Privacy Policy

This document summarizes current information practices of Mr. Tumi Grocery & Gift. It is not legal advice and does not claim legal compliance; qualified legal review is outstanding. 1. Data collected: account name, mobile number and optional email; saved delivery addresses; order items, quantities, delivery contact/details and order/payment status; support messages; and security, consent and policy-version evidence. Full card or mobile-financial credentials should not be requested here. 2. Purposes: account administration, order and delivery processing, customer support, security/fraud prevention, accounting and dispute evidence, and limited optional marketing/analytics only where the customer has opted in. Withdrawing optional marketing consent does not block essential order processing. 3. Orders and delivery: necessary data may be used to accept and fulfill orders, arrange delivery, communicate status, resolve returns/complaints and preserve relevant evidence. 4. Support: contact data may be used to answer questions, complaints, correction/deletion requests and account-security concerns. 5. Payment and financial records: payment status, transaction references, invoices and accounting evidence may be retained. Records required for applicable legal, accounting or dispute purposes may remain after an account-deletion request; they are not automatically erased. 6. Sharing: minimum necessary information may be shared with authorized delivery/courier and payment providers, hosting/system operators, or lawful authorities to perform the requested service or meet obligations. Provider contracts and safeguards require review; this statement is not a guarantee. 7. Customer rights: view own account/request status, request correction, request account deletion, withdraw optional consent, and submit a complaint. Requests are verified and may require human review before action. 8. Retention/deletion: no automatic historical purge is performed. Retention periods are configurable by data category; order, invoice, accounting or legally required evidence may be preserved. Identity data is not anonymized and accounts are not deleted without authorized review. 9. Consent: processing essential to an order is distinct from optional marketing/analytics consent. Withdrawal stops future optional use; prior consent evidence may be retained for audit. 10. Contact/complaints: submit a privacy request at /customer/account/privacy-requests or use the site Contact page. The published version and effective date are shown with this policy.