Privacy Policy

Last updated: 6 October 2026

This Privacy Policy explains how DreadLab collects, uses and shares your personal information when you visit or make a purchase from www.dreadlab.co.uk (the “Site”), or contact us.

DreadLab is operated by DreadLab, at 16 Lissett Close, Lincoln, LN6 0SY, United Kingdom. We are the data controller responsible for the personal information we use to run our business. You can contact us at sales@dreadlab.co.uk.

Personal information we collect

When you visit the Site, we collect information about your device and how you use the Site. This may include your IP address, browser, time zone, referring website, search terms, pages and products viewed, and interactions with the Site. We refer to this as “Device Information”. Collection through optional cookies and similar technologies is subject to applicable consent requirements.

We collect Device Information using:

  • Cookies: small files stored on your device that support website functions, remember preferences and, where permitted, help with analytics and advertising.
  • Log files: records of website activity, which may include your IP address, browser type, referring pages and visit times.
  • Pixels, tags and similar technologies: tools that help measure browsing activity and the effectiveness of marketing.

When you place or attempt to place an order, we collect information such as your name, billing and delivery addresses, email address, telephone number, items ordered and transaction details. We refer to this as “Order Information”. Payment credentials are handled through the checkout and your selected payment provider; we receive the transaction information needed to manage your order, payment and any refund.

We also collect information you provide when creating an account, contacting us, subscribing to marketing or submitting content, together with your communication and privacy preferences.

How do we use your personal information?

We use your information to:

  • Process payments, fulfil orders, arrange delivery and handle returns or refunds.
  • Send order confirmations, delivery updates and other messages about your purchase.
  • Respond to enquiries and provide customer support.
  • Maintain accounts and provide website features such as search and product recommendations.
  • Detect fraud, protect our systems and resolve disputes.
  • Meet tax, VAT, customs and other legal requirements.
  • Understand website use and improve our products, services and marketing, subject to applicable consent requirements.
  • Send permitted marketing communications in accordance with your preferences.

We rely on the following legal bases:

  • Contract: to take steps you request before a purchase and to process and fulfil your order.
  • Legal obligation: to meet applicable tax, accounting, customs and other legal requirements.
  • Legitimate interests: to provide customer support, prevent fraud, protect our business and improve our services, where those interests are not overridden by your rights. This does not replace consent where consent is required.
  • Consent: for optional tracking and marketing where consent is required.

We need certain information, including suitable contact, delivery and payment details, to fulfil an order. If you do not provide it, we may be unable to complete your purchase. Agreeing to optional marketing is not a condition of buying from us.

Sharing your personal information

We share information where needed for the purposes described in this policy, including with:

  • Shopify: our ecommerce platform, which supports the Site, checkout and order management. Shopify may also act as an independent controller for services such as Shop, Shop Pay and Shopify Network Intelligence. See Shopify’s Consumer Privacy Policy and privacy controls.
  • Payment providers: the providers involved in your selected payment method, including PayPal, Shopify payment services and Klarna where available. Their processing, including fraud or payment-eligibility checks, is also explained in their own privacy notices.
  • Delivery and fulfilment providers: postal operators, couriers and shipping services that need your delivery and contact details to deliver your order and provide tracking updates.
  • Website and communication providers: services supporting search, recommendations, image galleries, email delivery and customer communications.
  • Analytics and advertising providers: including Google Analytics and advertising platforms, subject to applicable consent requirements. See Google’s Privacy Policy.
  • Tax and professional services: EAS, accountants, tax or customs authorities and professional advisers where necessary.

We may also disclose information where required by law, in response to a valid legal request, or where necessary to establish, exercise or defend legal claims.

Shopify Network Intelligence

Our store uses Shopify Network Intelligence. Shopify processes personal information about your visits and purchases, together with information from your interactions with other merchants and Shopify, to provide enhanced services. These include services that help protect and improve stores, personalise shopping experiences and support advertising.

For these purposes, information is shared with Shopify and relevant third parties, which may be located outside your country. Where required, advertising based on your activity across our store, other merchants and Shopify is subject to your consent, which you can withdraw.

Read Shopify’s Consumer Privacy Policy for details. You can use Shopify’s Privacy Portal to exercise applicable rights, including withdrawing consent or objecting to its processing.

Your privacy choices

You can visit our Your Privacy Choices page to opt out of the sale or sharing of personal information and targeted advertising, where these choices apply in your region.

You can also contact sales@dreadlab.co.uk to exercise your privacy rights, including objecting to direct marketing.

EU VAT compliance and EAS

We use EAS Project to support European VAT compliance, including the Import One-Stop Shop (IOSS) scheme. Relevant checkout and sales information is shared for VAT calculations, reporting and legally required records. This can include items purchased, amounts paid, transaction and shipment details, billing and delivery addresses, and a VAT identification number where applicable.

EAS identifies Easy Access System Project OÜ and its IOSS intermediary, Neman OÜ, as independent data controllers for their relevant activities. Information may be disclosed to tax or customs authorities where required. Our sharing with EAS is for tax compliance, not for marketing to you.

Further information is available in EAS’s data protection statement. Questions about VAT data handled by EAS can also be sent to support@easproject.com.

Marketing and behavioural advertising

We may send product news, offers and shopping reminders where you have consented or where applicable law allows us to do so. Where we rely on the UK existing-customer marketing exception, messages concern our own similar products and you must have been given an opportunity to opt out when your details were collected and in each message.

You can object to direct marketing at any time. Use the unsubscribe link in a marketing email or contact sales@dreadlab.co.uk. Unsubscribing does not stop essential messages about an order you have placed.

Where permitted by your privacy choices, browsing and shopping information may be used to measure advertising and show more relevant adverts. You can also manage advertising preferences directly with the relevant provider, including Google and Facebook.

To request that we stop using or sharing your personal information for direct marketing or targeted advertising, contact sales@dreadlab.co.uk. You can also use our Your Privacy Choices page where applicable, manage optional tracking through the Site’s cookie controls, and exercise applicable choices concerning Shopify through Shopify’s Privacy Portal.

Cookies and your choices

Some cookies are needed for functions such as the shopping basket, checkout and security. Optional analytics and advertising technologies require your consent where applicable. You can manage your choices using the Site’s cookie controls.

You can also block or delete cookies in your browser, although blocking necessary cookies may affect shopping or checkout. See our Cookie Policy for more information.

Browser “Do Not Track” settings are different from cookie-consent choices and may not control all tracking. Please use the available cookie and privacy controls to manage your preferences.

International data transfers

Some providers, including Shopify, process information outside the United Kingdom or European Economic Area, including in Canada and the United States. This can include processing associated with Shopify Network Intelligence, even where store data is hosted in the European Union.

Where required, transfers are protected through recognised adequacy arrangements or approved contractual safeguards, including relevant UK provisions. Contact us for information about the safeguards applying to your data and how to obtain a copy.

Your rights

Depending on the law that applies and the circumstances, you may have the right to:

  • Access your personal information and obtain a copy.
  • Correct inaccurate or incomplete information.
  • Request deletion or restrict certain uses of your information.
  • Receive certain information in a portable format.
  • Object to processing based on legitimate interests.
  • Withdraw consent where processing relies on it, without affecting the lawfulness of earlier processing.

You always have the right to object to use of your personal information for direct marketing.

To exercise your rights, email sales@dreadlab.co.uk. We may need to verify your identity. We normally respond within one month, subject to any extension or other provision permitted by law.

Some rights have exceptions. For example, we may need to retain transaction records to meet tax obligations even if you request deletion.

Data retention

We retain personal information only for as long as needed for its purpose, including fulfilling orders, providing support, meeting legal requirements and resolving disputes.

  • Tax and transaction records: UK VAT records generally need to be kept for at least six years. Relevant IOSS records must be retained for ten years from the end of the year of the transaction.
  • Accounts and enquiries: retention depends on whether your account remains in use, whether an enquiry or dispute is unresolved, and any relevant legal requirements.
  • Marketing preferences: we retain the information needed to manage your subscription and may retain a limited suppression record after you unsubscribe so that your choice is respected.
  • Technical and analytics information: retention depends on the purpose, the relevant service settings and applicable cookie periods.

When personal information is no longer needed, we delete or anonymise it. A deletion request does not override a legal requirement to retain particular records.

Changes

We may update this policy when our practices, services or legal requirements change. The latest version will be published on this page with an updated date.

Contact us and complaints

For privacy questions, requests or complaints, please contact:

DreadLab — Privacy enquiries
16 Lissett Close
Lincoln
LN6 0SY
United Kingdom
Email: sales@dreadlab.co.uk