DEWRION PRIVACY POLICY

Last Updated: 9 October 2026

1. Introduction

Welcome to DEWRION: The Brave Ones.

DEWRION operates https://dewrion.store, including its information, content, features, products, tools and related ecommerce services (collectively referred to as the "Services").

Our online store specialises in children's books, clothing, accessories and merchandise. Our product range includes storybooks, activity books, colouring books, children's cookbooks, T-shirts, hats, aprons, cups, mugs, drinking containers and other products designed primarily for children under ten.

Our products celebrate imagination, creativity, friendship, courage and adventure.

Although our merchandise is intended for children, our online shopping and purchasing services are intended for adults, including parents, grandparents, guardians and other customers.

Our store is powered by Shopify, which provides the ecommerce platform supporting our product catalogue, shopping baskets, checkout, payments, orders and related services.

At DEWRION, we recognise the importance of protecting personal information and are committed to handling customer data responsibly, transparently and securely.

This Privacy Policy describes how we collect, use, process, disclose, store and protect personal information when customers visit our website, browse products, make purchases, communicate with us or otherwise use our Services.

Where this Privacy Policy conflicts with our Terms of Service concerning the collection, use or disclosure of personal information, this policy takes precedence for those matters.

Please read this Privacy Policy carefully to understand our information handling practices.

2. Business Information and Data Controller

DEWRION is a United Kingdom-based children's publishing and merchandise retail business operating through Shopify.

Business Details

Business Operator:  Danie Adendorff

Trading Name: DEWRION: The Brave Ones

Website: https://dewrion.store

Business Location: United Kingdom

Postal Address: 20 Clos Y Dolydd, Pontypridd CF38 2TG, United Kingdom

Telephone: +44 7908 072144

Email: ddaniead@aol.com

For the purposes of applicable data protection legislation, the legal operator of DEWRION is the data controller for personal information processed in connection with the retail business, except where another organisation acts as an independent controller for its own processing activities.

Shopify and certain other service providers may independently determine the purposes and means of particular processing activities, as explained in this policy.

3. Personal Information We Collect

Personal information means information that identifies an individual or can reasonably be linked to an identifiable individual.

Depending on how customers interact with our Services, where they live and applicable legal requirements, we may collect or process the following categories of information.

3.1 Contact Information

This may include:

• Customer name.

• Billing address.

• Shipping and delivery address.

• Email address.

• Telephone number.

• Other contact information voluntarily provided.

3.2 Financial and Payment Information

Payment information may include:

• Payment method.

• Payment and transaction references.

• Payment confirmations.

• Billing information.

• Financial information necessary for authorised payment processing.

Depending on the chosen payment method, Shopify and its payment providers may collect or process payment card information and other financial details.

DEWRION does not require customers to submit complete payment card information through ordinary email correspondence or website contact forms.

3.3 Customer Account Information

Where customer accounts are enabled, information may include:

• Customer account identifiers.

• Authentication information.

• Account preferences.

• Customer settings.

• Relevant account activity.

Customers are responsible for maintaining the confidentiality of their account credentials.

3.4 Shopping and Transaction Information

We may collect or process information about:

• Products viewed.

• Products placed in shopping baskets.

• Wishlist activity, where enabled.

• Products purchased.

• Previous transactions.

• Orders returned, exchanged or cancelled.

• Refunds and payment confirmations.

• Shipping and delivery arrangements.

3.5 Customer Communications

We may retain information supplied when customers contact us about purchases, deliveries, returns, complaints, product questions or other matters.

3.6 Device and Website Information

When customers access our website, technical information may be collected automatically.

This may include:

• IP address.

• Browser type.

• Device information.

• Network connection information.

• Cookies and similar identifiers.

• Website navigation.

• Pages viewed.

• Shopping basket and checkout interactions.

• Other website usage information.

Some information may be used to generate inferences about shopping interests or preferences where permitted by applicable law.

4. Sources of Personal Information

We may obtain personal information from the following sources.

Directly from Customers

When customers create accounts, place orders, submit enquiries, contact customer support or otherwise provide information.

Automatically Through Our Website

When customers use Shopify-powered website functions, cookies, browsers, devices or related technologies.

From Service Providers

When payment processors, fulfilment companies, shipping providers or technology partners process information in connection with our Services.

From Partners and Other Third Parties

Where information is lawfully received through authorised integrations, advertising services, business partners or other third parties.

The categories and sources of information depend on customer interactions, the services enabled and applicable law.

5. How We Use Personal Information

We process personal information for defined business purposes connected with operating our online store.

5.1 Processing Purchases

To accept orders, process payments, confirm transactions, provide receipts and manage purchases.

5.2 Production and Delivery

To arrange printing, manufacturing, packaging, shipping and delivery of purchased products.

5.3 Customer Support

To respond to enquiries, manage complaints, resolve problems and arrange refunds, exchanges or returns.

5.4 Website Operation and Improvement

To maintain shopping baskets, secure checkout, accounts, website functionality and customer services.

We may also use appropriate information to evaluate website performance and improve the shopping experience.

5.5 Marketing and Advertising

To promote DEWRION products through lawful marketing communications and advertising activities.

This may include promotional emails, advertising measurement and relevant recommendations through Shopify and other authorised services.

5.6 Security and Fraud Prevention

To authenticate accounts, detect suspicious transactions, prevent fraud, maintain system security and investigate potentially unlawful activities.

5.7 Legal and Regulatory Compliance

To comply with applicable laws, respond to valid legal requests, maintain accounting records, resolve disputes and protect our legal rights.

We do not process personal information for incompatible purposes without an appropriate legal basis and any additional notice or consent required by law.

6. Legal Basis for Processing

Where UK GDPR or EU GDPR applies, personal information is processed under an appropriate lawful basis.

Performance of a Contract

To process purchases, payments, manufacturing, delivery, returns and requested customer services.

Legal Obligations

To comply with accounting, taxation, consumer protection and other statutory requirements.

Legitimate Interests

To support proportionate business administration, customer service, fraud prevention, security and website improvement, subject to applicable balancing requirements.

Consent

To undertake activities requiring consent, including certain electronic marketing communications and non-essential tracking technologies.

Where processing relies on consent, that consent may be withdrawn at any time.

Withdrawal does not affect processing lawfully carried out before consent was withdrawn.

We do not treat ordinary website use as automatic consent to all personal information processing.

Where Shopify or another provider independently controls specific processing activities, its own privacy notice and legal bases may also apply.

7. Relationship with Shopify

Our online store is hosted and powered by Shopify.

Shopify provides the technology used to operate our store, including product listings, customer accounts where enabled, shopping baskets, checkout, payment integrations, order management, customer communications and ecommerce security.

Shopify collects and processes personal information concerning customers' access to and use of our Services.

Information submitted through our store may be transmitted to Shopify and relevant service providers, including organisations operating in countries outside the customer's country of residence.

Shopify processes certain information to provide and improve its services, maintain security and support participating merchants.

7.1 Shopify Network Intelligence and Enhanced Services

DEWRION has enabled Shopify Network Intelligence.

This allows Shopify to provide certain Enhanced Services using information obtained from customer interactions with our store, other Shopify merchants and Shopify services.

These Enhanced Services may support:

• Personalised shopping experiences.

• Product recommendations.

• Relevant advertising.

• Advertising measurement.

• Fraud prevention.

• Security improvements.

• Ecommerce performance and business improvement.

Shopify may combine information relating to interactions with DEWRION with information collected through other participating merchants and Shopify services.

For certain Enhanced Services, Shopify is independently responsible for processing personal information, including responding to applicable privacy rights requests.

Depending on their place of residence, customers may have rights relating to personalised advertising, data sharing or other processing activities.

More information about Shopify's processing practices is available through the following resources.

Shopify Consumer Privacy Policy

https://www.shopify.com/legal/privacy/consumers

Shopify Privacy Portal

https://privacy.shopify.com/en

DEWRION remains responsible for its own data protection obligations, including providing appropriate information about its processing activities and maintaining relevant customer privacy settings.

7.2 International Processing by Shopify

Shopify and its authorised service providers may process information internationally.

The selection of a particular hosting location does not necessarily mean that all information is processed exclusively within that location.

Relevant international transfers are subject to applicable legal requirements and appropriate safeguards.

8. Print-on-Demand Manufacturing and Fulfilment

DEWRION sells physical books, clothing, accessories and merchandise.

Certain products are manufactured, printed, packaged or dispatched by third-party print-on-demand and fulfilment providers.

These may include Gelato and other authorised suppliers.

Our product range may include:

• Children's storybooks.

• Activity and colouring books.

• Children's cookbooks.

• T-shirts and other clothing.

• Hats and aprons.

• Cups, mugs and drinking containers.

• Other children's accessories and merchandise.

8.1 Information Shared for Fulfilment

When a customer purchases a product, relevant order information may be shared with the provider responsible for manufacturing and delivery.

This may include:

• Products ordered.

• Product specifications.

• Quantities.

• Order references.

• Printing instructions.

• Customer or recipient name.

• Delivery address.

• Contact details necessary for delivery.

• Other order information necessary for fulfilment.

8.2 Use of Fulfilment Information

Fulfilment partners use relevant information for authorised purposes connected with production, shipping, delivery, customer support and other lawful obligations.

Gelato and other suppliers may use authorised manufacturing facilities, subcontractors and delivery partners to complete orders.

These providers may process information according to their respective contractual arrangements, legal obligations and privacy notices.

DEWRION seeks to limit information sharing to what is reasonably necessary to complete customer orders and provide associated services.

9. Children's Privacy

DEWRION specialises in products intended primarily for children under ten.

Our books, clothing and merchandise are created to encourage imagination, creativity, adventure and positive childhood experiences.

However, our online shopping Services are intended for adult purchasers, including parents, grandparents, guardians and other responsible customers.

Purchases and payment transactions should be completed by adults.

Children are not required to:

• Open purchasing accounts.

• Complete payment transactions.

• Provide names or contact details to browse public product listings.

• Submit personal information to view ordinary product descriptions.

We do not intentionally collect personal information directly from children for marketing purposes.

We do not knowingly sell children's personal information or intentionally use such information for behavioural advertising directed at children.

We recognise that online services likely to be accessed by children may be subject to additional safeguards under applicable legislation, including relevant UK children's privacy requirements.

Where appropriate, we seek to apply privacy-protective practices taking account of children's rights and interests.

If we become aware that personal information has been collected from a child unlawfully or without required authorisation, we will take appropriate steps to restrict or delete it.

Parents and guardians may contact us regarding concerns about children's personal information.

10. Sharing Personal Information

We may disclose personal information where reasonably necessary to operate our business, fulfil orders, provide services, support lawful advertising or meet legal obligations.

Recipients may include:

• Shopify and authorised technology providers.

• Payment processing services.

• Gelato and other fulfilment providers.

• Printing and manufacturing suppliers.

• Shipping and courier companies.

• Customer support and communication providers.

• Website analytics providers.

• Advertising and marketing partners.

• Professional advisers.

• Relevant public authorities where disclosure is lawful.

Information may also be disclosed when customers request or authorise disclosure, or where necessary for lawful business transactions or legal proceedings.

Some providers process information on our behalf, while others act as independent controllers for their own purposes.

We do not sell customer mailing lists to unrelated organisations for unsolicited marketing.

However, certain Shopify Enhanced Services and advertising activities may involve information processing or sharing classified as a sale, sharing or targeted advertising under particular privacy laws.

Where applicable, customer rights and opt-out choices will be respected.

11. Payment Processing

Customer payments are handled through payment services integrated with Shopify.

Payment providers may process payment card details, account information, transaction references and information necessary for payment authorisation, fraud prevention and compliance with financial regulations.

DEWRION does not ask customers to provide complete payment card details through ordinary email or customer service communications.

Payment providers may maintain separate privacy notices governing activities for which they are independently responsible.

Customers should review those notices where appropriate.

12. Cookies and Similar Technologies

Our online store uses cookies and related technologies to provide website functionality and support authorised services.

Cookies and similar technologies may be used for different purposes.

12.1 Essential Cookies

Essential technologies support necessary functions such as:

• Shopping baskets.

• Secure checkout.

• Account authentication.

• Website security.

• Fraud prevention.

• Core website operations.

12.2 Analytics Cookies

Where enabled, analytics technologies may help us understand website interactions, measure performance and improve our Services.

12.3 Marketing and Advertising Cookies

Where enabled, advertising technologies may support promotional activities, advertising measurement and relevant product advertising.

Some services may involve information about interactions with multiple websites or merchants.

12.4 Cookie Consent and Preferences

DEWRION uses Shopify's customer privacy facilities, including its automated cookie banner in applicable regions.

Where applicable law requires prior consent, non-essential cookies and similar technologies are subject to consent requirements.

Visitors may be offered controls to accept, reject or manage their preferences.

Customers can also manage cookies through browser settings, although disabling essential functionality may affect the operation of the store.

Third-party technologies and integrations are subject to applicable legal and technical consent requirements.

13. Marketing Communications

DEWRION may communicate with customers about products, promotions and relevant store information.

Communications may include email, SMS or other authorised methods where supported and permitted.

Where required, we obtain consent before sending electronic marketing communications.

Customers may withdraw consent or unsubscribe from promotional emails through the unsubscribe option provided in those messages.

Unsubscribing from marketing will not prevent essential communications concerning purchases, payments, refunds, deliveries or customer service matters.

We do not sell our marketing mailing lists to unrelated businesses for unsolicited marketing.

We do not intentionally use children's personal information to direct personalised marketing to children.

14. Security of Personal Information

DEWRION takes reasonable technical and organisational measures to protect personal information from unauthorised access, accidental loss, misuse, alteration and unlawful disclosure.

These measures may include:

• Secure ecommerce infrastructure.

• Restricted administrative access.

• Appropriate authentication procedures.

• Secure payment processing.

• Reputable technology and fulfilment providers.

• Security incident response procedures.

Shopify and other authorised providers maintain security measures for their respective services.

However, no online system or method of electronic communication can guarantee absolute security.

Customers should avoid sending sensitive financial or confidential information through unsecured channels.

If a personal data breach occurs, we will assess the circumstances and make notifications to authorities or affected individuals where required by applicable law.

15. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including applicable contractual, financial, legal and regulatory obligations.

Retention depends on the type of information and the purposes for which it is processed.

15.1 Customer Orders and Financial Records

Order and transaction information is retained to satisfy applicable accounting, taxation, consumer protection and dispute-resolution obligations.

Relevant statutory requirements determine the minimum retention periods.

15.2 Customer Account Information

Account-related information may be retained while an account remains active and afterwards where necessary to meet lawful administrative, security or legal requirements.

15.3 Customer Service Information

Customer correspondence may be retained for periods reasonably necessary to resolve enquiries, complaints, returns or disputes and maintain appropriate business records.

15.4 Marketing Information

Marketing information may be retained while the relevant subscription or other lawful marketing relationship remains active.

Limited information may be retained after unsubscribing where necessary to honour opt-out requests.

15.5 Fulfilment and Delivery Information

Manufacturing and shipping information may be retained for periods necessary to complete orders, resolve delivery problems, manage returns and comply with relevant legal requirements.

Fulfilment providers may maintain their own lawful retention arrangements.

15.6 Website and Security Information

Technical and security records may be retained according to the relevant operational purposes, risk considerations and applicable provider arrangements.

15.7 Deletion and Anonymisation

Where personal information is no longer necessary and there is no legal requirement or other lawful basis for retention, appropriate steps are taken to delete, anonymise or securely dispose of it.

16. International Transfers

DEWRION operates from the United Kingdom.

Shopify and certain payment, manufacturing, shipping and technology providers may operate in other countries.

Consequently, personal information may be transferred to, stored in or accessed from countries outside the United Kingdom or European Economic Area.

Where applicable data protection legislation requires safeguards for international transfers, appropriate lawful transfer mechanisms must be used.

These may include:

• Adequacy decisions recognised under applicable law.

• European Commission Standard Contractual Clauses.

• UK-approved international data transfer mechanisms.

• Other legally permitted arrangements.

Where legally required, relevant transfer assessments and additional safeguards must be considered.

Customers may contact us for further information about applicable transfer arrangements.

17. Third-Party Websites and Links

Our store may contain links to external websites, retailers, social media platforms or other independent services.

These websites may have their own privacy policies, terms and security practices.

DEWRION does not control the independent information handling practices of unrelated website operators.

Information shared through public or semi-public online platforms may be visible to other users and processed under those platforms' own privacy policies.

Customers should review relevant privacy notices before submitting personal information to external services.

18. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have some or all of the rights described below.

These rights are not absolute and may be subject to legal conditions or exceptions.

18.1 Right of Access

You may request access to personal information held about you and relevant information concerning its processing.

18.2 Right to Correction

You may request correction of inaccurate or incomplete personal information.

18.3 Right to Deletion

You may request deletion of personal information where applicable law provides that right.

Certain information may need to be retained to comply with legal obligations or establish, exercise or defend legal claims.

18.4 Right to Data Portability

Where applicable, you may request eligible personal information in a structured, commonly used and machine-readable format.

You may also have the right to request transmission of eligible information to another provider.

18.5 Right to Object

You may object to certain processing activities, including processing based on legitimate interests.

You have the right to object at any time to processing of your personal information for direct marketing purposes.

18.6 Right to Restrict Processing

Where applicable, you may request restriction of processing in circumstances recognised by relevant data protection legislation.

18.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

18.8 Automated Decision-Making

Where applicable, you may have rights concerning certain decisions made solely through automated processing that produce legal or similarly significant effects.

18.9 Marketing Preferences

Promotional emails include an appropriate unsubscribe method.

Customers who unsubscribe from promotional communications may still receive necessary transactional messages concerning their accounts or orders.

18.10 Exercising Your Rights

You may submit a privacy rights request by contacting DEWRION using the details provided below.

We may reasonably verify your identity or authority before responding.

Where permitted by applicable law, an authorised representative may submit a request on your behalf.

We will respond within legally prescribed timescales.

We will not unlawfully discriminate against customers for exercising their privacy rights.

For privacy rights concerning information processed independently by Shopify, customers may visit:

https://privacy.shopify.com/en

19. Complaints and Supervisory Authorities

If you have concerns about how DEWRION collects, processes, stores or protects personal information, please contact us.

We will assess complaints and respond in accordance with applicable data protection legislation.

Individuals in the United Kingdom may also complain to the Information Commissioner's Office.

Information Commissioner's Office (ICO)

Website: https://ico.org.uk

Individuals in the European Union or European Economic Area may have the right to submit complaints to their relevant national data protection supervisory authority.

Information about European data protection authorities is available from the European Data Protection Board:

https://edpb.europa.eu/about-edpb/about-edpb/members

Where applicable legislation provides a right to appeal a decision concerning a privacy request, we will handle such appeals in accordance with the relevant requirements.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Updates may reflect changes in:

• Our business operations.

• Products or Services.

• Ecommerce technology.

• Payment or fulfilment providers.

• Data processing practices.

• Applicable privacy legislation.

When the policy is updated, we will revise the "Last Updated" date at the beginning of the document.

Where required by applicable law, we will provide additional notice or obtain appropriate consent.

The current version will remain available through our website.

21. Contact Information

For questions concerning this Privacy Policy, customer information, data protection rights, privacy complaints or related matters, please contact:

DEWRION: The Brave Ones

Website: https://dewrion.store

Postal Address:

Danie Adendorff

20 Clos Y Dolydd
Pontypridd
CF38 2TG
United Kingdom

Telephone: +44 7908 072144

Email: ddaniead@aol.com

The legal operator of DEWRION is responsible for personal information processed in operating the retail business, except where another organisation is independently responsible for its own processing.

We aim to address privacy enquiries fairly, responsibly and in accordance with applicable law.

DEWRION Adventures — Where Little Adventures Begin.