Privacy policy
Last updated: July 2, 2026
Dragon Maiden takes the protection of your privacy seriously. We believe you should be able to understand, clearly and without excess, what personal information we collect, how we use it, who we may share it with, how long we keep it, and the choices and rights you may have.
This Privacy & Cookies Policy describes how Dragon Maiden, also referred to in this policy as "Dragon Maiden," "we," "us," or "our," collects, uses, discloses, retains, and protects personal information when you visit or use the www.thedragonmaiden.com website, create an account, place an order, subscribe to communications, interact with our customer care, or otherwise correspond with us (collectively, the "Site" and "Services").
For California residents and residents of other U.S. states with applicable privacy laws, Section 1 of this policy also serves as our Notice at Collection. By using the Site or Services, you acknowledge the practices described in this Privacy & Cookies Policy.
If you have any questions about this policy, or if you would like this information in another reasonably accessible format, please write to us at global@thedragonmaiden.com.
Quick Links
- Notice at Collection: Collection and Use of Personal Information
- Sources of Personal Information
- Disclosures of Personal Information
- Cookie Notice
- Your Choices
- Security of Personal Information
- Additional U.S. State Privacy Disclosures
- Other Important Information
- Contact Us
1. Notice at Collection: Collection and Use of Personal Information
In this policy, "personal information" means information that identifies, relates to, describes, can reasonably be associated with, or could reasonably be linked, directly or indirectly, to you or your household. It does not include information that is publicly available, aggregated, de-identified, or otherwise excluded from applicable privacy laws.
The table below summarizes the categories of personal information we may collect, the purposes for which we use them, and examples of the information included in each category. The categories listed describe our practices during the past 12 months and our current expected practices.
| Category of personal information | Examples and purposes of use |
|---|---|
| Identifiers | Examples include your name, email address, telephone number, billing address, delivery address, account username, password credentials in protected form, IP address, order number, and customer service identifiers. We use this information to create and maintain your account, process orders, deliver parcels, respond to messages, authenticate requests, manage returns or exchanges, send order notices, and provide customer care. |
| Commercial information | Examples include products purchased, viewed, added to cart, returned, exchanged, or considered, order history, size and fit notes you provide, shipping status, refund history, correspondence about a product, and customer service history. We use this information to fulfill purchases, support returns and exchanges, provide sizing or care assistance, improve product availability, understand customer interest in collections, and maintain accurate business records. |
| Payment and transaction information | Examples include payment method, billing details, transaction confirmation, fraud-screening signals, and payment tokens processed by our payment providers. Dragon Maiden does not store full payment card numbers. We use payment information to complete purchases, issue refunds, detect fraud, comply with accounting obligations, and protect the integrity of the Site. |
| Internet or electronic network activity | Examples include device type, browser type, operating system, IP address, pages visited, referring URLs, time and date of visits, cart activity, session identifiers, cookie identifiers, and interactions with emails or advertisements. We use this information to operate the Site, remember cart and session activity, secure the checkout experience, measure Site performance, understand how visitors move through the Site, improve design and functionality, and, where permitted, measure or personalize communications and advertising. |
| Approximate location information | Examples include country, region, city, postal code, delivery destination, or approximate location derived from an IP address. We use this information to calculate shipping options, estimate taxes and duties where applicable, route orders, display relevant currency, detect fraud, comply with local rules, and understand the general regions from which visitors access the Site. |
| Correspondence and voluntary content | Examples include emails you send to us, inquiries about sizing or care, notes about fit preferences, photos or other attachments you choose to provide, survey responses, or information included in a return request. We use this information to answer your inquiry, provide support, review product issues, improve customer care, and keep a record of our correspondence where reasonably necessary. |
| Preferences and inferences | Examples include communication preferences, product interests, size preferences, language or region preferences, and limited inferences drawn from browsing or purchase activity. We use this information to make the Site easier to use, improve product and content relevance, avoid sending communications you have declined, and understand which collections or services may be useful to customers. |
| Marketing and advertising information | Examples include newsletter subscription status, consent choices, email engagement, advertising identifiers, campaign source, and cookie-based measurement data. We use this information to send communications you have requested, measure the effectiveness of campaigns, and, where permitted by law and your choices, show or measure interest-based advertising. |
| Sensitive personal information | We do not intentionally collect sensitive personal information for purposes unrelated to your order or request. Payment information is processed by payment providers, and precise payment credentials are not stored by Dragon Maiden. If you voluntarily provide sensitive information in correspondence, we will use it only as necessary to respond to your request, comply with law, or protect rights and safety. |
Additional uses for the categories above
We may also use any of the categories of personal information described above where reasonably necessary to enforce our terms and policies, detect or prevent fraud, protect the Site, troubleshoot and debug technical issues, maintain business records, conduct audits, comply with laws or legal process, respond to lawful requests from authorities, protect the rights, safety, or property of Dragon Maiden, our customers, our service providers, or others, and support a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction.
We do not use sensitive personal information for purposes to which a right to limit use would apply under California law.
Retention
We keep personal information only for as long as reasonably necessary for the purposes described in this policy, unless a longer period is required or permitted by law. The exact period depends on the nature of the information, the purpose for which it was collected, and our legal or operational obligations.
| Relationship or record type | Typical retention period |
|---|---|
| Visitor, newsletter, and inquiry records | Generally until you unsubscribe, withdraw consent, or the information is no longer reasonably useful for the purpose collected, subject to legal retention obligations. |
| Customer account and order records | For the duration of the customer relationship and generally up to seven years for tax, accounting, fraud prevention, transaction, or legal recordkeeping purposes, unless a longer period is required or permitted by law. |
| Customer care, return, exchange, and product issue correspondence | For as long as needed to resolve the matter, maintain a record of the service relationship, protect legal rights, or comply with applicable law. |
| Cookies and similar technologies | Session cookies may expire when you close your browser. Other cookies are retained according to their purpose and settings, and where controlled by us are generally retained no longer than 13 months unless a different period is required to operate the Site or honor your choices. |
We may retain aggregated or de-identified information that no longer identifies you and may use it for lawful business purposes. We do not attempt to re-identify de-identified information except as permitted by law.
2. Sources of Personal Information
Directly from you
We collect personal information when you create an account, place an order, enter delivery or billing details, subscribe to communications, contact us by email, request assistance, submit a return or exchange request, provide product feedback, or otherwise communicate with us.
Automatically through the Site
We collect certain technical and usage information when you visit the Site, interact with checkout, open emails, or use our Services. This may occur through cookies, pixels, tags, log files, software development kits, and similar technologies. For more detail, see Section 4, Cookie Notice.
From service providers and partners
We receive information from service providers that help us operate the Site and Services, including Shopify and related commerce tools, payment processors, fraud prevention providers, shipping carriers, fulfillment partners, analytics providers, email service providers, customer care tools, advertising and measurement partners, and technical support vendors.
From other people at your direction
We may receive information from someone acting on your behalf, from a gift purchaser or gift recipient, from an authorized agent, or from another person who provides your information to complete a transaction, delivery, inquiry, or invitation.
3. Disclosures of Personal Information
We disclose personal information only as needed for the purposes described in this policy and subject to applicable law. During the past 12 months, we may have disclosed the categories of personal information listed in Section 1 to the categories of recipients below.
Commerce, technology, and hosting providers
We disclose personal information to providers that host, maintain, secure, and operate the Site, including our e-commerce platform and technical infrastructure providers. These providers process information to make the Site available, support checkout, maintain accounts, provide analytics, fix errors, and protect the Site.
Payment, fraud prevention, and checkout providers
When you make a purchase, payment and transaction information is processed by payment providers and, where applicable, fraud prevention vendors. These providers help authorize payment, detect suspicious activity, process refunds, and maintain secure transactions.
Fulfillment, delivery, and returns partners
We disclose information such as name, delivery address, email address, telephone number, order details, and shipping status to carriers, fulfillment partners, and related service providers so that parcels can be prepared, shipped, tracked, returned, exchanged, or delivered.
Customer care and communications providers
We may disclose identifiers, order information, preferences, and correspondence to tools or providers that help us respond to messages, manage customer care, send order notices, maintain newsletter subscriptions, and send communications you have requested or permitted.
Analytics, advertising, and measurement partners
Depending on your settings, applicable law, and the tools active on the Site, we may disclose identifiers, internet or electronic network activity, approximate location, and marketing information to analytics and advertising partners so that we can understand Site performance, measure campaigns, improve communications, and, where permitted, provide or measure interest-based advertising.
Professional advisers and legal recipients
We may disclose personal information to accountants, lawyers, auditors, insurers, banks, regulators, courts, government authorities, law enforcement, or other parties where reasonably necessary to comply with law, respond to legal process, establish or defend legal rights, prevent fraud, protect safety, or enforce our terms and policies.
Business transaction recipients
We may disclose personal information in connection with a proposed or actual merger, financing, acquisition, reorganization, sale of assets, bankruptcy, transfer of ownership, or similar transaction involving all or part of Dragon Maiden.
At your direction or with your consent
We may disclose personal information when you ask us to do so, when you direct us to ship to another person, when you use a third-party checkout or digital wallet, or when you otherwise give consent.
4. Cookie Notice
Cookies are small files or similar technologies placed on or accessed through your browser, device, emails, or the Site. They help the Site remember information about your visit and may allow us or our service providers to recognize your browser or device over time.
We and our service providers may use cookies, pixels, tags, local storage, scripts, log files, and similar technologies to operate the Site, remember cart and checkout activity, preserve account sessions, secure transactions, understand how visitors use the Site, measure communications, and, where permitted, support advertising and campaign measurement.
| Cookie or technology type | Purpose |
|---|---|
| Strictly necessary cookies | Required for the Site to function, including cart, checkout, account login, security, fraud prevention, order processing, privacy preference storage, localization, and basic navigation. If these are disabled, parts of the Site may not work correctly. |
| Functional cookies | Remember choices such as region, currency, language, display preferences, or information that makes repeated visits more orderly. |
| Analytics and performance cookies | Help us understand traffic, page performance, product interest, error patterns, and how visitors move through the Site. This information supports improvements to design, content, product presentation, and checkout clarity. |
| Advertising and measurement cookies | Where used and permitted, help us measure advertising performance, understand whether a campaign led to a visit or purchase, and provide or limit interest-based advertising. These technologies may be placed by third-party advertising partners. |
Examples of cookies or similar technologies that may be used in a Shopify commerce environment include cookies that support cart contents, checkout, secure sessions, customer login, tracking consent, storefront analytics, referral attribution, localization, and fraud prevention. The exact cookies used may change as Shopify, payment providers, analytics tools, advertising tools, or other service providers update their services.
Managing cookie preferences
You can manage cookies through your browser or device settings. If the Site displays a cookie banner or preference tool, you may also use that tool to manage choices available in your region. Browser settings are usually specific to the browser and device you use, so you may need to repeat your choices on each browser or device. If you clear cookies, your preferences may need to be set again.
You can also use industry opt-out tools, where available, such as tools provided by the Network Advertising Initiative, the Digital Advertising Alliance, or browser-level opt-out preference signals. We are not responsible for the effectiveness of third-party opt-out tools.
5. Your Choices
Promotional communications
If you no longer wish to receive marketing or promotional emails, you may unsubscribe through the link included in the email or write to global@thedragonmaiden.com. Even if you unsubscribe, we may still send non-promotional messages relating to orders, account activity, returns, exchanges, security, policy updates, or other Services you have requested.
Account and order information
You may update certain account information by logging into your account where the feature is available. If you need help correcting order, account, delivery, or correspondence information, write to us at global@thedragonmaiden.com.
Cookies and targeted advertising
You may restrict cookies through browser settings or available in-site preference tools. Where required by applicable law, you may also opt out of the sale or sharing of personal information or the processing of personal information for targeted advertising by using the choices provided on the Site, by using recognized opt-out preference signals when supported, or by contacting us.
6. Security of Personal Information
Dragon Maiden uses reasonable administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. These measures include using established commerce and payment providers, limiting access to information based on business need, and relying on secure checkout and payment processing systems.
No method of transmission over the internet, no website, and no electronic storage system is completely secure. We cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for using a strong password that you do not reuse across unrelated services.
7. Additional U.S. State Privacy Disclosures
This section supplements the rest of this policy for residents of California and other U.S. states with applicable consumer privacy laws, including where applicable Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia.
Sales, sharing, and targeted advertising
Dragon Maiden does not sell personal information in exchange for money. However, some disclosures involving cookies, analytics, advertising identifiers, or similar technologies may be considered a "sale," "sharing," or processing for targeted advertising under certain U.S. state privacy laws. Depending on your location and the tools active on the Site, you may have the right to opt out of these activities.
Rights you may have
Subject to applicable law and certain exceptions, you may have the right to request that we:
- confirm whether we process your personal information;
- provide access to the personal information we hold about you;
- provide a copy of certain personal information in a portable format;
- correct inaccurate personal information;
- delete personal information;
- opt out of the sale or sharing of personal information or targeted advertising, where applicable;
- limit the use or disclosure of sensitive personal information, where the right applies; and
- appeal a decision we make regarding a privacy rights request, where applicable.
We do not use or disclose sensitive personal information for purposes to which a right to limit use applies. Therefore, we do not offer a separate right to limit sensitive personal information.
How to submit a request
To exercise a privacy right, write to global@thedragonmaiden.com with the subject line "Privacy Request." Please describe the right you wish to exercise and include enough information for us to reasonably verify your identity and locate the relevant records, such as the email address associated with your account or order number.
Verification
We may need to verify your identity before responding to a request. The verification steps may vary depending on the nature of the request and the sensitivity of the information involved. We may ask you to confirm information associated with your account, order, or correspondence. If we cannot verify a request, we may deny it or ask for additional information.
Authorized agents
Where permitted by applicable law, you may designate an authorized agent to submit a request on your behalf. We may ask the agent to provide proof of authorization, and we may ask you to verify your own identity or confirm that you gave the agent permission to act for you.
Non-discrimination
We will not discriminate against you because you exercised a privacy right. We may, however, deny a request or fulfill it only in part where allowed by law, including where information must be retained for tax, accounting, fraud prevention, security, legal, order fulfillment, or other permitted purposes.
No financial incentives
Dragon Maiden does not offer programs that would be considered financial incentives or price or service differences in exchange for your personal information under California privacy law.
8. Other Important Information
International transfers
Dragon Maiden is an online commerce business, and our service providers may process personal information in countries other than the country where you live. Those countries may have data protection laws different from those in your jurisdiction. Where required, we rely on appropriate safeguards, contractual commitments, or other lawful transfer mechanisms.
Links to other websites
The Site may contain links to websites or services operated by third parties, including payment providers, social platforms, shipping carriers, or other external services. We are not responsible for the privacy practices of those third parties. If you visit or use another website or service, you should review its privacy policy.
Children
The Site and Services are intended for a general audience and are not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, please contact us so we can review and, where appropriate, delete the information.
Changes to this policy
We may update this Privacy & Cookies Policy from time to time to reflect changes in our practices, technology, service providers, legal requirements, or the Site. When we update the policy, we will revise the "Last updated" date above. If required by law, we will provide additional notice or request consent for material changes.
9. Contact Us
For questions about this Privacy & Cookies Policy, to exercise a privacy right, to withdraw consent where applicable, or to lodge a privacy-related request, contact us at:
Email: global@thedragonmaiden.com
Website: www.thedragonmaiden.com
Dragon Maiden reads privacy correspondence carefully and will respond within the time required by applicable law. Where a request concerns an order or account, please include the email address used at checkout and, if available, the order number.