Privacy policy

Last updated: 28 August 2026

This Privacy Policy describes how Dystorphic® ("Dystorphic®", "we", "us" or "our") collects, uses, stores and shares your personal information when you visit, use or make a purchase from our website and online store (the "Site").

By using the Site, you acknowledge that your personal information may be processed as described in this Privacy Policy.

This Privacy Policy applies to customers and visitors worldwide. Where local privacy or data-protection laws provide you with additional rights, those rights will continue to apply.

Personal Information We Collect

When you visit the Site, we may automatically collect certain information about your device and how you interact with our website.

This may include:

  • IP address
  • Browser type and version
  • Device type
  • Operating system
  • Time zone
  • General location information derived from your IP address
  • Referring website or search terms
  • Pages and products viewed
  • Links clicked
  • Date and time of visits
  • Information about how you interact with the Site
  • Cookies and similar technologies

We refer to this automatically collected information as "Device Information."

We collect Device Information using technologies including cookies, pixels, tags, web beacons, log files and similar technologies.

Cookies

Cookies are small data files placed on your device when you visit a website.

We may use cookies and similar technologies to:

  • Operate and secure the Site
  • Remember items in your shopping cart
  • Remember your preferences
  • Understand how visitors use the Site
  • Analyse website performance
  • Improve our products and services
  • Measure marketing and advertising performance
  • Provide relevant advertising where permitted
  • Prevent fraud and protect our website

Some cookies are strictly necessary for the Site to operate. Other cookies, including certain analytics, advertising and tracking technologies, may require your consent.

Where required by applicable law, we will request your consent before placing or using non-essential cookies or similar technologies.

You can manage or withdraw your cookie preferences through our cookie settings where available.

The UK ICO states that non-essential cookies generally require appropriate consent and that users should be given clear information about what cookies do. IICO+1

Order Information

When you make or attempt to make a purchase through the Site, we may collect information including:

  • Full name
  • Billing address
  • Shipping address
  • Email address
  • Telephone number
  • Order details
  • Products purchased
  • Product sizes and variants
  • Payment information
  • Transaction information
  • IP address
  • Device information
  • Any information you provide to us in connection with your order

We refer to this information as "Order Information."

Payment card details may be processed by our payment providers. We do not generally store your complete payment card number on our own systems.

When we refer to "Personal Information" in this Privacy Policy, we mean both Device Information and Order Information, together with any other personal information you voluntarily provide to us.

Information You Provide Directly

You may provide personal information to us when you:

  • Create or use an account
  • Place an order
  • Subscribe to marketing
  • Contact customer support
  • Use our LiveChat
  • Sign up for product updates
  • Enter a promotion or competition
  • Submit a review
  • Contact us through social media
  • Request a return or refund
  • Make a payment dispute or chargeback enquiry
  • Submit another form through our Site

We only request information that is reasonably necessary for the relevant purpose.

How Do We Use Your Personal Information?

We use your personal information for purposes including:

Processing and fulfilling orders

We use Order Information to:

  • Process payments
  • Confirm orders
  • Fulfil purchases
  • Arrange shipping
  • Provide tracking information
  • Deliver products
  • Provide invoices and order confirmations
  • Process returns and refunds
  • Provide customer support

Customer communication

We may use your information to:

  • Respond to enquiries
  • Provide customer service
  • Send order-related communications
  • Provide shipping updates
  • Contact you regarding returns or refunds
  • Resolve disputes
  • Respond to complaints

Fraud and security

We may use information to:

  • Detect and prevent fraudulent transactions
  • Investigate suspicious activity
  • Protect our Site
  • Protect customers
  • Prevent abuse of our services
  • Investigate payment disputes and chargebacks

Website improvement

We may use Device Information to:

  • Understand how customers use the Site
  • Analyse website traffic
  • Improve website functionality
  • Improve customer experience
  • Identify technical problems
  • Measure the effectiveness of marketing campaigns

Marketing

Where permitted by applicable law and where appropriate consent has been obtained, we may use your information to send:

  • Email marketing
  • SMS marketing
  • Product announcements
  • Promotional offers
  • New-release information
  • Restock notifications
  • Other marketing communications relating to Dystorphic®

You can unsubscribe from marketing communications at any time.

For electronic marketing, UK rules can require consent, and consent should be freely given, specific, informed and involve clear affirmative action. IICO+1

Lawful Bases for Processing

Where UK GDPR applies, we rely on one or more lawful bases for processing your personal information.

These may include:

Contract

We may process your information because it is necessary to fulfil our contract with you, such as processing and delivering an order.

Legal obligation

We may process information where necessary to comply with legal, accounting, tax, regulatory or other legal obligations.

Legitimate interests

We may process information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Examples may include:

  • Fraud prevention
  • Website security
  • Business administration
  • Customer service
  • Protecting our legal rights
  • Improving our services
  • Managing payment disputes

Consent

Where required by law, we will rely on your consent, including for certain marketing activities and non-essential cookies or tracking technologies.

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Sharing Your Personal Information

We may share your Personal Information with trusted third parties where necessary to operate our business and provide our services.

These may include:

  • Shopify
  • Payment processors
  • Banks and financial institutions
  • Shipping and courier companies
  • Fulfilment providers
  • Customer-support providers
  • Email marketing providers
  • SMS marketing providers
  • Analytics providers
  • Advertising platforms
  • Fraud-prevention providers
  • Website and technology providers
  • Professional advisers
  • Legal or regulatory authorities where required

We only share information where there is a legitimate business or legal reason to do so.

Shopify

Our online store is powered by Shopify.

Shopify may process personal information in connection with providing its ecommerce, hosting, payment, security and other services.

You can read Shopify's privacy policy here:

https://www.shopify.com/legal/privacy

Payment Providers

Payments may be processed by third-party payment providers.

Depending on the payment method you select, your payment information may be processed directly by the relevant payment provider.

We do not generally have access to your complete payment card details.

Payment providers may process your information for payment processing, fraud prevention, authentication, security and compliance purposes.

Shipping and Delivery Providers

We may share relevant information with shipping and fulfilment providers so that your order can be processed and delivered.

This may include:

  • Name
  • Delivery address
  • Email address
  • Telephone number
  • Order information
  • Tracking information

Shipping providers may process your information in accordance with their own privacy policies.

Analytics

We may use analytics services to understand how visitors interact with our Site.

If we use services such as Google Analytics, information may be collected about:

  • Website visits
  • Device information
  • Pages viewed
  • Traffic sources
  • General geographic information
  • Website interactions

Where required by law, we will obtain consent before using non-essential analytics cookies or similar technologies.

Behavioural Advertising

Where applicable, we may use advertising and tracking technologies provided by third parties to help us understand the effectiveness of advertising and show relevant Dystorphic® advertisements.

These technologies may include advertising pixels, cookies, tags and similar technologies.

Depending on the services we use, these providers may receive information about your device, browsing activity and interactions with our Site.

Where required by applicable law, we will obtain consent before using non-essential advertising or tracking technologies.

You may also be able to control certain advertising preferences through the relevant advertising platform.

Social Media

Our Site may contain links or integrations with social media platforms.

If you interact with social media features, the relevant platform may collect information in accordance with its own privacy policy.

We may also use social media platforms to advertise Dystorphic® products and communicate with customers.

SMS Marketing and Abandoned Cart Messages

If Dystorphic® offers SMS marketing or abandoned-cart SMS notifications, we may collect and process your mobile telephone number and relevant consent information.

Where required, we will obtain appropriate consent before sending marketing text messages.

We may use information about products added to your cart and your checkout activity to determine whether an abandoned-cart message may be sent where legally permitted.

SMS marketing consent will not be treated as consent to unrelated data sharing.

We will not sell your SMS marketing consent information to third parties.

You may opt out of SMS marketing at any time by following the unsubscribe instructions provided in the relevant message.

Where required by law, we will maintain records of marketing consent, including when and how consent was obtained. IICO

Third-Party Data Sharing

We do not sell your personal information as a commodity.

We may share personal information with service providers that process information on our behalf or with other parties where necessary for the purposes described in this Privacy Policy.

We do not share SMS marketing opt-in or consent information with third parties for their own unrelated marketing purposes unless you have specifically consented or applicable law permits it.

Fraud Prevention and Chargebacks

We may process personal information to detect, prevent and investigate fraud, suspicious transactions and payment disputes.

If you initiate a chargeback or payment dispute, we may provide relevant information to payment providers, card issuers or other parties involved in resolving the dispute.

This information may include:

  • Order information
  • Payment information
  • Order confirmation
  • Shipping information
  • Tracking information
  • Delivery confirmation
  • Customer communications
  • Return and refund records
  • Pre-order information
  • Relevant store policies

We use this information to protect our business, customers and payment systems and to respond to legitimate payment disputes.

Pre-Orders

If you purchase a pre-order product, we may process your information to:

  • Process your pre-order
  • Provide order confirmations
  • Provide fulfilment updates
  • Contact you regarding delays
  • Arrange shipping when the product becomes available
  • Respond to questions regarding your pre-order

Where necessary, information relating to your pre-order may be shared with fulfilment, manufacturing, shipping or payment providers.

Location Information

We may receive approximate location information from your IP address or other device information.

This may be used to:

  • Provide the Site in an appropriate format
  • Determine applicable shipping options
  • Display relevant currency
  • Understand website traffic
  • Prevent fraud
  • Improve our services

We do not generally collect precise GPS location information through our website unless a specific feature requires it and appropriate permission has been obtained.

International Data Transfers

Because Dystorphic® sells internationally and uses third-party service providers, your personal information may be transferred to, stored in or processed in countries outside the United Kingdom and your country of residence.

Some of these countries may have different data-protection laws from those in your home country.

Where UK GDPR applies and personal information is transferred outside the UK, we will use appropriate safeguards where required by applicable law.

These safeguards may include adequacy regulations, approved contractual protections or other lawful transfer mechanisms.

Data Security

We take reasonable technical and organisational measures to protect personal information against:

  • Unauthorised access
  • Loss
  • Misuse
  • Alteration
  • Disclosure
  • Destruction

However, no method of internet transmission or electronic storage is completely secure.

We cannot guarantee absolute security of your personal information.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including where necessary to:

  • Provide our services
  • Complete transactions
  • Maintain business and accounting records
  • Comply with legal obligations
  • Resolve disputes
  • Prevent fraud
  • Enforce our agreements
  • Protect our legal rights

Different categories of information may be retained for different periods.

For example, transaction and accounting information may need to be retained for longer periods to comply with legal and financial obligations.

Marketing information may be retained while you remain subscribed or until you withdraw consent, subject to any information we may need to retain to record your opt-out preference.

When personal information is no longer required, we will take reasonable steps to delete, anonymise or securely dispose of it.

Your Rights

Depending on where you live and the laws applicable to you, you may have rights concerning your personal information.

If UK GDPR applies, these may include the right to:

  • Request access to personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of personal information in certain circumstances
  • Request restriction of processing in certain circumstances
  • Object to certain processing
  • Request portability of certain personal information
  • Withdraw consent where processing is based on consent
  • Object to direct marketing
  • Lodge a complaint with the relevant supervisory authority

These rights are subject to applicable legal conditions and exceptions.

To exercise your rights, contact us using the details below.

We may need to verify your identity before completing certain requests.

Marketing Preferences

You can stop receiving promotional emails by using the unsubscribe link included in our marketing emails.

You can opt out of SMS marketing by following the instructions included in the relevant SMS.

You may also contact us directly to request that your marketing preferences be updated.

Please note that opting out of marketing does not prevent us from sending important non-marketing communications relating to your orders, payments, shipping, returns, refunds, security or other transactions.

Do Not Track

Some web browsers offer a "Do Not Track" feature.

At present, there is no universally accepted standard for responding to Do Not Track signals.

Our Site may not respond to all Do Not Track signals.

Where applicable law requires a particular response to browser privacy signals, we will comply with those requirements.

Children's Data

Our Site is not intentionally directed toward young children.

We do not knowingly collect personal information from children where prohibited by applicable law.

If you believe that a child has provided personal information to us without appropriate permission, please contact us so that we can investigate and take appropriate action.

Third-Party Websites

Our Site may contain links to websites, services or applications operated by third parties.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend reviewing the privacy policy of any third-party service you visit.

Legal and Regulatory Disclosures

We may disclose personal information where reasonably necessary to:

  • Comply with applicable laws
  • Comply with court orders or lawful requests
  • Respond to regulators or law-enforcement authorities
  • Prevent fraud or unlawful activity
  • Protect the rights, property or safety of Dystorphic®, our customers or others
  • Establish, exercise or defend legal claims

Your Information and Business Transfers

If Dystorphic® is involved in a merger, acquisition, restructuring, financing, sale of assets or similar business transaction, personal information may be transferred as part of that transaction where legally permitted.

Any such transfer will be handled in accordance with applicable privacy laws.

Complaints

If you have a concern about how we process your personal information, please contact us first so that we can investigate and attempt to resolve the matter.

If you are located in the UK and remain dissatisfied, you may have the right to complain to the Information Commissioner's Office (ICO).

More information about the ICO is available at:

https://ico.org.uk/

Customers in other countries may also have the right to complain to their relevant local data-protection authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

  • Changes to our business
  • Changes to our website
  • Changes to our services
  • Changes to our technology
  • Changes to our data-processing practices
  • Changes to applicable laws or regulations

When we make changes, we will update the "Last updated" date at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically.

Contact Us

For more information about our privacy practices, if you have questions, wish to exercise your privacy rights, or would like to make a complaint, please contact us:

Email - dystorphic.co@gmail.com

Instagram - Dystorphic.co

TikTok - Dystorphic.co

We aim to respond to privacy enquiries within the timeframe required by applicable law.

Dystorphic®