers)

  • Messages you send us (support requests, reviews, photos)

Information collected automatically

  • Device and usage data (IP address, browser type, pages viewed, timestamps, referring URLs)

  • Cookies and similar technologies (see Cookies section)

Information from third parties

  • Payment approval/decline signals from payment processors

  • Shipping status from carriers

  • Analytics/ads insights from platforms like Google

3) How we use your information (purposes & legal bases)

We process your information under the following legal bases (GDPR/UK GDPR):

  • To fulfill a contract: process orders, take payment, deliver products, provide customer support, handle returns.

  • Legitimate interests: operate and improve the site, prevent fraud/abuse, measure performance, personalize content, basic direct marketing to existing customers (you can opt out).

  • Consent: non-essential cookies/analytics/ads, email marketing where required.

  • Legal obligations: tax, accounting, and compliance record-keeping.

4) Sharing your information

We share data only as needed to run the business:

  • E-commerce platform & hosting (storefront, checkout, security)

  • Payment processors (e.g., card gateways, PayPal)

  • Fraud prevention tools

  • Fulfillment & shipping partners (warehouses, carriers, tracking portals)

  • Customer support & email service providers

  • Analytics & advertising (e.g., Google Analytics/Ads)

  • Professional advisors (legal, accounting) and authorities when required by law

We require these providers to protect your data and use it only for our instructions.

5) Cookies and tracking

We use cookies and similar technologies to:

  • Keep you signed in, remember cart contents, and enable checkout (strictly necessary)

  • Measure site performance and detect issues (analytics)

  • Show relevant ads and limit ad frequency (advertising/retargeting)

Where required, we display a cookie banner to obtain consent for non-essential cookies. You can manage preferences via the banner or your browser settings. Disabling cookies may affect site functionality.

6) Advertising & analytics

We may use platforms like Google Analytics and Google Ads to understand performance and reach customers. These services may set their own cookies and receive pseudonymous data (e.g., IP address, device IDs). You can opt out of Google Analytics with the Google opt-out add-on and manage ad personalization in your Google account or via your cookie preferences.

7) Email marketing & SMS

With your consent (or where allowed by law), we may send product updates and offers. You can unsubscribe at any time using the link in our emails or by contacting support@teddybearcup.com. If we offer SMS, reply STOP to opt out.

8) Data retention

  • Orders & invoices: kept for up to 6–10 years (tax/accounting requirements vary by country).

  • Support messages: typically 24 months after last interaction.

  • Marketing data: until you unsubscribe or your consent is withdrawn.

  • Cookies: per their individual lifetimes (see banner/preferences).

We keep data longer only if necessary for legal claims or obligations.

9) Your privacy rights

Depending on your location (e.g., EU/EEA/UK, certain U.S. states), you may have rights to:

  • Access, correct, or delete your personal data

  • Port your data

  • Object to or restrict certain processing (including direct marketing)

  • Withdraw consent at any time (does not affect prior processing)

To make a request, email support@teddybearcup.com with your name, contact email, and request details. We may ask for information to verify your identity. We will respond within the time required by law.

California (CCPA/CPRA)

  • We do not sell personal information for money. We may “share” limited data for cross-context behavioral advertising. You can opt out via our cookie preferences or by emailing support@teddybearcup.com with “Do Not Sell/Share My Personal Information” in the subject.

10) International transfers

We operate from the EU and/or work with providers in other countries. When transferring data internationally, we use approved safeguards such as Standard Contractual Clauses or rely on adequacy decisions, as applicable.

11) Security

We use administrative, technical, and physical safeguards designed to protect your information (encryption in transit, access controls, least-privilege). No method is 100% secure; please use a strong, unique password if you create an account.

12) Children

Our Services are not directed to children under 13 (or the age of digital consent where you live). We do not knowingly collect personal information from children. If you believe a child has provided information, contact us to delete it.

13) Third-party links

Our site may link to external websites (e.g., tracking portals). Their privacy practices are governed by their own policies.

14) Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date shows the latest revision. If changes are material, we’ll provide reasonable notice (e.g., email or site banner).

15) Contact us

If you have questions, requests, or complaints about privacy, contact:
Email: support@teddybearcup.com