Privacy Policy

Privacy Policy

PRIVACY POLICY

Universal Customer Data Protection & Privacy Governance Protocol

At a Glance Core Privacy Principles

1. Scope & General Principles

This Privacy Policy applies to all users who browse, access, register, or execute commercial transactions on this website. Throughout this policy, references to "we", "us", and "our" denote the operational controllers and administrators of this website.

We operate under the fundamental principle of data minimization: personal information is collected only when strictly necessary to fulfill legitimate commercial operations, process customer purchases, ensure transactional security, and comply with applicable statutory duties.

2. Information We Collect

Depending on your interaction with the website, several categories of information may be collected:

Order & Contact Information: When you make a purchase or attempt to place an order, we collect essential fulfillment details, including full name, billing address, shipping address, contact phone number, email address, and order history.

Payment Details: Payment transactions are processed securely through certified third-party payment gateways. Sensitive payment card numbers, security codes, and full credentials are encrypted directly at the gateway level and are not captured, accessed, or stored on our web servers.

Device & Technical Data: When you access this website, certain technical telemetry is gathered automatically, including Internet Protocol (IP) address, browser version, operating system, time zone settings, referral sources, and interaction metrics with site pages.

Customer Support Communications: Information voluntarily provided during customer service inquiries, including messages, order reference numbers, and supporting media submitted for verification purposes.

3. How We Use Your Information

Personal data gathered via this website is utilized exclusively for lawful and explicit operational purposes:

1. Order Fulfillment: To process transactions, pack merchandise, arrange carrier dispatch, generate shipping labels, and transmit automated order status and parcel tracking notifications.

2. Customer Assistance: To investigate after-sales inquiries, review quality or defect claims, provide operational updates, and resolve service requests efficiently.

3. Security & Fraud Prevention: To evaluate transactions against high-risk fraud indicators, safeguard against fraudulent chargebacks, and protect site infrastructure against unauthorized intrusion.

4. Platform Optimization: To evaluate navigation flow, diagnose system glitches, assess product demand, and refine overall shopping experiences.

5. Statutory Compliance: To satisfy mandatory commercial bookkeeping, tax invoicing, accounting standards, and regulatory recordkeeping duties.

4. Legal Basis for Processing

Where required by data protection regulations, we process personal information pursuant to the following established legal bases:

Contractual Necessity: Processing is indispensable for executing the sale agreement, delivering products, and fulfilling agreed terms upon order placement.

Legitimate Interests: Processing is necessary for our legitimate operational interests, including safeguarding site integrity, detecting fraudulent orders, and improving service delivery, provided these do not override your fundamental privacy rights.

Legal Obligation: Processing is required to meet statutory, taxation, customs, or commercial record retention rules.

Consent: Where you have provided unambiguous consent (such as voluntary enrollment in marketing notifications or non-essential cookie tracking), which may be revoked at any time.

5. Sharing & Disclosure of Personal Data

Under no circumstances do we sell, rent, monetize, or trade your personal information to third parties. Information is disclosed solely to trusted service providers who assist in executing operational services under strict confidentiality agreements:

Logistics & Delivery Carriers: Recipient name, shipping address, contact phone number, and parcel descriptions are shared with designated postal and courier partners exclusively to perform final parcel delivery.

Payment Service Providers: Transactional amounts and payment tokens are processed via compliant payment gateways to authorize transactions and manage refunds.

Technical Infrastructure & Hosting: Secure cloud hosting providers, database platforms, and IT service providers that maintain server uptime and protect system security.

Law Enforcement & Legal Demands: Information may be disclosed when required by court orders, lawful warrants, subpoenas, or statutory authorities to comply with applicable legal duties.

6. Cookies & Tracking Technologies

Cookies and similar digital tokens are employed to ensure proper functionality and improve your browsing session:

Essential Cookies: Strictly required for basic website operation, such as preserving items in your shopping cart, facilitating checkout flow, and maintaining security.

Functional & Performance Cookies: Help record user interface preferences (such as language or currency selection) and compile aggregated, anonymous analytics regarding site traffic patterns.

Managing Preferences: You may adjust or disable cookies through your browser settings. Please note that disabling essential cookies may impair shopping cart functions and checkout usability.

7. Data Security & Retention Standards

Security Safeguards: We implement industry-standard organizational and technical safeguards, including Secure Sockets Layer / Transport Layer Security (SSL/TLS) encryption, encrypted data transmission, restricted access credentials, and routine vulnerability monitoring to prevent unauthorized access, alteration, or disclosure.

Data Retention Schedule: Personal data is retained only for as long as strictly required to fulfill the objectives outlined in this policy, manage after-sales warranty windows, address chargeback periods, and satisfy statutory tax and commercial archiving obligations.

8. Your Privacy Rights & Controls

Subject to applicable jurisdictional data protection regulations, you are entitled to exercise the following rights regarding your personal records:

1. Right of Access: The right to obtain confirmation as to whether your personal information is being processed and to receive a copy of your records.

2. Right to Rectification: The right to request immediate correction or updating of inaccurate, outdated, or incomplete personal data.

3. Right to Erasure: The right to request the deletion or removal of personal data where no overriding statutory obligation requires its retention.

4. Right to Restrict or Object: The right to restrict specific processing activities or object to data processing grounded in legitimate interests.

5. Right to Data Portability: The right to obtain your personal information in a structured, commonly used, and machine-readable format.

6. Right to Withdraw Consent: Where processing relies on consent, you maintain the right to withdraw such consent at any time without affecting prior lawful processing.

9. International Data Transfers

As an international e-commerce platform, information collected may be stored, processed, or transferred across border jurisdictions where our hosting facilities, payment partners, or logistics networks operate. All cross-border data transfers are handled in accordance with recognized data security protocols and applicable international data transfer standards.

10. Children's Privacy Protection

This website is intended exclusively for individuals who have reached the age of legal majority in their jurisdiction. We do not intentionally solicit, collect, or store personal information from minors. If you believe a minor has submitted personal information without verified parental or guardian consent, please notify customer support to facilitate prompt data removal.

11. Amendments to This Privacy Policy

We reserve the right to revise or update this Privacy Policy periodically to reflect technological adjustments, operational practices, or evolving statutory frameworks. The latest version published on this page governs all active data interactions, and the updated date at the beginning of this policy indicates the most recent modification.

12. Exercising Your Rights & Inquiries

To exercise any of your statutory privacy rights, submit a data access or deletion request, or seek clarification regarding our data protection standards, please submit your request through the official Contact page or established customer communication channels available on this website.

Requests are handled systematically by authorized administrators and will be evaluated and answered within statutory deadlines, subject to appropriate identity verification to protect data security.

Support email: support@durrydragon.com