Privacy policy

1. Who We Are

Dorotakora ("we", "us" or "our") is an online store operated by Gomerchantsolutions Limited, registered in England and Wales under company number 17322088. We run this website and the services connected to it (together, the "Site"). Protecting your privacy and handling your personal data responsibly are commitments we take seriously.

Gomerchantsolutions Limited is the data controller for the personal data described in this policy. By using the Site you accept the practices set out below.

2. The Data We Hold About You

Personal data reaches us in three ways — you give it to us, it is captured automatically, or it comes from a third party. It may include:

Identity and contact details — your name, email address, telephone number, and your delivery and billing addresses.
Purchase and payment records — what you have bought or returned, amounts paid, and payment references. Complete card details are handled by our payment providers, never by us.
Account details — sign-in credentials and saved preferences, where you have registered with us.
Correspondence with our team — the messages and any attachments you exchange with customer support.
Technical information — IP address, device and browser details, operating system, pages visited, plus cookies and similar identifiers.

3. Where the Data Comes From

From you directly — when you order, open an account, sign up to our newsletter or write to support.
Automatically — via cookies, pixels and comparable technologies as you move around the Site.
From our suppliers — payment processors, delivery partners, marketing tools and analytics providers.

4. Why We Use It, and Our Lawful Basis

Fulfilling orders and looking after customers — processing purchases, arranging delivery, handling returns and answering questions. Basis: performance of our contract with you.
Taking payment and preventing fraud — collecting payment securely and protecting against unauthorised transactions. Basis: contract and our legitimate interests.
Improving the Site — understanding how the Site is used so that we can make it better. Basis: our legitimate interests.
Marketing — sending newsletters and offers where you have agreed to receive them. You can unsubscribe whenever you wish. Basis: consent.
Meeting our legal duties — satisfying tax and accounting obligations and responding to lawful requests. Basis: legal obligation.

5. Cookies and Similar Technologies

Cookies and comparable tools are used on the Site to:

make essential parts of the Site work;
keep track of the preferences you have set;
measure how the Site performs; and
show marketing messages that are relevant to you.

Non-essential cookies are set only with your consent, and you can change your choice at any time. Cookies can also be managed or switched off through your browser, though some features of the Site may then stop working properly.

6. Who We Share It With

Personal data is shared only where there is a need to do so, with:

our e-commerce platform — Shopify, which hosts the store and manages orders;
payment processors, so transactions can be completed securely;
delivery and fulfilment partners, so your order reaches you;
analytics and marketing providers, to improve our service and our communications;
legal and professional advisers, where this is necessary;
a buyer or successor, in the event of a merger or sale of the business.

We do not sell your personal data to anyone.

7. Transfers Outside the United Kingdom

Some of our service providers are based outside the United Kingdom, including in the European Economic Area and the United States. Where personal data is transferred abroad, we rely on UK adequacy regulations or on the UK International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses), so that your information keeps an equivalent level of protection.

8. How Long We Keep It

Data is retained only for as long as it is needed for the purposes above and to satisfy our legal obligations:

transaction records — up to 10 years;
account data — for as long as your account stays active;
support correspondence — up to 3 years after the matter is closed;
marketing preferences — until you opt out.

9. Your Rights Under UK Data Protection Law

Depending on the circumstances, you have the right to:

be told what data we hold and receive a copy of it;
have inaccurate data corrected, or have your data erased;
restrict how we process it, or object to processing;
receive certain data in a portable format;
withdraw consent at any time where processing rests on consent.

Write to contact@dorotakora.com to exercise any of these rights. We may first need to confirm your identity, and we will reply within one month. If you are not satisfied with how we have handled your data, you may complain to the Information Commissioner's Office (ICO) at ico.org.uk.

10. Children

The Site is not aimed at anyone under 13 years of age, and we do not knowingly collect data from children. If you believe a child's data has reached us, please tell us and we will delete it.

11. Automated Decisions

We do not make decisions about you by automated means where those decisions would produce legal effects or similarly significant effects for you.

12. Shopify

Our store runs on Shopify, which acts as a data processor on our behalf. For information on how Shopify handles data, please refer to Shopify's own privacy policy.

13. Changes to This Policy

This policy may be revised from time to time. Any new version will be posted on this page along with the date it took effect. Continuing to use the Site means you accept the updated policy.

14. Contact Us

Store Name: Dorotakora
Business Name: Gomerchantsolutions Limited
Address: 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Company No.: 17322088
Phone: +44 7520 659869
Email: contact@dorotakora.com
Customer Service Hours: Monday to Friday, 9.00 a.m. – 5.00 p.m. (ET)