Skip to content

Privacy Policy

Privacy Policy

This policy explains what personal data Tenso collects when you visit our online store or place an order, why we collect it, who it is shared with, how long we keep it, and what rights you have over it.

Last updated: 28 October 2026

1. Who is responsible for your data

The data controller for this store is:

  • Legal name: [TO COMPLETE: legal company name]
  • Registered address: [TO COMPLETE: registered address]
  • Company registration number: [TO COMPLETE: company registration number]
  • VAT number: [TO COMPLETE: VAT / tax number, or 'not applicable']
  • Contact e-mail for privacy matters: [TO COMPLETE: customer service e-mail]
  • Phone: No telephone support — we answer by e-mail
  • Data protection officer / privacy contact: No data protection officer has been designated; privacy requests are handled by the contact e-mail below

2. Where this store runs

This store is built and hosted on Shopify. The site, its hosting and the handling of your orders and payments run on Shopify's infrastructure.

  • Host and platform: Shopify Inc., 151 O'Connor Street, Ground floor, Ottawa, Ontario, K2P 2L8, Canada

Shopify stores the data of this store on its servers and processes it on our instructions, as our processor. Shopify also uses certain data for its own purposes as a controller (for example fraud prevention and the operation of its platform); see Shopify's own privacy policy for details.

3. What data we collect and why

3.1 Data you give us when you order

  • First and last name
  • Shipping and billing address
  • E-mail address
  • Phone number, when you provide one for delivery
  • Order contents, order value, currency, order date
  • Payment confirmation data (we never see or store your full card number; see section 5)

Why: to take your order, charge it, ship it, send you order and delivery notifications, handle returns and keep the accounting records we are legally required to keep.

3.2 Data you give us when you contact us

  • Your name, e-mail address and any content you include in your message or attachments

Why: to answer you, follow up on an order, a return or a warranty claim, and keep a record of the exchange.

3.3 Data you give us when you subscribe

  • E-mail address, and first name if you provide it
  • Subscription date, opening and click data on our e-mails

Why: to send you our offers and product news, and to stop sending them the moment you unsubscribe.

3.4 Data collected automatically when you browse

  • IP address, approximate location derived from it
  • Browser and device type, operating system, screen size, language
  • Pages viewed, time on page, referring site or ad, actions taken (products viewed, cart additions)
  • Cookie and similar identifiers (see section 6)

Why: to keep the site and cart working, to detect fraud and abuse, to measure traffic and, where you consent to it, to measure the performance of our advertising.

3.5 Data we do not ask for

We do not ask for and do not want health data. Our products are not medical devices and we do not collect medical history, diagnoses, injury records or any other health information. Please do not send us such details in your messages. If you do anyway, we delete them as soon as we have answered you.

4. Legal basis for each use

  • Performance of a contract: processing, shipping and after-sales handling of your order; creating and running your customer account.
  • Legal obligation: keeping invoices, accounting records and tax documents for the period required by law.
  • Legitimate interest: securing the site, preventing fraud and payment abuse, answering your messages, basic measurement of how the store is used, and defending our rights in case of a dispute.
  • Consent: marketing e-mails, non-essential cookies, advertising and audience measurement tools that require it. You can withdraw consent at any time, without affecting what was done before.

5. Payments

Payments on this store are processed through Shopify and the payment providers connected to it. Your card details are entered on the payment page and go directly to the payment provider. We never receive, see or store your full card number or your security code. What comes back to us is limited to the information needed to run the order: the payment status, the amount, the currency, the transaction reference and, in some cases, the card brand and the last digits of the card.

  • Payment providers used: Shopify Payments (credit and debit cards, Apple Pay, Google Pay) and any other method displayed at checkout

Payment providers process your data as independent controllers under their own privacy policies, including for fraud prevention and anti-money-laundering obligations.

6. Cookies and similar technologies

A cookie is a small file placed on your device when you browse. We use three kinds:

  • Strictly necessary cookies: placed by Shopify to keep your session open, remember your cart, apply your language and currency, and protect the checkout against fraud. These cannot be switched off without breaking the store, and they do not require your consent.
  • Audience measurement cookies: used to count visits, see which pages are read and where visitors come from, so we can improve the store. Where the law requires it, these are only set after you consent.
  • Advertising and remarketing cookies: used to measure which ads lead to a purchase and, where applicable, to show you our ads on other sites. These are only set with your consent.
  • Analytics and advertising tools actually installed on this store: Shopify Analytics and, with your consent, advertising pixels such as the Meta Pixel

You can change your choice at any time through the cookie banner or your browser settings. Deleting cookies in your browser removes your stored preference, so the banner will reappear on your next visit.

Lifetime: cookies we control are kept for a maximum of 13 months, and the data they generate for a maximum of 25 months. Third-party cookies follow the retention set by their own providers.

7. Who your data is shared with

We do not sell your personal data. We share it only with the parties needed to run the store:

  • Shopify Inc. — hosting of the site, order processing, checkout, customer accounts, store analytics.
  • Payment providers — processing and securing your payment, fraud prevention: Shopify Payments (credit and debit cards, Apple Pay, Google Pay) and any other method displayed at checkout
  • Carriers and fulfilment partners — delivering your parcel; they receive your name, address, phone number and e-mail for delivery notices: Tracked postal and courier services; the carrier is named in your shipping confirmation e-mail
  • E-mail and customer support tools — sending transactional and marketing e-mails and handling your messages: Shopify Email and Shopify Inbox
  • Analytics and advertising providers — see section 6, within the limits of your consent.
  • Professional advisers and authorities — our accountant, our lawyers, or a competent authority where a law or a valid legal request requires disclosure.

Each service provider acts on our instructions, under a contract limiting what it may do with the data, except where it acts as an independent controller as described above.

8. International transfers

Our platform is operated by Shopify Inc., based in Canada, and some of our providers operate servers outside your country, in particular in Canada, the United States and the European Union. This means your data may be transferred, stored and processed outside your country of residence.

When such a transfer leaves the European Economic Area or the United Kingdom, it is covered by one of the legal mechanisms provided for that purpose: an adequacy decision covering the destination country, or the Standard Contractual Clauses of the European Commission together with the additional measures our providers apply. You can ask us for a copy of the mechanism used for a given provider at [TO COMPLETE: customer service e-mail].

9. How long we keep your data

  • Order and customer data: for the duration of the commercial relationship, then archived for the legal limitation and accounting period. Invoices and accounting records: 6 years, as required by UK tax law
  • Customer account: until you ask for it to be deleted, or after a period of inactivity of 3 years
  • Support messages: up to 3 years from our last exchange.
  • Marketing e-mail list: until you unsubscribe, or after 3 years without any interaction from you.
  • Cookies and browsing data: see section 6.
  • Proof of consent: 3 years.

Once these periods end, the data is deleted or irreversibly anonymised.

10. Your rights

Depending on where you live, you have all or part of the following rights:

  • Access — obtain confirmation that we process your data and receive a copy of it.
  • Rectification — correct data that is inaccurate or incomplete.
  • Erasure — have your data deleted, unless we are legally required to keep it (an invoice, for example, cannot be deleted on request).
  • Restriction — ask us to freeze the use of your data while a dispute over it is resolved.
  • Objection — object to processing based on our legitimate interest, and object to direct marketing at any time, without needing a reason.
  • Portability — receive the data you gave us in a structured, machine-readable format, or have it sent to another provider.
  • Withdrawal of consent — withdraw consent for marketing or non-essential cookies at any time.
  • No sale or sharing of personal information — if you reside in a US state granting this right, you may opt out. We do not sell personal data.
  • Instructions on post-mortem use — where the applicable law provides for it, define what should happen to your data after your death.

10.1 How to exercise them

Write to [TO COMPLETE: customer service e-mail] or to Provided by e-mail with your return instructions — please do not send anything back before contacting us. We answer within one month of receiving your request. If the request is complex, we may extend that period by two months and will tell you so. We may ask for proof of identity if we have a reasonable doubt about who is making the request — only to make sure we are not handing your data to someone else.

To stop receiving marketing e-mails, the unsubscribe link at the bottom of each message is enough and takes effect immediately.

10.2 Complaints

If you believe we are mishandling your data, you may lodge a complaint with your supervisory authority:

  • Competent supervisory authority: the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom — ico.org.uk

11. Security

We take reasonable technical and organisational measures to protect your data:

  • Encrypted connection (HTTPS/TLS) across the whole store, including the checkout.
  • Card data handled by PCI-DSS compliant payment providers; card numbers never reach our systems.
  • Access to the store back office limited to the people who need it, with individual accounts and strong authentication.
  • Hosting and backups managed by Shopify on its own secured infrastructure.
  • Regular review of the providers and apps connected to the store.

No system is perfectly secure. If a data breach occurs that is likely to create a high risk for you, we will inform you and the competent authority within the time limits set by the applicable law.

12. Children

This store is not intended for children. We do not knowingly collect data from a person under 13. If you believe a child has given us data, write to us and we will delete it.

13. Automated decisions

We do not make decisions producing legal effects about you by purely automated means. The fraud-prevention filters applied at checkout by Shopify and the payment providers may flag or block a transaction; in that case you can contact us and a human will review the order.

14. Changes to this policy

We may update this policy when the store, our providers or the law change. The version in force is always the one published on this page, with its update date at the top. If the change is significant and concerns data we already hold about you, we will inform you by e-mail or by a notice on the site.

15. Contact

Any question about this policy or about your data:

  • Tenso
  • E-mail: [TO COMPLETE: customer service e-mail]
  • Postal address: [TO COMPLETE: registered address]
  • Phone: No telephone support — we answer by e-mail
  • Publication director: [TO COMPLETE: publication director name]