Privacy Policy
Last updated 22 September 2026
Set LEGAL_ENTITY_NAME and LEGAL_ENTITY_ADDRESS once the company is formed — shown only until they're configured.
(“we”) runs durko.co. This policy explains what personal data we collect, why, and your rights under UK GDPR, the Australian Privacy Act 1988 and other applicable law.
What we collect
- Order data: name, email, phone, shipping address, items purchased. Card details are handled by Stripe — we never see or store them.
- Communications: emails you send us.
- Analytics and advertising (only with your consent): Meta Pixel and TikTok Pixel record pages viewed, products added to cart and purchases, using cookies and device identifiers.
Why we use it
- To fulfil and deliver your order and provide support (contract).
- To send order and shipping emails (contract).
- To prevent fraud and meet tax and accounting obligations (legal obligation / legitimate interests).
- To measure and improve our advertising (consent — you can withdraw it any time via “Cookie settings” in the footer).
Who we share it with
Service providers who process data on our behalf: Stripe (payments), CJ Dropshipping and its carriers (fulfilment and delivery — which involves transfer to China), Resend (email delivery), Supabase and Vercel (hosting), Meta and TikTok (advertising, only with consent). We don't sell your personal data.
International transfers
Some providers are located outside the UK and Australia. Where required we rely on appropriate safeguards such as standard contractual clauses.
How long we keep it
Order records are kept for 7 years for tax purposes. Marketing cookies expire according to the provider's settings (typically up to 13 months).
Your rights
You can ask to access, correct, delete or export your data, object to processing, or withdraw consent. Email info@durko.co. UK residents can complain to the ICO (ico.org.uk); Australian residents to the OAIC (oaic.gov.au).