Privacy

隱私Privacy

— What we collect, what we do with it, what we don't —

Dynasty is a small business. We collect only the customer data we need to run the shop, and we don't sell, share, or trade it. This page explains what that means in practice, in plain English. The legal basis we operate under is the UK GDPR and the Data Protection Act 2018.

我們是誰Who we are

Dynasty is the trading name of Daniel Khor. The data controller is Daniel Khor. We can be contacted at info@dyn8sty.com for any privacy-related question.

What we collect, and why

When you place an order, we collect:

  • Your name and shipping address — to send you the parcel.
  • Your email address — to send you order confirmations, shipping updates, and (only if you opt in) the monthly letter.
  • Your phone number, if you provide one — used by Royal Mail or couriers for delivery notifications.
  • Your payment details — these are processed directly by Shopify Payments (powered by Stripe) and we do not see or store full card numbers. We only see the last four digits and the transaction outcome.
  • Your order history — what you bought, when, for how much.

When you visit the website without ordering, our hosting platform (Shopify) collects standard analytics: pages visited, approximate location, device and browser type. This is anonymised at the level we see it.

What we don't do

  • We do not sell your data to anyone, ever.
  • We do not share it with marketing partners or data brokers.
  • We do not store your payment card details on our systems.
  • We do not run retargeting ads that follow you around the internet (no Meta Pixel, no Google Ads remarketing).

Who we share it with

Only the parties we genuinely need to fulfil your order:

  • Shopify — our e-commerce platform. They process orders and host this site. Shopify's privacy policy.
  • Royal Mail and international couriers — they receive your name and shipping address to deliver the parcel.
  • Shopify Email or our newsletter platform — only if you have opted in, your email address is used to send the monthly letter.
  • HMRC and our accountants — for tax purposes, transaction records are kept as required by UK law (currently six years).

We do not transfer data outside the UK or EEA to any country without an adequacy decision, except where Shopify or other essential service providers do so under their own GDPR-compliant terms.

How long we keep it

  • Order records: 6 years (HMRC requirement).
  • Email subscribers: until you unsubscribe, which you can do with one click in any email we send.
  • Browsing analytics: as long as Shopify retains them (currently 13 months).

您的權利Your rights

Under UK GDPR, you have the right to:

  • Ask what data we hold about you (a "subject access request").
  • Ask us to correct anything inaccurate.
  • Ask us to delete your data, where we are not legally required to keep it.
  • Ask us to stop processing it for marketing.
  • Take your data elsewhere ("portability").
  • Complain to the Information Commissioner's Office (the UK regulator) at ico.org.uk.

To exercise any of these rights, email info@dyn8sty.com. We will respond within 30 days.

Cookies

The site uses essential cookies to make checkout work, plus standard Shopify analytics cookies. We do not use marketing or advertising cookies. By using the site you accept the essential cookies; the analytics ones can be declined via the cookie banner on your first visit.

This policy was last updated on 01/05/2026. We will update it if anything material changes, and notify email subscribers if the changes affect them. For any privacy question, email info@dyn8sty.com.