Privacy policy
Last updated: 5 November 2026
This policy explains how Dom Goor London uses your personal data when you visit domgoor.com, create an account, buy from us, or contact us. It applies to customers in the United Kingdom and in the European Union / European Economic Area (EU/EEA).
1. Who we are
Dom Goor London is a trading name of Domgoor Limited, a company registered in England and Wales (company number 07709647). Domgoor Limited is the controller of your personal data, which means we decide how and why it is used.
- Registered office: 1st Floor Watermans Boxes Building, 20-24 Assembly Passage, London E1 4UT, United Kingdom
- Email: Sales@domgoor.com
- ICO registration number: ZA700118
2. The personal data we collect
Information you give us
- Contact details: name, email address, delivery and billing address, and mobile number if you give it to us.
- Order details: what you bought, prices, delivery method, returns and refunds. All payments are processed through Shopify's checkout; we see payment confirmation only and never see or store your full card details.
- Account details: your login email and saved addresses, if you create an account.
- Wishlist: items you save to your wishlist.
- Messages: anything you include when you contact us.
- Collaborations: if you take part in our creator or affiliate programme (Shopify Collabs), your name, contact and social media details, and the sales linked to your referral links.
- Marketing preferences: whether you have signed up for, or unsubscribed from, our emails or texts.
Information collected automatically
- Device and usage data: IP address, browser and device type, pages viewed, items added to your basket, and how you arrived at the site. This is collected through cookies and similar technologies; see our Cookie Policy. Non-essential cookies are only used if you agree to them.
Information from others
- Payment and fraud-screening results from our payment providers.
- Delivery status updates from our couriers.
3. How we use your data and our lawful basis
| What we do | Lawful basis under UK GDPR and EU GDPR |
|---|---|
| Take, process and deliver your order, handle returns and refunds, and send order and delivery updates | Performance of a contract with you |
| Run your account and wishlist, and show size guides and product warnings | Performance of a contract with you |
| Answer your questions and complaints | Performance of a contract, or our legitimate interest in providing good customer service |
| Keep tax and accounting records | Legal obligation |
| Prevent fraud, spam and bots (including Google reCAPTCHA on our forms) and keep the site and your account secure | Our legitimate interests in protecting our business and customers |
| Send marketing emails and texts (see section 4) | Your consent, or the "soft opt-in" for existing customers (our legitimate interests, as permitted by UK PECR and, where applicable, equivalent EU ePrivacy rules) |
| Use analytics, personalisation and marketing cookies and pixels (including Shopify Collabs referral tracking) | Your consent, given through our cookie banner |
| Run our creator/affiliate programme and pay commissions | Performance of a contract with the creator; our legitimate interests in measuring referred sales |
| Understand how the site is used and improve it, using data that does not rely on non-essential cookies | Our legitimate interests in running and improving our shop |
| Establish, exercise or defend legal claims | Our legitimate interests |
Where we rely on legitimate interests, we have weighed them against your rights. You can object at any time (see section 9).
4. Marketing emails and texts
We will only send you marketing emails or texts:
- if you have opted in, for example by ticking a box at checkout or signing up to our newsletter; or
- if you have bought from us, or started to, and we gave you the chance to opt out at that point. In that case we only tell you about our own similar products, and every message gives you a simple way to opt out (the "soft opt-in").
You can unsubscribe at any time by using the link in any email, by following the opt-out instructions in any text message, or by emailing Sales@domgoor.com. Unsubscribing does not affect order and service messages, which we need to send. We never sell your details or pass them to other companies for their own marketing.
5. Who we share your data with
We share personal data only where needed, with these service providers:
| Provider | What they do | Their role |
|---|---|---|
| Shopify (Shopify International Ltd and its group) | Hosts our online shop, checkout and payments (Shopify Payments), customer accounts, site analytics, marketing emails and texts (Shopify Messaging / Shopify Email), automation (Shopify Flow), search (Search & Discovery), translation (Translate & Adapt), and our creator/affiliate programme (Shopify Collabs) | Processor |
| Shopify Payments and its payment partners, and any digital wallet offered at Shopify checkout that you choose to use | Take payments and screen for fraud | Independent controllers for their own legal and fraud-prevention purposes |
| DHL Parcel UK, with shipping labels arranged through InXpress | Deliver your order. We share your name, delivery address, email or phone number for delivery updates, and parcel details | Processor, or independent controller for their own legal and operational purposes |
| Google (reCAPTCHA) | Protects our forms from spam and bots by checking device and browser signals | Independent controller under Google's privacy policy |
| Consentmo | Displays our cookie banner and records your cookie choices | Processor |
| Hulk Apps (Advanced Wishlist) | Stores your wishlist | Processor |
| BF Size Charts, Warnify Pro | Show size guides and product warnings. Technical device data only | Processors |
| Booster Page Speed Optimizer | Speeds up page loading. Technical device data only | Processor |
| Our accountant and professional advisers | Accounting, tax and legal advice | Independent controllers |
We may also share data:
- if the law requires it, for example with HMRC or the police;
- to protect our rights or prevent fraud; or
- if the business is sold, with the new owner, who would have to use it in line with this policy.
- If you choose to pay with Klarna, you will be redirected to Klarna to complete your purchase. Klarna (Klarna Bank AB) will process your personal data, including for identity and credit checks, as an independent controller under its own privacy notice, available at klarna.com.
We do not sell your personal data.
6. International transfers
We are based in the United Kingdom. If you are in the EU/EEA, your personal data is transferred to the UK so we can take and fulfil your order and run the shop. The UK is recognised by the European Commission as providing an adequate level of data protection, so those UK transfers are permitted under EU GDPR.
Some of our providers, including Shopify, Google and some app providers, store or access data outside the UK and the EEA, for example in Canada or the United States. When that happens, we make sure the data is protected by one of the following, as appropriate:
- UK or EU adequacy regulations (including the UK-US "Data Bridge" and the EU-US Data Privacy Framework for certified US companies, where applicable);
- the ICO's International Data Transfer Agreement;
- the UK Addendum to the EU Standard Contractual Clauses; and/or
- the EU Standard Contractual Clauses.
You can ask us for more details.
7. How long we keep your data
| Data | How long |
|---|---|
| Orders, invoices and payment records | 6 years from the end of the tax year they relate to (HMRC rules) |
| Customer account and wishlist | Until you close your account, plus up to 12 months |
| Customer service messages | Up to 2 years after the matter is resolved |
| Marketing list | Until you unsubscribe. We remove inactive contacts after 24 months with no opens, clicks or purchases. We keep a minimal "do not contact" record so that we respect your opt-out |
| Cookie consent records | Up to 12 months; individual cookies as listed in our Cookie Policy |
We then delete or anonymise the data.
8. How we keep your data secure
- Payments: handled entirely through Shopify's PCI-DSS-compliant checkout. We never see your full card details.
- Encryption: our site uses TLS (HTTPS).
- Access: our admin accounts are protected by strong passwords and two-factor authentication, and only people who need access have it.
No system is completely secure. If a breach affects you and is likely to put you at high risk, we will tell you and the ICO (and, where required for EU/EEA customers, the relevant EU supervisory authority) where required.
9. Your rights
Under UK GDPR and, if you are in the EU/EEA, under EU GDPR, you have the right to:
- be told how your data is used (this policy);
- access a copy of your data;
- have inaccurate data corrected;
- have your data erased in certain circumstances;
- restrict how we use your data in certain circumstances;
- data portability, which means getting data you gave us in a reusable format;
- object to our use of your data based on legitimate interests;
- object to direct marketing at any time. We will always stop;
- withdraw consent at any time, where we rely on consent. This does not affect anything we did before you withdrew;
- not be subject to decisions based solely on automated processing that have legal or similarly significant effects. We do not make such decisions.
To use any of these rights, or for any privacy request, email Sales@domgoor.com. We may ask you to confirm your identity. We will reply within one month. This can be extended by up to two further months for complex requests, and we will tell you if so. There is normally no charge.
10. Complaints
If you have a concern, please contact us first and we will try to put it right. You also have the right to complain to a data protection authority:
- UK: the Information Commissioner's Office (ICO) — online at ico.org.uk/make-a-complaint; telephone 0303 123 1113; post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
- EU/EEA: you may complain to your local supervisory authority in the EU/EEA member state where you live, work, or where you believe an infringement has occurred. A list of authorities is available from the European Data Protection Board.
11. Children
Our shop is not intended for anyone under 18, and we do not knowingly collect children's data. If you think a child has given us their data, contact us and we will delete it.
12. Links to other sites
Our site may link to social media and other websites. Those sites have their own privacy policies, and we are not responsible for them.
13. Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated. If we make significant changes, we will tell you by email or on the site where appropriate.