Last updated October 16, 2026

Privacy Notice

This notice explains what personal information Drop Shop ("we", "us") collects through dropshop.locker, why, who we share it with, and the choices you have. We collect only what we need to make and deliver your order.

1. What we collect

We do not use advertising trackers, analytics services or social media pixels. The "Questions?" help chat runs entirely in your browser: what you type there is not sent to us or recorded. If you email us from it, we receive your email like any other.

2. Cookies and browser storage

Your cart is saved in your own browser (local storage) so it is still there when you come back; it is not sent to us until you check out. Stripe sets cookies on the payment form to process your payment and prevent fraud; see Stripe's privacy policy. We do not use cookies for advertising.

3. How we use it

We do not send marketing emails unless you have asked to receive them, and you can unsubscribe at any time.

4. Who we share it with

We share only what each provider needs to do its job:

We do not sell your personal information and do not share it for targeted advertising.

5. How long we keep it

Order and payment records are kept for as long as needed to fulfil the order and handle claims, and then for up to 7 years for tax and accounting purposes. Support emails are kept for up to 2 years. Server logs are kept for a short period for security. When records are no longer needed, they are deleted.

6. Security

The site uses HTTPS encryption, payments are handled by Stripe (a PCI DSS Level 1 certified provider), and access to order data is limited to what is needed to run the shop. No system is perfectly secure, so we cannot guarantee absolute security; if a breach affects your information, we will notify you as the law requires.

7. Your rights

You can ask us to tell you what personal information we hold about you, give you a copy, correct it, or delete it (unless we must keep it, for example for tax records or an open claim). Email support@dropshop.locker from the address you used to order. We will verify your request and reply within 30 days (45 days where US state law allows). We will not treat you differently for using these rights.

US residents: depending on your state (including California, Colorado, Connecticut, Virginia, Texas and others), you have the rights above plus the right to opt out of the sale of personal information or its use for targeted advertising. We do neither. You may use an authorised agent to make a request, and you may appeal our decision by replying to it.

UK, EU and Australian residents: we use your information because we need it to perform our contract with you (your order), to meet legal obligations, and for our legitimate interests in preventing fraud and running the shop securely. You also have the right to object to or restrict processing, and to complain to your data protection authority (in the UK, the ICO; in Australia, the OAIC). Your information is processed in the United States and other countries where our providers operate, using the safeguards those providers offer, such as standard contractual clauses.

8. Children

This site is not directed to children under 13 (or under 16 in the UK and EU), and we do not knowingly collect their personal information. If you believe a child has given us personal information, email us and we will delete it.

9. Changes

We may update this notice by posting a new version here with a new date. Significant changes will be highlighted on the site.

10. Contact

Questions or requests about your privacy: Drop Shop, support@dropshop.locker