Privacy policy
Last updated: 6 August 2026
Ardyn Project ("we," "us," "our") operates this website and store, including all related information, content, features, tools, products and services (the "Services"), to give you a curated shopping experience. Ardyn Project is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy explains how we collect, use, and disclose your personal information when you visit, use, or make a purchase through the Services, or otherwise communicate with us. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
By using the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used, and disclosed as described here.
Who we are
Ardyn Project is the data controller responsible for your personal information under UK data protection law.
Contact: ardynproject@gmail.com
If you have any questions about this policy or how we handle your data, that email address is the right place to reach us — it's the only contact method we publish for privacy matters.
Personal information we collect
Depending on how you interact with the Services, we may collect the following categories of personal information:
- Contact details — your name, billing address, shipping address (where applicable), phone number, and email address.
- Financial information — payment card details, transaction details, and payment confirmation, processed securely through Shopify and its payment providers. We do not store your full card details ourselves.
- Account information — your username, password, preferences, and settings, if you create an account.
- Transaction information — items you view, add to cart, purchase, or request a refund on, and your past order history.
- Communications — anything you send us directly, such as a support enquiry or feedback.
- Device and usage information — your IP address, browser type, device information, and how you interact with the Services (e.g. pages visited, links clicked), usually collected through cookies and similar technologies.
Where this information comes from
- Directly from you — when you create an account, place an order, or contact us.
- Automatically — through your use of the Services, including cookies and analytics.
- From service providers — such as Shopify and the apps we use to run the store (e.g. payment processing, digital delivery, email marketing, review collection).
How we use your personal information
We only use your personal information where we have a valid legal basis to do so under UK GDPR. This includes:
| Purpose | Legal basis |
|---|---|
| Processing your order, delivering your digital product, and providing customer support | Performance of a contract with you |
| Sending you order confirmations, delivery emails, and essential account/service communications | Performance of a contract with you |
| Sending marketing emails (e.g. new product launches, The Monthly Drop) | Your consent, which you can withdraw at any time |
| Detecting and preventing fraud, and keeping the Services secure | Our legitimate interests, balanced against your rights |
| Improving the Services based on how they're used | Our legitimate interests |
| Complying with legal obligations (e.g. tax, accounting, responding to a lawful request) | Legal obligation |
You can withdraw consent for marketing at any time using the unsubscribe link in any marketing email, without affecting the lawfulness of anything done before you withdrew it.
How we disclose personal information
We don't sell your personal information. We may share it with:
- Shopify, who hosts our store and processes data on our behalf to provide the Services (payments, order management, analytics).
- Service providers and apps we use to run the store, such as our digital delivery app, our review collection app, and our email marketing platform — each only receives the data needed to perform their specific function.
- Payment processors, to securely process your payment.
- Legal and regulatory bodies, where we're required to by law, or to protect our rights, your safety, or the safety of others.
Any third party we share data with is only permitted to use it for the purpose we've shared it for, and is bound by its own data protection obligations.
Shopify
The Services are hosted by Shopify, which also processes personal information about your use of the Services to help provide and improve them. Shopify may be considered a joint controller or processor depending on the specific processing activity. You can read more about how Shopify handles your data in the Shopify Consumer Privacy Policy.
Cookies
We use cookies and similar technologies to run the store, remember your preferences, and understand how the Services are used. Where required under UK law (the Privacy and Electronic Communications Regulations), we will ask for your consent before using non-essential cookies, and you can manage your preferences through your browser or any cookie settings we provide.
International transfers
Some of our service providers (including Shopify and certain apps) may process your data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement, an adequacy decision, or equivalent legal mechanisms recognised under UK GDPR.
How long we keep your information
We keep personal information only as long as necessary for the purposes it was collected for — including to maintain your order history, meet our legal and tax obligations, resolve disputes, and enforce our agreements. When it's no longer needed, we delete or anonymise it.
Your rights
Under UK GDPR, you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate or incomplete information.
- Erase your personal information, in certain circumstances.
- Restrict how we use your information, in certain circumstances.
- Object to processing based on our legitimate interests, or to direct marketing at any time.
- Data portability — receive your data in a portable format, or ask us to transfer it to another provider, where technically feasible.
- Withdraw consent at any time, where we rely on consent as our legal basis.
To exercise any of these rights, email ardynproject@gmail.com. We may need to verify your identity before acting on a request, and we'll respond within the timeframes required by law (usually one month).
We won't discriminate against you in any way for exercising your rights.
Complaints
If you're unhappy with how we've handled your personal information, we'd like the chance to put it right first — email us at ardynproject@gmail.com. You also have the right to lodge a complaint directly with the UK's data protection regulator:
Information Commissioner's Office (ICO) Website: ico.org.uk Helpline: 0303 123 1113
Children's data
The Services are not intended for children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us at ardynproject@gmail.com and we will delete it.
Changes to this policy
We may update this Privacy Policy from time to time, including to reflect changes in our practices or for legal or operational reasons. Any changes will be posted here with an updated "Last updated" date.
Contact us
For any questions about this Privacy Policy, or to exercise any of your rights, please email: