Friends in the Dungeon Ltd, a company registered in England and Wales, company number 17079970. Registered office: 82A James Carter Road, Mildenhall, IP28 7DE.
We're the data controller for the information described here. Email [email protected] with anything about your data.
When you sign up on this site, we record your email address, the date and time you signed up, the page you signed up from, and the wording you agreed to, so we have a record of your consent. We also note if and when you unsubscribe.
If you tick the box at checkout to get our emails, Shopify records your choice and we add you to the same list on the same terms.
We use your email address to send you emails about news and releases from Friends in the Dungeon. We don't use it for anything else, and we don't add you to anyone else's list.
When we send an email, our email service records whether you open it and which links you click. We use this to see what's working. We don't combine it with any other information about you.
The signup form has a hidden field that catches automated spam. It doesn't collect anything about you.
Our lawful basis is your consent. You can withdraw it at any time using the unsubscribe link in every email, or by emailing us. Unsubscribing doesn't affect any order you've placed.
Our shop runs on Shopify. At checkout, Shopify collects your name, email address, delivery and billing address, phone number if you give one, and your order details on our behalf. Payments are processed by Shopify and its payment providers. We never see or store your card details.
We use this to take payment, send your order, update you on delivery, and handle returns and questions. Our lawful basis is the contract between us, and for keeping records, our legal obligations.
We share only what each service needs to do its job.
Shopify runs our shop, checkout, payments and order records. Royal Mail receives your name and address, and sometimes your email or phone number, to deliver your order. For international orders, carriers and customs authorities receive the customs declaration, including your name, address and what's in the parcel. Where we pay import duties in advance, these details are shared for that too.
Our signup list is stored in a restricted-access Google Sheet, so Google processes it on our behalf. Resend stores your email address and sends our mailing list emails.
Cloudflare protects and speeds up this site, IONOS hosts it, and Adobe Fonts serves its typefaces, so your browser connects to Adobe when a page loads.
We don't sell your data or share it for advertising.
Some of these providers store or process data outside the UK, including in the US. Where they do, your data is protected by UK adequacy regulations or the contractual safeguards in their terms.
Mailing list: until you unsubscribe. After that, we keep your email address and the dates you signed up and unsubscribed, so we can show that you consented and that we stopped emailing you. You can ask us to delete that record too. If we close the list, we delete it.
Orders: six years from the end of the financial year in which you ordered, as required for tax and accounting.
You can ask for a copy of the data we hold about you, or ask us to correct it, delete it, limit how we use it, or send it to you in a portable format. You can also object to how we use it, and withdraw consent at any time. Email [email protected] and we'll reply within one month.
We don't use analytics, advertising or tracking cookies on this site.
Your cart is saved in your browser's local storage so it's still there when you come back. The cart needs this to work, and it isn't shared with anyone. Clearing your browser data removes it.
Cloudflare may set a cookie to tell people from bots and keep the site secure. Shopify sets its own cookies on checkout pages, which are needed to complete a purchase.
If we ever add analytics or tracking to this site, we'll ask your permission first and update this page.
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
We'll post any changes on this page. Last updated 31 October 2026.