Privacy policy

Privacy Policy

Last updated: September 2026

1. Who we are

The controller of your personal data is AJC Marketing Ltd, registered in England and Wales, company number 11585881, registered office 4th Floor, 18 St Cross Street, London EC1N 8UN, trading as Dragon Dildo® UK.

Contact: orders@dragondildo.co.uk.

We are the data controller for this store. We have not appointed a Data Protection Officer, as we are not required to.

2. What we collect

  • Identity and contact data: name, billing and delivery address, email address, telephone number
  • Order data: items purchased, order value, order history, returns and refunds
  • Payment data: payment confirmations and the last four digits of your card. We never see or store your full card number
  • Account data: username and preferences, if you create an account
  • Correspondence: messages you send us
  • Age confirmation: your confirmation that you are 18 or over, with the date and your IP address
  • Technical data: IP address, device and browser type, pages viewed, collected via cookies and similar technologies

We do not ask for and do not want special category data. Please do not send us health information, except where it is directly relevant to a product safety concern, as described in section 3.

3. Why we process it, and on what legal basis

  • Fulfilling your order - taking payment, arranging delivery, handling returns and customer service. Legal basis: performance of a contract
  • Confirming you are an adult - our products are for over-18s only. Legal basis: legal obligation, and our legitimate interest in preventing sales to minors
  • Product safety - recording and investigating safety complaints and acting on them. Legal basis: legal obligation, and our legitimate interest in the safety of our products. Where a complaint includes health information you have chosen to share with us, we process it because it is necessary for reasons of public interest in public health and product safety
  • Legal and tax obligations - VAT records and accounting. Legal basis: legal obligation
  • Fraud prevention and site security. Legal basis: legitimate interests
  • Marketing emails. Legal basis: your consent, or our legitimate interest where you are an existing customer and we are marketing similar products. You can unsubscribe from any email or by contacting us
  • Analytics and non-essential cookies. Legal basis: your consent, given through our cookie banner

4. Who we share it with

  • Shopify - our e-commerce platform and, through Shopify Payments, our payment processor
  • Our fulfilment partner in Bristol - receives the delivery details needed to pick, pack and ship your order
  • Delivery carriers - Royal Mail in the UK, FedEx and USPS for orders to the United States and Canada. Name, address and contact details for delivery
  • Klaviyo - our email platform, where you have subscribed
  • Trustpilot - where you choose to leave a review
  • Our review and age verification apps - to publish product reviews and confirm you are over 18
  • Google and Meta - website analytics and advertising, only where you consent to non-essential cookies
  • Our accountant - for tax and statutory records
  • Professional advisers and authorities - where we are legally required to disclose

We do not sell your personal data.

5. International transfers

Some of our providers process data outside the United Kingdom. Where they do, transfers are made under the UK International Data Transfer Agreement, the UK Addendum to the European Commission's Standard Contractual Clauses, or another approved safeguard such as the UK Extension to the EU-US Data Privacy Framework. You may request a copy of the relevant safeguard from us.

Our director accesses our systems remotely from Singapore. Access is limited to the director, protected by encryption and multi-factor authentication, and no personal data is transferred to any third party as a result.

6. How long we keep it

  • Order and transaction records: 7 years, for tax and accounting purposes
  • Product safety records: 10 years from the last time we supplied the product
  • Marketing contact data: until you unsubscribe, then a suppression record only
  • Account data: until you close your account
  • Customer service correspondence: 2 years
  • Age confirmation records: 12 months
  • Analytics data: as set by each platform, typically 14 to 26 months
  • Cookie consent records: 2 years

7. Your rights

You have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Email orders@dragondildo.co.uk. We respond within one month, and will tell you if we need to extend that in a complex case. We may ask you to verify your identity first.

You also have the right to lodge a complaint with the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk or on 0303 123 1113.

8. Cookies

We use essential cookies to operate the site and, with your consent, analytics and marketing cookies. Non-essential cookies are not set until you consent. You can change your choices at any time through our cookie banner or your browser settings.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, multi-factor authentication on all accounts, and access limited to those who need it. No system is completely secure, and we cannot guarantee absolute security.

10. Age

This site and our products are for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe we hold data about a minor, contact us and we will delete it.

11. Changes

We may update this policy. The date at the top always shows the current version. We will notify you of material changes by email or a prominent notice on the site.