Privacy

We are Dry Dolly® LTD, a company registered in England and Wales.

Registered address: 38 Main Road, Winchester, Hampshire, SO21 1RR, United Kingdom.

Email: support@drydolly.com

For the purposes of UK data protection law, we are the "data controller" of your personal information. This means we decide how and why your data is processed.

We only collect what we genuinely need. This includes:

• Identity Data: First name, last name, title, and username or similar identifier.
• Contact Data: Billing address, delivery address, email address, and telephone numbers.
• Financial Data: Payment card details. We do not store your full card details - these are processed securely by our payment partners such as Shopify Payments, PayPal, or Apple Pay.
• Transaction Data: Details about payments to and from you, and other details of products you have purchased from us.
• Technical Data: IP address, browser type and version, time zone setting and location, operating system and platform, and other technology on the devices you use to access this website.
• Profile Data: Your purchases or orders, interests, preferences, feedback, and survey responses.
• Usage Data: Information about how you use our website, products, and services.
• Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

• Direct interactions: When you purchase our products, create an account, subscribe to our newsletter, or contact us by email or post.
• Automated technologies: As you interact with our website, we automatically collect Technical and Usage Data via cookies, server logs, and similar technologies.
• Third parties: We may receive personal data from analytics providers (like Google) and advertising networks (like Meta), or from payment and delivery services.

Under UK GDPR, we must have a valid lawful basis to process your personal data. Below is a description of all the ways we use your data and the legal basis we rely on for each.

• To register you as a new customer: Lawful basis: Performance of a contract with you.
• To process and deliver your order: Lawful basis: Performance of a contract with you, and our legitimate interests (to recover debts due to us).
• To manage our relationship with you (including notifying you of policy changes or requesting reviews): Lawful basis: Performance of a contract, legal obligation, and legitimate interests.
• To administer and protect our business and website: Lawful basis: Legitimate interests (IT services, network security) and legal obligation.
• To deliver relevant content and advertising to you: Lawful basis: Legitimate interests (to grow our business and inform our marketing strategy).
• To use data analytics to improve our website and products: Lawful basis: Legitimate interests (to keep our website updated and relevant).

Marketing: You will only receive marketing from us if you have opted in. You can unsubscribe at any time by following the opt-out link in any email, or by contacting us at support@drydolly.com.

We do not sell your personal data. We may share it with:

• Service Providers: Including our e-commerce platform provider, Shopify, who provide IT and system administration services.
• Payment Processors: Secure gateways that handle your transactions.
• Delivery Partners: Couriers and postal services who need your address to deliver your order.
• Professional Advisers: Lawyers, auditors, and insurers where necessary.
• HM Revenue and Customs and other regulators: Where required by law.
• Advertising and Analytics Partners: Such as Google or Meta, to help us understand our audience and show relevant ads.

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes.

Some of our external third parties (such as Shopify) are based outside the UK, so their processing of your personal data will involve a transfer of data outside the UK.

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it, either by only transferring to countries deemed to provide adequate protection, or by using specific contracts approved for use in the UK (such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses).

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

By law, we have to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those who have a genuine business need to know.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

Under UK data protection law, you have the right to:

• Request access to your personal data (a "data subject access request").
• Request correction of any inaccurate or incomplete data we hold about you.
• Request erasure of your personal data where there is no good reason for us continuing to process it.
• Object to processing of your personal data where we rely on legitimate interests, or where we process it for direct marketing purposes.
• Request restriction of processing in certain scenarios.
• Request the transfer of your personal data to you or a third party (right to data portability).
• Withdraw consent at any time where we rely on consent to process your data.

To exercise any of these rights, please email us at support@drydolly.com. There is no fee to make a request.

Our website uses cookies and similar technologies to distinguish you from other users and to improve your browsing experience. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy.

This website may include links to third-party websites, plug-ins, and applications. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

We keep our privacy policy under regular review. This version was last updated in March 2026. Please keep us informed if your personal data changes during your relationship with us.

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

Email: support@drydolly.com

Post: Dry Dolly® LTD, 38 Main Road, Winchester, Hampshire, SO21 1RR, United Kingdom.

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). We would always appreciate the chance to deal with your concerns first, so please contact us before approaching the ICO.