Privacy Policy & GDPR

Dynasty Botanical Beauty ("we", "us") is the data controller for personal data collected through this website. You can reach us at any time through the Contact page for any privacy question or request.

Contact enquiries — your name, email address and message, so we can respond to you (lawful basis: legitimate interest / your request).

Waitlist sign-ups — your email address and the product you are interested in, so we can notify you when pre-orders open (lawful basis: consent).

Pre-order reservations — your name, email, shipping address, order contents and any notes, so we can fulfil your reservation (lawful basis: contract / steps towards a contract).

Accounts — your email address and authentication details when you sign in, so we can secure your account (lawful basis: contract).

Affiliate programme — your name, email, referral code, click statistics, commission and payout details, so we can operate the programme and pay you (lawful basis: contract).

Referral attribution — when you arrive via an affiliate link, the referral code is stored in your browser for up to 60 days so a later reservation can be attributed. This is stored on your device only.

We never sell your personal data. We never share it with third parties for their own marketing. We never store payment card details on our systems.

We use a small number of processors to run the site: our hosting and database provider (which stores the data described above on secure cloud infrastructure) and our AI provider (which powers the ingredient concierge — your chat messages are processed to generate replies). Each processes data only on our instructions.

Where data is transferred outside the EU/UK, we rely on appropriate safeguards such as standard contractual clauses.

Contact enquiries are kept for up to 24 months. Waitlist entries are kept until the product launches plus 12 months, or until you withdraw consent. Order and commission records are kept for the period required by tax and accounting law (typically 6–7 years). Account data is kept while your account is active.

Access — you can ask for a copy of the personal data we hold about you.

Rectification — you can ask us to correct inaccurate data.

Erasure — you can ask us to delete your data, subject to legal retention duties.

Restriction and objection — you can ask us to limit or stop certain processing, including any direct marketing.

Portability — you can ask for data you provided in a structured, machine-readable format.

Withdraw consent — where we rely on consent (e.g. the waitlist), you can withdraw it at any time without affecting prior processing.

To exercise any right, contact us through the Contact page. We respond within one month. You also have the right to lodge a complaint with your local data protection authority.

We use strictly necessary browser storage only: your sign-in session and the affiliate referral code described above. We do not use advertising or third-party tracking cookies.

Data is encrypted in transit and access is restricted on a need-to-know basis with row-level access controls in our database. No method of transmission is 100% secure, but we work to protect your data to a high standard.

We may update this policy from time to time. The current version is always published on this page with its revision date.