Last updated: 19 October 2026
This notice explains what personal information Dispenseree collects when you visit dispenseree.cc, order from us or get in touch, why we use it, who helps us handle it, and the choices you have. We’ve kept it as short and plain as we can.
The short version
- We collect what we need to take, pay for and deliver your order, and to look after you if anything goes wrong.
- We never sell your information, and we don’t use advertising trackers or social media pixels.
- We don’t take card payments, so we never see or store card details.
- Marketing emails and texts are optional, and every one gives you a free way to stop them.
- You can ask to see, correct or delete your information at any time: email [email protected].
Who we are
Dispenseree (“we”, “us”) runs the online shop at dispenseree.cc and decides how your personal information is used. That makes us the “controller” under UK data protection law: the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.
For any question about this notice or your information, email [email protected] with “Privacy” in the subject line, so it reaches the right person quickly.
What we collect
When you visit the site
- Technical information your browser sends: your IP address, browser and device type, the pages you visit and when. Our hosting and security providers record this in logs.
- Information from cookies and similar technologies, explained in “Cookies” below.
When you order
- Your name, delivery and billing address, email address and phone number, and any note you add to the order.
- What you ordered, when, the price, and any discount, coupon or loyalty points used.
- Payment details for the method you choose. For a bank transfer, that’s the name and reference on the payment. For crypto, it’s the invoice, the amount and the transaction details.
- Delivery details, including your Royal Mail tracking number.
- How you found us (for example, a search engine or one of our emails) and the type of device you used, which is saved with the order.
When you create an account or join our rewards
- Your email address, your password (stored in scrambled form, so nobody can read it, us included), saved addresses and order history.
- Your loyalty points, rewards and referrals, if you take part.
When you contact us
- Your messages, our replies, and anything you choose to send, such as a photo of a parcel.
- Please don’t send us health or medical information: we don’t need it.
When you subscribe or leave a review
- Newsletter: your email address, your name if you give it, when you signed up, and whether you open our emails and click their links.
- Texts: your phone number, and whether you’ve asked us to stop.
- Reviews: the name you choose to show and what you write.
How we use it, and the law that allows it
- To take, pack and deliver your order, take payment, run your account and rewards, and help with any problem. Lawful basis: our contract with you.
- To keep tax and accounting records. Lawful basis: legal obligation.
- To keep our shop for adults aged 18 and over. Lawful basis: legal obligation and our legitimate interests.
- To keep the site, your account and payments secure, and to prevent fraud and abuse. For example, we block suspicious traffic, and login attempts are checked against passwords known to have leaked from other websites. Lawful basis: our legitimate interests.
- To understand how the site is used and make it better, using visit statistics and the record of how each order found us. Lawful basis: our legitimate interests.
- To send you news and offers by email or text. Lawful basis: your consent when you sign up or, if you’ve bought from us, our legitimate interest in telling you about similar products. You can stop at any time, free: use the unsubscribe link in any email, reply STOP to any text, or email us.
- To publish your review, if you choose to leave one. Lawful basis: your consent, and you can ask us to remove it at any time.
- To answer your messages quickly and consistently, using software that helps us organise and draft replies, some of which uses AI. Lawful basis: our legitimate interests.
We don’t make decisions about you that have legal or similarly significant effects by automated means alone.
Who we share it with
We share only what each service needs to do its job, and our providers may use it only to provide that service to us. Royal Mail and banks handle information under their own legal duties.
- Royal Mail, to deliver your parcel and send tracking updates.
- Payment services: our bank for transfers, and BTCPay Server for crypto payments. Crypto transactions are recorded on a public blockchain, which nobody can edit or delete.
- Email and text services: MailerSend sends order and account emails (from [email protected]), SendX sends our newsletter (from [email protected]), The SMS Works sends our texts, and Proton hosts our support inbox.
- Website, security and hosting services: our hosting provider; Cloudflare, for security, fast delivery of the site, cookie-free visit statistics and forwarding email to our inbox; WPMU DEV, for site tools, backups, visitor statistics and delivery of the site’s files; and Google Fonts, which supplies the site’s typeface, so your browser connects to Google to fetch it.
- Software and AI tools that help us manage orders and reply to messages.
- Professional advisers, such as accountants, where needed.
- Authorities, only where the law requires it.
- A new owner, if the business is ever sold or reorganised, who must keep the promises in this notice.
We never sell your personal information or share it for other companies’ marketing.
Transfers outside the UK
Some of our providers, such as Cloudflare, WPMU DEV, Google and SendX, are based in or use servers in the United States or the European Economic Area, and Proton is in Switzerland. Whenever your information leaves the UK, it’s protected either by UK adequacy regulations, which cover the EEA, Switzerland and US organisations certified under the UK-US Data Bridge, or by the UK’s approved contract terms for international transfers.
How long we keep it
- Orders, payments and invoices: six years after the end of the financial year they belong to, as UK tax rules require.
- Your account: while it’s open. Ask us to close it at any time; we’ll still keep the order records above for as long as the law requires.
- Messages to us: as long as we need them to deal with your query and any related order, and no longer than the order records above.
- Marketing: until you unsubscribe or ask us to stop. We then keep your email address or number on a do-not-contact list, so we never contact you by mistake.
- Reviews: until you ask us to remove yours, or we take it down.
- Security logs and backups: for a limited period, after which they’re deleted or overwritten.
How we protect it
- The whole site uses an encrypted connection (HTTPS) and sits behind Cloudflare’s security protection.
- Only the people who need customer information can see it, and their accounts are protected by strong sign-in controls.
- Backups are encrypted, and the site’s security is checked regularly.
- If a breach ever put your information at risk, we would tell you, and the Information Commissioner’s Office, as the law requires.
Cookies
Cookies are small files a website stores in your browser. We keep them to a minimum, and we use no advertising or cross-site tracking cookies.
Essential cookies, which the shop needs to work and keep you safe:
| Cookie | What it’s for | How long |
|---|---|---|
| cf_clearance, __cf_bm | Cloudflare: tells real visitors apart from bots and attacks | 30 minutes to 1 year |
| wp_woocommerce_session_*, woocommerce_cart_hash, woocommerce_items_in_cart | Keep your basket working | Up to 2 days |
| wordpress_logged_in_*, wordpress_sec_* | Keep you signed in to your account | Until you sign out, or 14 days if you tick “Remember me” |
Statistics cookies, which help us improve the site (you can turn these off):
| Cookie | What it’s for | How long |
|---|---|---|
| _pk_id.*, _pk_ses.* | WPMU DEV’s visitor statistics (built on Matomo): counts visits and shows which pages are used | 13 months; 30 minutes |
| sbjs_* | WooCommerce: notes how you arrived, so it’s saved with your order | Until you close your browser |
Cookies that remember your choices:
| Cookie | What it’s for | How long |
|---|---|---|
| sendxFrequency*, sendxNumTimesShown*, sendxSubscribed* | SendX: remembers whether you’ve seen or answered our sign-up pop-up, so it doesn’t keep appearing | As set for each pop-up |
| mtm_consent_removed | Remembers that you’ve turned visitor statistics off | 2 years |
Cloudflare also measures page speed and visits without using any cookies. If you arrive from a link in our newsletter, the link lets SendX recognise you as a subscriber, so the site can fill in or skip its sign-up form.
Turning statistics off
You can switch off WPMU DEV’s visitor statistics here. The setting applies to this browser on this device. You can also block or delete cookies in your browser’s settings, although the shop needs its essential cookies to work.
Visitor statistics on this browser: on
Your rights
You have the right to:
- see the personal information we hold about you;
- have anything wrong corrected;
- ask us to delete it;
- ask us to limit how we use it;
- object to how we use it, including stopping marketing at any time;
- receive a copy in a format you can take elsewhere;
- withdraw any consent you’ve given, at any time.
To use any of these rights, email [email protected]. We may ask you to confirm who you are first. We’ll reply within one month, and in almost every case it’s free. Some rights have limits: for example, we must keep order records for tax purposes even if you ask us to delete them.
Adults only
Dispenseree is for adults: you must be 18 or over to use this site or order from us. We don’t knowingly collect personal information from anyone under 18, and if we find we have, we delete it.
Complaints
If you’re unhappy with how we’ve handled your information, please tell us first at [email protected] and we’ll do our best to put it right. You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
We’ll update this page whenever the way we handle personal information changes, and change the date at the top. If a change affects you significantly, we’ll let you know directly where appropriate.