PRIVACY POLICY

Effective Date: February 1, 2026

1. INTRODUCTION

This Privacy Policy describes how TobiTribe collects, uses, stores, and protects personal data of users who access or make purchases through the website https://tobitribe.com.

The policy has been developed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable European data protection laws.

The purpose of this document is to ensure transparency regarding the processing of personal data and to inform users about their rights.

By using the TobiTribe website, users acknowledge that they have read and understood this Privacy Policy.

2. DATA CONTROLLER INFORMATION

For the purposes of applicable data protection legislation, the data controller responsible for personal data processing through the website is:

GLOBAL INTEGRATED MARKETING COMMUNICATION GROUP HOLDINGS LIMITEDMINDEN AVENUE TSIM SHA TSUI, KLRM 01,15/F, GOLDSLAND BUILDING 22-26Tsim Sha TsuiHong Kong

Email: info@tobitribe.com
Email: info@tobitribe.com

The data controller determines the purposes and means of processing personal data collected through the website.

3. LEGAL BASIS FOR DATA PROCESSING

TobiTribe processes personal data based on one or more of the legal bases defined in Article 6 of the GDPR.

3.1 Contractual Necessity – Article 6(1)(b)

Processing is necessary for the performance of a contract when users:

place an order
request delivery of purchased products
communicate regarding order fulfillment

3.2 Legal Obligation – Article 6(1)(c)

Certain data may be processed to comply with legal obligations, including:

accounting requirements
tax regulations
consumer protection laws

3.3 Legitimate Interests – Article 6(1)(f)

Processing may occur when necessary for legitimate business interests, including:

fraud prevention
website security
business analytics
service improvement

Such interests are carefully balanced against the rights and freedoms of the data subject.

3.4 Consent – Article 6(1)(a)

Where required, TobiTribe processes personal data based on user consent, including:

marketing communications
non-essential cookies
analytics or advertising technologies

Users may withdraw consent at any time.

4. TYPES OF DATA COLLECTED

TobiTribe may collect and process several categories of personal data.

4.1 Information Provided by Customers

When customers place orders or contact support, the following information may be collected:

full name
delivery address
billing address
email address
phone number
payment information (processed via secure payment providers)
order details
communication records

4.2 Account Information

Where accounts are created, additional information may include:

login credentials
account preferences
purchase history

4.3 Customer Support Data

When customers contact support, data may include:

communication content
attachments or supporting documentation
product issue reports

5. DATA COLLECTED AUTOMATICALLY

When users access the website, certain technical information may be collected automatically.

This may include:

IP address
device type
browser type
operating system
website interaction data
referring website
pages visited
session duration

This information helps ensure website security, functionality, and performance optimization.

6. COOKIES AND TRACKING TECHNOLOGIES

TobiTribe uses cookies and similar technologies to enhance website functionality and improve user experience.

Cookies may be used for:

website functionality
remembering preferences
analytics and performance measurement
fraud detection
marketing and advertising (where consent is given)

Further details regarding cookies are provided in the Cookie Policy.

7. PURPOSES OF DATA PROCESSING

Personal data collected through the website may be used for the following purposes:

processing and fulfilling orders
delivering purchased products
communicating with customers regarding orders
responding to customer inquiries
improving website functionality
analyzing website usage patterns
preventing fraud or abuse
complying with legal obligations
managing customer accounts

Personal data will only be processed for legitimate and specified purposes.

8. DATA RETENTION PERIODS

TobiTribe retains personal data only for as long as necessary to fulfill the purposes for which the data was collected.

Retention periods may include:

Order data: retained for accounting and tax compliance periods
Customer support communications: retained for service quality and dispute resolution
Website analytics data: retained for performance analysis purposes
Marketing data: retained until consent is withdrawn

Data is securely deleted or anonymized once retention periods expire.

9. THIRD-PARTY DATA PROCESSORS

TobiTribe may share personal data with trusted third-party service providers necessary for operating the website and fulfilling orders.

These may include:

payment service providers
courier and logistics companies
hosting providers
website analytics providers
customer support software providers
fraud prevention services

These third parties are required to process personal data in accordance with applicable data protection laws and contractual safeguards.

10. DATA SECURITY MEASURES

TobiTribe implements appropriate technical and organizational measures to protect personal data.

Security measures may include:

encrypted data transmission (HTTPS)
secure server infrastructure
access controls
payment security protocols
internal data protection procedures

These safeguards aim to prevent unauthorized access, disclosure, alteration, or destruction of personal data.

11. INTERNATIONAL DATA TRANSFERS

Personal data may be processed or stored in jurisdictions outside the European Economic Area.

Where such transfers occur, TobiTribe ensures that appropriate safeguards are implemented in accordance with GDPR requirements, including:

contractual safeguards
approved data protection mechanisms
protection of fundamental data subject rights

12. DATA SUBJECT RIGHTS UNDER GDPR

Individuals whose data is processed by TobiTribe have several rights under the GDPR.

12.1 Right of Access

Users have the right to request confirmation of whether their personal data is being processed and to obtain access to that data.

12.2 Right to Rectification

Users may request correction of inaccurate or incomplete personal data.

12.3 Right to Erasure

Users may request deletion of personal data under certain conditions, commonly referred to as the right to be forgotten.

12.4 Right to Restriction of Processing

Users may request restriction of data processing in specific circumstances.

12.5 Right to Data Portability

Users may request that their personal data be provided in a structured, commonly used format.

12.6 Right to Object

Users may object to certain types of processing, particularly where processing is based on legitimate interests.

12.7 Right to Withdraw Consent

Where processing is based on consent, users may withdraw consent at any time.

13. RIGHT TO LODGE A COMPLAINT

Users have the right to lodge a complaint with a competent supervisory authority if they believe that their data protection rights have been violated.

Supervisory authorities exist in each EU Member State.

14. CHILDREN’S DATA

The TobiTribe website is not intended for use by individuals under the age of 18.

The company does not knowingly collect personal data from minors.

If such data is identified, it will be deleted promptly.

15. PRIVACY POLICY CHANGES

TobiTribe may update this Privacy Policy periodically to reflect legal requirements or operational changes.

Any updates will be published on the website with the updated effective date.

Users are encouraged to review this policy regularly.

16. CONTACT FOR PRIVACY MATTERS

For questions regarding this Privacy Policy or personal data processing, users may contact:

Privacy Contact
GLOBAL INTEGRATED MARKETING COMMUNICATION GROUP HOLDINGS LIMITED