Who We Are

Delaries Store, trading as Delaries, is the data controller responsible for your personal information referred to in this policy.

Information We Collect

We only collect information necessary to process your order and improve your experience:

• Contact details: name, email address, phone number, delivery & billing address
• Order information: items purchased, order value, order history
• Payment information: processed securely by our payment provider — we do not store full card details on our servers
• Device & usage data: IP address, browser type, pages viewed, collected via cookies and analytics tools
• Age verification: confirmation that you are 18 years or older, as required for access to this site
• Marketing preferences: if you subscribe to our newsletter

How We Use Your Information

• To process, fulfil, and deliver your orders
• To communicate with you about your order, including shipping updates
• To respond to customer service enquiries
• To send marketing emails, only if you have opted in (you can unsubscribe anytime)
• To prevent fraud and keep our website secure
• To improve our website, products, and customer experience
• To comply with our legal and regulatory obligations

Discreet Handling of Sensitive Purchases

We understand the sensitive nature of our products. Order and product details are never shown on outer packaging, shipping labels, or card/bank statements (billing descriptors use a neutral name). Access to order data within our team is limited to staff who need it to fulfil your order.

Cookies & Tracking Technologies

Our website uses cookies to keep your cart working, remember your preferences, and understand how visitors use our site. These may include essential cookies (required for the store to function), analytics cookies (e.g. Google Analytics), and marketing cookies (e.g. Meta/Facebook Pixel), where consent is given. You can control or disable cookies through your browser settings, though some site features may not work correctly without them.

Sharing Your Information

We never sell your personal data. We only share information with trusted third parties who help us run our business, including:

• Shopify - our e-commerce platform provider
• Payment processors (e.g. Shopify Payments, PayPal, Stripe) - to securely process transactions
• Courier & delivery partners - to ship your order
• Email marketing providers - only if you've opted into marketing
• Analytics providers - to understand site usage
• Regulators or law enforcement - only where legally required

All third parties are required to keep your data secure and use it only for the purposes we specify.

Data Security

We use industry-standard security measures, including SSL encryption at checkout, to protect your personal and payment information. While we take reasonable steps to keep your data safe, no method of transmission over the internet is 100% secure.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, including to satisfy any legal, accounting, or reporting requirements (typically up to [6 years] for order/transaction records under UK tax law). Marketing data is kept only until you unsubscribe or withdraw consent.

Your Rights (UK GDPR)

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing of your data
• Withdraw consent to marketing at any time
• Request a copy of your data in a portable format
• Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, contact us using the details below.

International Data Transfers

Some of our service providers may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in line with UK GDPR requirements.

Age Restriction & Children's Privacy

This website is intended for adults aged 18 and over only. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.