Shopping with Toma
Privacy Policy
Overview / About this policy
This Privacy Policy explains how The G & J Family Trust, trading as Toma Audio, collects, uses, stores and discloses personal information when you visit or make a purchase from www.toma.com.au (the “Site”).
We handle personal information in accordance with applicable privacy laws, including the Australian Privacy Principles where they apply. In this policy, “we”, “us” and “our” refer to Toma Audio.
Contact
If you have questions about this policy, want more information about our privacy practices, or would like to make a privacy request or complaint, contact us:
- Email: sales@toma.com.au
- Mail: The G & J Family Trust, 119 Wharf Street, Tweed Heads NSW 2485, Australia
Collecting Personal Information
When you visit the Site, we collect certain information about your device and your interaction with the Site. We also collect information needed to process purchases and may collect additional information if you contact us for customer support.
Device information
- Purpose of collection: To display the Site accurately and analyse Site usage so we can improve it.
- Source of collection: Collected automatically when you access the Site using cookies, log files, web beacons, tags or pixels.
- Disclosure for a business purpose: Shared with our processor, Shopify.
- Personal information collected: Web browser version, IP address, time zone, cookie information, the sites or products you view, search terms, and information about how you interact with the Site.
Order information
- Purpose of collection: To provide products or services, process payments, arrange shipping, provide invoices or order confirmations, communicate with you, screen orders for potential risk or fraud, and—where consistent with your preferences—provide information or advertising about our products and services.
- Source of collection: Collected from you.
- Disclosure for a business purpose: Shared with our processor, Shopify, and other service providers involved in processing payments and fulfilling orders.
- Personal information collected: Name, billing address, shipping address, payment information (including credit card numbers), email address and phone number. Payment information is handled through payment processing services. We may not receive or store your full card number.
Sharing Personal Information
We share personal information with service providers that help us operate the Site, provide our services and fulfil orders.
Shopify powers our online store and processes personal information on our behalf. You can read more about how Shopify uses personal information at https://www.shopify.com/legal/privacy.
We may also disclose personal information to comply with applicable laws and regulations, respond to lawful requests for information, or protect our rights.
Overseas disclosure
Some service providers may be located outside Australia, including Shopify in the United States. Where personal information is disclosed overseas, we handle it in accordance with this policy and applicable privacy law. Where required by law, we take reasonable steps in relation to overseas recipients of personal information.
Using Personal Information
We use personal information to provide our services, including to offer products for sale, process payments, ship and fulfil orders, communicate with you about your purchases, and—where consistent with your preferences—keep you up to date on new products, services and offers.
Security
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, consistent with our obligations under applicable privacy law, including Australian Privacy Principle 11 where it applies.
Retention
We retain personal information for as long as necessary for our business and legal purposes. When it is no longer needed for a permitted purpose, we take reasonable steps to delete or de-identify it, unless we are required or authorised by law to retain it.
Cookies
A cookie is a small amount of information downloaded to your computer or device when you visit the Site. We use functional, performance, advertising, and social media or content cookies. These cookies may help the Site remember your actions and preferences, support shopping and checkout functions, and provide information about how visitors use the Site.
The cookies used may change as the Site and its services are updated. The following tables list Shopify cookies and their functions and durations.
Cookies Necessary for the Functioning of the Store
| Name | Function | Duration |
|---|---|---|
| _ab | Used in connection with access to admin. | 2y |
| _secure_session_id | Used in connection with navigation through a storefront. | 24h |
| _shopify_country | Used in connection with checkout. | session |
| _shopify_m | Used for managing customer privacy settings. | 1y |
| _shopify_tm | Used for managing customer privacy settings. | 30min |
| _shopify_tw | Used for managing customer privacy settings. | 2w |
| _storefront_u | Used to facilitate updating customer account information. | 1min |
| _tracking_consent | Tracking preferences. | 1y |
| c | Used in connection with checkout. | 1y |
| cart | Used in connection with shopping cart. | 2w |
| cart_currency | Used in connection with shopping cart. | 2w |
| cart_sig | Used in connection with checkout. | 2w |
| cart_ts | Used in connection with checkout. | 2w |
| cart_ver | Used in connection with shopping cart. | 2w |
| checkout | Used in connection with checkout. | 4w |
| checkout_token | Used in connection with checkout. | 1y |
| dynamic_checkout_shown_on_cart | Used in connection with checkout. | 30min |
| hide_shopify_pay_for_checkout | Used in connection with checkout. | session |
| keep_alive | Used in connection with buyer localization. | 2w |
| master_device_id | Used in connection with merchant login. | 2y |
| previous_step | Used in connection with checkout. | 1y |
| remember_me | Used in connection with checkout. | 1y |
| secure_customer_sig | Used in connection with customer login. | 20y |
| shopify_pay | Used in connection with checkout. | 1y |
| shopify_pay_redirect | Used in connection with checkout. | 30 minutes, 3w or 1y depending on value |
| storefront_digest | Used in connection with customer login. | 2y |
| tracked_start_checkout | Used in connection with checkout. | 1y |
| checkout_one_experiment | Used in connection with checkout. | session |
Reporting and Analytics
| Name | Function | Duration |
|---|---|---|
| _landing_page | Track landing pages. | 2w |
| _orig_referrer | Track landing pages. | 2w |
| _s | Shopify analytics. | 30min |
| _shopify_d | Shopify analytics. | session |
| _shopify_s | Shopify analytics. | 30min |
| _shopify_sa_p | Shopify analytics relating to marketing and referrals. | 30min |
| _shopify_sa_t | Shopify analytics relating to marketing and referrals. | 30min |
| _shopify_y | Shopify analytics. | 1y |
| _y | Shopify analytics. | 1y |
| _shopify_evids | Shopify analytics. | session |
| _shopify_ga | Shopify and Google Analytics. | session |
How long a cookie remains on your computer or mobile device depends on whether it is a “persistent” or “session” cookie. Session cookies last until you stop browsing, while persistent cookies last until they expire or are deleted. Most cookies we use are persistent and expire between 30 minutes and two years after they are downloaded to your device.
You can manage cookies through your browser controls, often found in the browser’s “Tools” or “Preferences” menu. You can also manage tracking preferences through the Site’s privacy settings where available. Blocking or removing cookies may affect your experience, and parts of the Site may not function fully. For more information about managing cookies, visit www.allaboutcookies.org.
There is no consistent industry standard for responding to “Do Not Track” signals. You can manage your tracking preferences through the Site’s privacy settings where available, including Shopify’s privacy settings cookies, or through your browser.
Your Rights
You may request access to personal information we hold about you and ask us to correct it if it is inaccurate, incomplete or out of date. These requests are handled in accordance with applicable privacy law, including Australian Privacy Principles 12 and 13 where they apply.
You may also ask us to delete or de-identify personal information where it is no longer needed for a permitted purpose. We may need to retain some information where required or authorised by law.
To make a request, contact us at sales@toma.com.au. We will respond within a reasonable time. You can manage cookie and tracking preferences through the Site’s privacy settings where available or through your browser.
Changes
We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal or regulatory reasons. The latest version will be available on the Site.
Complaints
If you would like to make a complaint about how we handle personal information, contact us by email or mail using the details in the Contact section above.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC). For information about making a privacy complaint, visit https://www.oaic.gov.au/privacy/privacy-complaints.
Last updated: 15 October 2026