Privacy Policy

Choosing to shop with Tomcheap means you've placed a great deal of trust in us. In sharing your personal information we hope you in return benefit from a tailored and convenient shopping experience. With trust comes responsibility and we take this responsibility very seriously.

This privacy policy helps you to understand how we use your personal information and who we share it with. It applies if you shop on a Tomcheap website, using the Tomcheap, shop in a Tomcheap store in the UK or if you otherwise share your personal information with us; for example if you contact us with a query or we send you marketing.

We change the terms of this privacy policy from time to time and you should check it regularly. The last updated date is shown at the beginning of the document. If we make any material changes we will take steps to bring it to your attention.

We are Tomcheap, when we say “we”, “our” or “us” in this policy we are referring to the companies that are part of the Tomcheap Group, which are:

We are the data controller, which means we are responsible for deciding how and why your personal information is used. We are also responsible for making sure it is kept safe, secure and handled legally.

We operate to the highest standards when protecting your personal information and respecting your privacy. If you have any questions about your personal information, or how we use it, you can contact our Data Protection Officer via email at

You have a number of “Data Subject Rights”, we have explained below what they are and how you can exercise them. You can read more about these rights on the Information Commissioner's Office website at .

Right of access – You have the right to request a copy of the personal information that we hold about you.
Right to rectification – If you think any of your personal information that we hold is inaccurate, you have the right to request it is updated. We may ask you for evidence to show it is inaccurate.
Right to erasure – (also known as the Right to be Forgotten) - You have the right to request that we delete your personal information that we hold.
Right to restriction of processing – You have the right to request we restrict or suppress the personal data we hold about you.
Right to data portability – You have the right to ask us to electronically transfer your personal information to another organisation in certain circumstances.
Rights with regards to automated decision making, including profiling – We sometimes use your personal information to make decisions by automated means. This involves us analysing your account activity including applications, orders, payments etc. We do this to confirm your identity, prevent and detect crime, and lend responsibly. This automated decision making is necessary if you would like to continue to shop with us online. You have a right to reject automated decisions, but it may mean that you can only shop with us in our stores.
Right to withdraw Consent – Where we are relying on your consent for processing you can withdraw or change your consent at any time.

The above rights may be limited in some circumstances, for example, if fulfilling your request would reveal personal information about another person, if you ask us to delete information which we are required to have by law, or if we have compelling legitimate interests to keep it. We will let you know if that is the case and will then only use your information for these purposes. You may also be unable to continue using our services if you want us to stop processing your personal information.

If you have any general questions or want to exercise any of your rights, please contact or visit for other ways to contact us. In order to maintain the security of our customers' personal details, we may need to request proof of identity before we disclose personal information to you in response to any request.

We encourage you to get in touch if you have any concerns with how we collect or use your personal information. You have the right to lodge a complaint directly with the Information Commissioner's Office, the data protection regulator in the UK, you can do this by visiting the ICO website: