Legal — Privacy Policy

Privacy Policy.

Last updated: 26 October 2026

1. Who We Are

This Privacy Policy applies to Diaspora Inc LTD (trading as diasPora), a company registered in England and Wales under company number 15910395, with its registered office at 124 City Road, London, England, EC1V 2NX. We operate the website www.dpora.xyz.

We are the data controller for personal data collected through this website and our store. If you have any questions about how we handle your data, contact us at info.dpora.inc@gmail.com.

2. What Data We Collect

When you browse, place an order, sign up to our emails or texts, or contact us, we may collect:

Identity data: your name.

Contact data: email address, telephone number, and delivery and billing address.

Transaction data: details of your purchases, including products, prices and order references. Card payments are processed by Shopify Payments; we never see or store your full card details.

Technical data: IP address, browser and device type, pages visited and time on site, collected through cookies and similar technologies (see section 7).

Marketing data: your marketing preferences, and whether you open or click our emails and texts.

3. How We Use Your Data

We use your personal data for the following purposes, each with a lawful basis under UK GDPR:

To fulfil your order: taking payment, arranging delivery, and handling cancellations, returns and refunds. Lawful basis: contract.

To communicate with you about your order: order confirmations, shipping updates, and replies to your enquiries. Lawful basis: contract and legitimate interests.

To send marketing emails and texts: news about our products, if you have opted in. If you have bought from us, we may also email you about similar products unless you have opted out. You can unsubscribe at any time using the link in any email or by replying STOP to any text. Lawful basis: consent, or legitimate interests for similar products to existing customers.

To understand and improve our website: analysing how visitors use the site. Lawful basis: consent, where this uses non-essential cookies.

To show you relevant advertising: measuring and improving our adverts on platforms such as Instagram, Facebook and TikTok. Lawful basis: consent, given through our cookie settings.

To meet legal obligations: keeping records for tax and accounting. Lawful basis: legal obligation.

4. Who We Share Your Data With

We do not sell your personal data. We share it only where necessary with service providers who process it on our behalf, under contract:

Shopify Inc.: our e-commerce, checkout and payments platform.

Klaviyo: our email and SMS marketing platform, used to send order-related and marketing messages.

Vercel: hosts our website.

Royal Mail and other couriers: receive your name and delivery address so they can deliver your order.

Meta (Instagram and Facebook) and TikTok: if you accept marketing cookies, these platforms receive information about your visit (such as pages viewed and purchases) so we can measure and improve our adverts. They do not receive this information if you decline.

We may also share data where required by law, or with professional advisers such as our accountants.

5. International Transfers

Some of our service providers are based outside the UK, including in the United States. Where your data is transferred outside the UK, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or standard contractual clauses with the UK Addendum, as required by UK GDPR.

6. Data Retention

We keep personal data only for as long as we need it. Order and transaction records are kept for six years to meet tax and accounting obligations. Marketing data is kept until you unsubscribe, after which we keep only what we need to respect your choice. Enquiries are kept for up to two years.

7. Cookies

We use cookies and similar technologies on our website.

Strictly necessary cookies keep the site and your bag working and secure. These are always on.

Analytics cookies help us understand how the site is used.

Marketing cookies (including the Meta Pixel, TikTok Pixel and Klaviyo) help us measure our adverts and show you relevant content.

We only use analytics and marketing cookies if you accept them in our cookie banner. You can change your choice at any time using the "Cookie settings" link at the bottom of every page.

8. Your Rights Under UK GDPR

You have the right to:

Access: request a copy of the personal data we hold about you.

Rectification: ask us to correct inaccurate or incomplete data.

Erasure: ask us to delete your data where we have no lawful reason to keep it.

Restriction: ask us to pause processing in certain circumstances.

Portability: receive your data in a structured, machine-readable format.

Objection: object to processing based on legitimate interests, and to direct marketing at any time.

Withdraw consent: where we rely on consent, you can withdraw it at any time.

To exercise any of these rights, email info.dpora.inc@gmail.com. We will respond within one month.

9. Children

Our website is not aimed at children under 13, and we do not knowingly collect their data.

10. Complaints

If you are unhappy with how we have handled your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.

11. Changes to This Policy

We may update this policy from time to time. The current version is always available at www.dpora.xyz/privacy. Where we hold your email address, we will tell you about significant changes.

Contact

Diaspora Inc LTD
124 City Road, London, England, EC1V 2NX
Company number: 15910395
Email: info.dpora.inc@gmail.com