privacy policy

your privacy matters to us. this policy explains how untaintd collects, uses, stores and shares your personal information when you visit our website, place an order, contact us or otherwise interact with us.

01 · who we are

this website is operated by dc empire ltd., trading as untaintd.

for data protection purposes, we are the controller of the personal information described in this policy.

company registration number: 14861135

registered office: 20-22 wenlock road, london, n1 7gu

email: hello@untaintd.com

if you have any questions about how we use your personal information, you can contact us using the details above.

02 · information we collect

depending on how you interact with us, we may collect information such as:

  • your name
  • email address
  • telephone number
  • billing and delivery address
  • order and transaction information
  • products you purchase or show an interest in
  • correspondence you send to us
  • information you provide through contact forms
  • device, browser and IP information
  • website activity, such as pages viewed and interactions with our site
  • marketing preferences
  • cookie and similar technology data

we do not normally receive or store your full payment card details. payments are processed by the payment providers available through our checkout.

03 · how we collect your information

we collect personal information directly from you when you:

  • place an order
  • create or use an account
  • contact us
  • complete a form
  • subscribe to marketing
  • interact with our website

we may also receive information automatically through cookies and similar technologies, or from service providers that help us operate our website and fulfil orders.

04 · how we use your information

we may use your personal information to:

  • process and fulfil your orders
  • take and manage payments
  • arrange delivery
  • communicate with you about your order
  • respond to enquiries and customer-service requests
  • process returns, refunds or complaints
  • prevent fraud and protect our website
  • maintain our business and financial records
  • improve our website, products and customer experience
  • understand how visitors use our website
  • send marketing communications where permitted
  • comply with legal and regulatory obligations

we only use personal information where we have a lawful basis for doing so.

05 · our lawful bases

depending on the purpose, we may rely on one or more of the following lawful bases:

contract -

where processing is necessary to take steps at your request or fulfil a contract with you, such as processing an order, taking payment and arranging delivery.

legal obligation -

where we need to process information to comply with a legal requirement, such as accounting, tax or consumer-law obligations.

legitimate interests -

where processing is reasonably necessary for our business interests and those interests are not overridden by your rights. this may include fraud prevention, improving our website, understanding our customers and protecting our business.

consent -

where we ask you for permission, for example for certain marketing or non-essential cookies. where we rely on consent, you can withdraw it at any time.

UK data protection law requires businesses to identify a lawful basis for each use of personal data, and legitimate interests should only be used where the organisation has properly considered the impact on individuals.

06 · orders and payments

when you place an order, we use the information you provide to process your purchase, arrange payment, fulfil and deliver your order and provide customer support.

payment information is processed through the payment providers made available at checkout.

those providers may process your information in accordance with their own privacy policies.

07 · marketing

if you sign up to receive marketing from us, or where we are otherwise legally permitted to contact you, we may send you information about untaintd products, launches, offers or other news.

you can unsubscribe at any time by using the unsubscribe link in our marketing emails or by contacting us.

you will still receive transactional communications that are necessary for your orders, even if you unsubscribe from marketing.

electronic marketing in the UK is also subject to PECR, and businesses must follow the applicable consent or soft opt-in rules and respect objections to direct marketing.

08 · cookies and similar technologies

we use cookies and similar technologies to operate our website, remember preferences, understand how the site is used and, where you agree, support analytics and marketing.

some cookies are necessary for the website to function and do not require consent.

where required, we will ask for your permission before placing non-essential cookies or similar technologies on your device.

you can learn more in our cookies policy and manage your preferences through our cookie settings.

The ICO states that visitors should be told when cookies are used and that consent is generally required for cookies that are not strictly necessary.

09 · who we share information with

we may share personal information with trusted third parties where necessary to operate our business, including:

  • Shopify and ecommerce platform providers
  • payment processors
  • delivery and fulfilment providers
  • email and customer-communication providers
  • analytics and website-service providers
  • marketing platforms where permitted
  • professional advisers such as accountants or legal advisers
  • fraud prevention and security providers
  • regulators, courts, law enforcement or public authorities where required by law

we only share information where there is a legitimate reason to do so.

we do not sell your personal information.

10 · Shopify

our online store is hosted by Shopify.

Shopify processes certain personal information to provide the ecommerce platform and related services that allow us to operate our store.

Shopify may also process information in accordance with its own privacy documentation and applicable data protection arrangements.

11 · international transfers

some of the service providers we use may process or store personal information outside the United Kingdom.

where personal information is transferred internationally, we take steps to ensure appropriate safeguards are used where required by data protection law.

these may include recognised adequacy arrangements or approved contractual protections.

12 · how long we keep your information

we keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to meet legal, accounting, tax, dispute-resolution and fraud-prevention requirements.

different types of information may therefore be kept for different periods.

for example, order and transaction records may need to be retained for several years to meet legal and accounting obligations.

when information is no longer required, we will delete, anonymise or securely dispose of it where appropriate.

The ICO expects privacy notices to explain retention periods, or at least the criteria used to determine them.

13 · how we protect your information

we use reasonable technical and organisational measures to protect personal information against accidental loss, unauthorised access, misuse, alteration or disclosure.

however, no internet-based system can be guaranteed to be completely secure.

14 · your data protection rights

depending on the circumstances, you may have the right to:

  • request access to the personal information we hold about you
  • ask us to correct inaccurate or incomplete information
  • ask us to delete your information
  • ask us to restrict how your information is used
  • object to certain types of processing
  • request transfer of certain information in a portable format
  • withdraw consent where we rely on consent
  • object to direct marketing at any time

some rights are subject to legal conditions and exemptions.

you will not normally have to pay a fee to exercise your rights.

the right to be informed also requires organisations to tell people which rights apply to their data and how they can complain to the supervisory authority.

15 · how to exercise your rights

to exercise any of your data protection rights, contact us at:

hello@untaintd.com

we may need to ask for information to confirm your identity before responding to a request.

16 · complaints

if you have concerns about how we use your personal information, please contact us first so we have an opportunity to resolve the issue.

you also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator.

you can find more information about your rights and how to make a complaint on the ICO website.

17 · children's privacy

our website and products are not specifically directed at children.

we do not knowingly collect personal information from children where parental consent or another legal basis would be required.

if you believe a child has provided us with personal information inappropriately, please contact us.

18 · third-party links

our website may contain links to websites or services operated by third parties.

we are not responsible for the privacy practices of websites we do not control.

we recommend reviewing the privacy information provided by those third parties before giving them personal information.

19 · changes to this policy

we may update this privacy policy from time to time to reflect changes to our business, website, services or legal requirements.

when we make changes, we will update the “last updated” date at the top of this page.

20 · contact us

if you have any questions about this privacy policy or how we handle your personal information, contact us at:

hello@untaintd.com

or through our contact page.

last updated: 20 august 2026