Privacy policy

Privacy Policy

Last updated: September 2026

1. Who we are

The controller of your personal data is AJC Marketing Ltd, registered in England and Wales, company number 11585881, trading as Dragon Dildo® Europe.

Contact: orders@dragondildo.com, +44 20 4634 3347.

EU/EEA & UK GDPR Representatives (Article 27)

If you are located in the EU or UK and have questions or concerns regarding your personal data, you may contact our appointed GDPR representative:

EU Representative:
Euverify Ltd (Ireland)
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork
T23 AT2P
Ireland

Email: gdpr@euverify.com

UK Representative:
Euverify Ltd (UK)
3rd Floor
86-90 Paul Street
London
EC2A 4NE
United Kingdom

Email: gdpr@euverify.com

To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, please use our secure portal at:

https://gdpr.euverify.com/verify/05ea15c5-b2bd-4ef1-b0ae-8d1beb184c30

This link allows you to verify our appointed representative and submit GDPR requests directly. Requests submitted through this portal are logged and tracked to ensure timely response and compliance.

2. What we collect

  • Identity and contact data: name, billing and delivery address, email address, telephone number
  • Order data: items purchased, order value, order history, returns and refunds
  • Payment data: payment confirmations and the last four digits of your card. We never see or store your full card number
  • Account data: username and preferences, if you create an account
  • Correspondence: messages you send us
  • Age confirmation: your confirmation that you are 18 or over, with the date and your IP address
  • Technical data: IP address, device and browser type, pages viewed, collected via cookies and similar technologies

We do not ask for and do not want special category data. Please do not send us health information, except where it is directly relevant to a product safety concern, as described in section 3.

3. Why we process it, and on what legal basis

  • Fulfilling your order - taking payment, arranging delivery, handling returns and customer service. Legal basis: performance of a contract
  • Confirming you are an adult - our products are for over-18s only. Legal basis: legal obligation, and our legitimate interest in preventing sales to minors
  • Product safety - recording and investigating safety complaints, and providing information to market surveillance authorities where they lawfully request it. Legal basis: legal obligation under Regulation (EU) 2023/988. Where a complaint includes health information you have chosen to share with us, we process it because it is necessary for reasons of public interest in public health and product safety
  • Legal and tax obligations - VAT records and accounting. Legal basis: legal obligation
  • Fraud prevention and site security. Legal basis: legitimate interests
  • Marketing emails. Legal basis: your consent, or our legitimate interest where you are an existing customer and we are marketing similar products. You can unsubscribe from any email or by contacting us
  • Analytics and non-essential cookies. Legal basis: your consent, given through our cookie banner

4. Who we share it with

  • Shopify - our e-commerce platform and, through Shopify Payments, our payment processor
  • Our fulfilment partner in the Netherlands - receives the delivery details needed to pick, pack and ship your order
  • Delivery carriers - name, address and contact details for delivery
  • Klaviyo - our email platform, where you have subscribed
  • Trustpilot - where you choose to leave a review
  • Our review and age verification apps - to publish product reviews and confirm you are over 18
  • Google and Meta - website analytics and advertising, only where you consent to non-essential cookies
  • Our EU Responsible Person, Euverify Limited (Ireland) - where a product safety matter requires it
  • Our VAT agent and accountant - for tax and statutory records
  • Professional advisers and authorities - where we are legally required to disclose

We do not sell your personal data.

5. International transfers

We are established in the United Kingdom, which the European Commission has recognised as providing an adequate level of data protection. Some of our providers process data outside the EEA and the UK. Where they do, transfers are made under the European Commission's Standard Contractual Clauses or another approved safeguard. You may request a copy of the relevant safeguard from us.

Our director accesses our systems remotely from Singapore. Access is limited to the director, protected by encryption and multi-factor authentication, and no personal data is transferred to any third party as a result.

6. How long we keep it

  • Order and transaction records: 7 years, for tax and accounting purposes
  • Product safety records: 10 years from the last time we placed the product on the market
  • Marketing contact data: until you unsubscribe, then a suppression record only
  • Account data: until you close your account
  • Customer service correspondence: 2 years
  • Age confirmation records: 12 months
  • Analytics data: as set by each platform, typically 14 to 26 months
  • Cookie consent records: 2 years

7. Your rights

You have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Email orders@dragondildo.com or use the portal in section 1. We respond within one month, and will tell you if we need to extend that in a complex case. We may ask you to verify your identity first.

You also have the right to lodge a complaint with the supervisory authority in your country of residence.

8. Cookies

We use essential cookies to operate the site and, with your consent, analytics and marketing cookies. Non-essential cookies are not set until you consent. You can change your choices at any time through our cookie banner or your browser settings.

9. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, multi-factor authentication on all accounts, and access limited to those who need it. No system is completely secure, and we cannot guarantee absolute security.

10. Age

This site and our products are for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe we hold data about a minor, contact us and we will delete it.

11. Changes

We may update this policy. The date at the top always shows the current version. We will notify you of material changes by email or a prominent notice on the site.