Privacy Policy

Last updated: 9 September 2026

Swapto respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what information we collect, how we use it, who we may share it with, and your rights.

Who we are

Swapto is an independent UK retailer of pre-owned Yoto cards.

For data protection purposes, Swapto is the data controller of your personal information.

You can contact us at:

Email: hello@swapto.co.uk

Address: 54 Lower Chapel Lane, Frampton Cotterell, BS36 2RH, United Kingdom

Information we collect

We may collect the following personal information when you use our website, place an order, create an account, contact us, or use our services:

• Your name

• Email address

• Phone number, where provided

• Billing and delivery address

• Order and transaction details

• Account information

• Communications you send to us

• Marketing preferences

• Information about how you use our website

• Device, browser and IP address information

• Cookie and analytics information

Payment information is processed securely by our payment providers. We do not directly store full payment card details.

How we use your information

We use your personal information to:

• Process and fulfil your orders

• Take and manage payments

• Arrange delivery

• Process returns, refunds and customer service requests

• Manage your account

• Communicate with you about your orders

• Prevent fraud and keep our website secure

• Maintain financial and tax records

• Improve our website, products and services

• Understand how customers use our website

• Send marketing communications where you have agreed to receive them

• Show relevant advertising where you have consented to advertising cookies

Our lawful basis for using your information

Under UK data protection law, we rely on different lawful bases depending on why we are using your information.

These include:

• Contract – where we need your information to process an order, take payment, deliver products or provide customer service.

• Legal obligation – where we need to keep records or comply with legal, tax or regulatory requirements.

• Legitimate interests – where we use information to protect our business, prevent fraud, improve our services or understand how our website is used, provided this does not override your rights.

• Consent – where required, including for certain marketing, analytics and advertising activities.

Where we rely on consent, you can withdraw it at any time.

Who we share your information with

We may share personal information with trusted service providers where necessary to operate our business.

These may include:

• Shopify, which hosts our online store

• Payment providers

• Royal Mail and other delivery providers

• Website hosting and technology providers

• Analytics providers

• Advertising platforms such as Google, where enabled

• Email and customer communication providers

• Professional advisers, accountants or legal advisers

• Government bodies or law enforcement where required by law

We only share information where necessary and expect our service providers to protect your personal information appropriately.

Shopify

Our online store is powered by Shopify.

Shopify collects and processes certain personal information in order to provide the ecommerce services used by our store.

You can find more information about how Shopify handles personal information in Shopify's own privacy policy.

Cookies

Our website uses cookies and similar technologies.

Some cookies are essential for the website to work correctly, for example to remember your shopping basket or allow checkout.

We may also use analytics and advertising cookies to understand how our website is used and to measure or improve advertising.

Where required by law, non-essential cookies will only be used with your consent.

You can manage your cookie preferences through the cookie settings available on our website.

Marketing

If you choose to receive marketing communications from us, we may send you information about products, offers or services.

You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us at hello@swapto.co.uk.

We may still send you essential service messages, such as order confirmations and delivery updates.

How long we keep your information

We keep personal information only for as long as necessary for the purposes described in this policy.

Order and transaction records may be retained for longer where required for legal, tax, accounting, fraud prevention or regulatory purposes.

Other personal information is deleted or anonymised when we no longer need it.

International transfers

Some of our service providers, including Shopify and advertising or technology providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be used where required by law.

Your rights

Under UK data protection law, you may have the right to:

• Request access to the personal information we hold about you

• Ask us to correct inaccurate information

• Ask us to delete your information

• Ask us to restrict how your information is used

• Object to certain uses of your information

• Request a copy of your information in a portable format

• Withdraw consent where we rely on consent

These rights are not absolute and may depend on the circumstances.

To exercise any of these rights, contact us at hello@swapto.co.uk.

We may need to confirm your identity before completing a request.

Children's privacy

Our services are intended for adults purchasing products and are not directed at children.

We do not knowingly collect personal information directly from children.

Security

We take reasonable steps to protect personal information from loss, misuse, unauthorised access or disclosure.

However, no online service can guarantee complete security.

Complaints

If you have concerns about how we use your personal information, please contact us first at hello@swapto.co.uk.

You also have the right to complain to the Information Commissioner's Office, the UK supervisory authority for data protection.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or business practices.

The latest version will always be published on this website.

Contact

If you have any questions about this Privacy Policy or how we handle your personal information, contact us at:

Swapto

Email: hello@swapto.co.uk

Address: 54 Lower Chapel Lane, Frampton Cotterell, BS36 2RH, United Kingdom