Cookie policy
Last updated: 20 October 2026.
1. What is a cookie?
A cookie is a small text file placed on your device when you visit toveandco.com. Local storage (localStorage) does a similar job: it remembers information in your browser without sending it to our servers.
2. Data controller
NEXUS SYNERGY - FZCO, licence no. 49338, IFZA Business Park, Building A2, Dubai Silicon Oasis, United Arab Emirates. Email: hello@toveandco.com.
3. Cookies and storage we use
3.1 Strictly necessary (No consent required)
| Name | Purpose | Duration |
|---|---|---|
| tove-cart | Contents of your basket (local storage) | Until you empty it |
| tove-country | Chosen delivery country, for VAT and delivery times (local storage) | Until changed |
| tove-promo | Discount code entered (local storage) | Until you order |
| Stripe cookies | Securing payment and preventing fraud | Session to 1 year |
3.2 Audience measurement (With your consent where it is required)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| [To be completed: depending on the tool chosen] | [To be completed: measurement tool, ideally without third-party cookies] | Aggregated visit statistics | 13 months maximum |
3.3 Marketing and advertising: No advertising cookies are set at launch. If advertising campaigns were measured in future (Meta, Google Ads), this page and the consent banner would be updated before any such cookie is set.
4. Managing your preferences
On your first visit, a consent banner lets you accept or refuse non-essential cookies. You can change your choice at any time with the "Manage cookies" link in the footer, or set your browser to accept, refuse or delete cookies (Chrome: Settings → Privacy and security; Firefox: Settings → Privacy & Security; Safari: Settings → Privacy; Edge: Settings → Cookies and site permissions). Turning off local storage stops the basket from working.
5. How long they last
Cookies last no more than 13 months after they are set. After that, we ask for your consent again. Information collected through cookies is kept for a maximum of 25 months.
6. Data transfers
Some providers (Stripe, Cloudflare) may transfer your data outside the United Kingdom, in particular to the United States. These transfers are protected by the International Data Transfer Agreement or the UK Addendum to the standard contractual clauses, and/or the UK Extension to the EU-U.S. Data Privacy Framework.
7. Legal basis
Under the Privacy and Electronic Communications Regulations 2003 (PECR), strictly necessary cookies and storage, without which the basket or secure payment would not work, can be used without your consent; the related processing relies on our legitimate interest in running the website properly (Article 6(1)(f) UK GDPR). All other cookies are only set with your consent (Article 6(1)(a) UK GDPR), which you can withdraw at any time.
8. Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent: see the privacy policy. You also have the right to complain to the Information Commissioner's Office (ICO), the UK authority for data protection and PECR (ico.org.uk).
9. Contact
Email: hello@toveandco.com. Address: NEXUS SYNERGY - FZCO, IFZA Business Park, Building A2, Dubai Silicon Oasis, United Arab Emirates.