Privacy policy

 

Privacy Policy

Last Updated: August 2026

At Crown of Peng, we respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and share your personal information when you visit our website, create an account, contact us or purchase products from Crown of Peng.

1. Who We Are

Crown of Peng operates an online retail store in the United Kingdom.

For the purposes of UK data protection law, the business operating Crown of Peng is the controller of personal information collected through this website.

Our full business and contact details are available on our website.

2. Information We Collect

Depending on how you interact with Crown of Peng, we may collect information including:

  • Your name
  • Billing and delivery address
  • Email address
  • Telephone number
  • Order and transaction history
  • Products purchased
  • Account information
  • Communications with customer support
  • IP address
  • Browser and device information
  • Website activity
  • Cookie and analytics information
  • Marketing preferences
  • Age or age-verification information where required

Payment information is normally processed securely by our payment providers. Crown of Peng does not necessarily receive or store your complete card details.

3. How We Collect Your Information

We may collect information when you:

  • Visit our website;
  • Place an order;
  • Create an account;
  • Subscribe to emails or marketing;
  • Contact customer support;
  • Participate in a promotion;
  • Submit a review;
  • Interact with our website or advertisements; or
  • Complete an age-verification process.

Some technical information may be collected automatically through cookies and similar technologies.

4. How We Use Your Information

We may use your personal information to:

  • Process and fulfil orders;
  • Take and manage payments;
  • Deliver products;
  • Send order and delivery updates;
  • Provide customer support;
  • Process returns, replacements and refunds;
  • Perform age verification where appropriate;
  • Detect and prevent fraud;
  • Maintain the security of our website;
  • Maintain customer accounts;
  • Improve our products and services;
  • Analyse website performance;
  • Comply with legal and regulatory obligations; and
  • Send marketing communications where permitted.

We will only process personal information where we have an appropriate lawful basis for doing so.

5. Our Lawful Bases

Depending upon the circumstances, we may process your information because:

Contract — processing is necessary to fulfil an order or take steps at your request before entering into a contract.

Legal obligation — processing is necessary for us to comply with applicable law.

Legitimate interests — processing is reasonably necessary for operating, protecting or improving our business and does not override your rights and interests.

Consent — you have given us permission to process information for a particular purpose, such as certain marketing or cookie activities.

Where processing relies on consent, you may withdraw that consent at any time.

6. Shopify

Our online store is operated using Shopify.

Shopify processes certain personal information in order to provide its e-commerce platform and associated services.

Information processed through Shopify may be handled in accordance with Shopify’s own privacy practices and data-processing arrangements.

7. Payment Providers

Payments may be processed by third-party payment providers.

These providers may collect information necessary to authorise payments, prevent fraud and complete transactions.

Payment providers operate according to their own privacy and security requirements.

8. Delivery Providers

We may provide necessary information to postal and courier companies in order to fulfil your order.

This may include your:

  • Name
  • Delivery address
  • Email address
  • Telephone number
  • Delivery instructions

We only provide information reasonably required to complete delivery or resolve a delivery issue.

9. Age Verification

Because Crown of Peng sells age-restricted products, we may use age-verification procedures or third-party age-verification providers.

Where age verification is required, information may be processed to determine whether you meet the applicable minimum age requirement.

We aim to collect and retain only the information reasonably necessary for this purpose.

10. Marketing

Where permitted, we may send you information about Crown of Peng products, promotions and news.

You can unsubscribe from marketing emails at any time by using the unsubscribe link contained within our emails or by contacting us.

Unsubscribing from marketing does not prevent us from sending transactional communications relating to your orders or account.

11. Cookies

Our website uses cookies and similar technologies.

These technologies may be used to:

  • Keep the website functioning;
  • Remember preferences;
  • Maintain your shopping basket;
  • Understand how visitors use our website;
  • Measure website performance;
  • Prevent fraud; and
  • Provide advertising or marketing where permitted.

Where consent is legally required for non-essential cookies, we will request it through our cookie-management system.

Further information may be provided in our Cookie Policy.

12. Sharing Your Information

We do not sell your personal information.

We may share information with trusted service providers where necessary to operate our business, including:

  • Shopify;
  • Payment processors;
  • Delivery and logistics providers;
  • Age-verification providers;
  • Email and marketing platforms;
  • Website analytics providers;
  • IT and hosting providers;
  • Professional advisers; and
  • Fraud-prevention or security providers.

We may also disclose information where required by law, regulation, court order or a competent authority.

Service providers are only given information reasonably necessary for the services they provide.

13. International Data Transfers

Some of our service providers may process information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is permitted under applicable UK data-protection law.

This may include reliance upon recognised adequacy regulations or appropriate contractual safeguards.

14. How Long We Keep Information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including fulfilling orders, maintaining business and accounting records, resolving disputes, preventing fraud and satisfying legal requirements.

Different categories of information may therefore be retained for different periods.

When information is no longer required, it will be deleted, anonymised or otherwise securely disposed of where appropriate.

15. Security

We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, alteration, disclosure or misuse.

However, no internet-based system can guarantee absolute security.

Customers are responsible for maintaining the confidentiality of their account credentials and should contact us immediately if they believe their account has been compromised.

16. Your Privacy Rights

Under UK data-protection law, depending on the circumstances, you may have rights including:

  • The right to access your personal information;
  • The right to correct inaccurate information;
  • The right to request deletion of your information;
  • The right to restrict certain processing;
  • The right to object to certain processing;
  • The right to data portability;
  • The right to withdraw consent where processing relies upon consent; and
  • Rights relating to certain automated decision-making.

Not every right applies in every circumstance.

We may need to verify your identity before responding to a request.

17. Complaints

If you have concerns about how Crown of Peng handles your personal information, please contact us first so that we have an opportunity to investigate and resolve the issue.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK’s independent data-protection regulator.

18. Children’s Privacy

Crown of Peng does not knowingly sell age-restricted products to anyone under the applicable legal age.

Our website and products are intended for adults.

If we become aware that personal information has been collected from a child in circumstances where it should not have been collected, we will take appropriate steps to delete it.

19. Third-Party Links

Our website may contain links to websites operated by third parties.

Crown of Peng is not responsible for the privacy practices or content of external websites.

We recommend reviewing the privacy policy of any third-party website you visit.

20. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our business, technology, services or legal requirements.

The latest version will always be published on our website with the date it was last updated.

21. Contact Us

For questions about this Privacy Policy, requests concerning your personal information or other privacy enquiries, please contact:

Crown of Peng
United Kingdom

Email: hello@crownofpeng.com