Privacy Policy

We collect information you give us directly and information generated automatically when you use the site. Specifically:

We use the information we collect only for the purposes listed below. We do not sell your personal data to third parties.

• Fulfil your orders. We pass your name, shipping address, and order details to our supplier partners (CJ Dropshipping, AliExpress, or eBay marketplace sellers) so they can pick, pack, and ship your items directly to you.
• Process payments. Your payment details are transmitted securely to Payoneer to authorise and complete the transaction. We retain the resulting reference number to reconcile orders.
• Send transactional emails. We send order confirmations, shipping notifications, and tracking updates to the email address you provided. These are necessary for the service and cannot be opted out of while an order is active.
• Send marketing emails (with consent only). If you subscribe to our newsletter, we send new arrivals, deals, and drop alerts. You can unsubscribe at any time using the link in any email.
• Improve the site. Aggregate, anonymised analytics data (pages visited, click paths, device types) help us identify what is working and what needs fixing. No individually identifiable data is used for this purpose.
• Prevent fraud and abuse. IP addresses and order patterns may be reviewed to detect and block fraudulent orders or unauthorised account access.
• Comply with legal obligations. We may retain or disclose your information where required by applicable law, court order, or government authority.

We share your data only with the third parties required to operate our service. Each recipient is bound by contractual obligations to protect your data and use it only for the purpose stated.

We may also disclose information if required by law, or to protect the rights, property, or safety of Shop Drawer, our customers, or others.

Cookies are small files stored in your browser. We use them to keep your shopping cart between visits, remember your preferences, and understand how people use the site at an aggregate level.

Essential cookies

Required for the site to function. These maintain your session and shopping cart state. They cannot be disabled without breaking the checkout flow.

Preference cookies

Store your display preferences (e.g. sort order, previously viewed categories) so you do not have to reset them on each visit.

Analytics cookies

Track aggregate usage data — which pages are visited most, where visitors drop off. The data is anonymised and used only to improve the site.

You can control or delete cookies at any time through your browser settings. Note that disabling essential cookies will prevent the shopping cart and checkout from working correctly. To opt out of analytics tracking, most browsers support a “Do Not Track” signal which we honour.

We keep your information only as long as necessary for the purposes described above or as required by law.

Order records

Retained for seven years to comply with applicable tax and accounting obligations.

Account information

Retained for as long as your account is active. If you close your account, we delete your personal data within 90 days, except where a legal retention obligation applies.

Email marketing

Your email address remains on our list until you unsubscribe or ask us to remove it.

Server log data

Retained for up to 90 days for security and diagnostic purposes, then automatically deleted.

Support correspondence

Retained for two years after the last interaction, in case of follow-up queries.

Depending on where you live, you have certain rights over your personal data. We will respond to all verifiable requests within 30 days. To exercise any of these rights, email support@storeroyce.com with the subject line “Privacy Request” and describe what you need.

• Access. You can request a copy of the personal information we hold about you.
• Correction. If any information we hold is inaccurate or incomplete, you can ask us to correct it.
• Deletion. You can ask us to delete your personal data. We will honour this request unless we are required to retain certain records by law (for example, order records for tax purposes). Deletion of your account does not erase historical order data within the mandatory retention period.
• Portability. You can request a machine-readable export of your data so you can transfer it to another service.
• Opt out of marketing. Click "Unsubscribe" in any marketing email, or email us, and we will remove you from our mailing list within 48 hours.
• Restriction. In certain circumstances you can ask us to restrict processing of your data — for example, while a correction request is pending.

We use industry-standard security measures to protect your data in transit and at rest. All data transferred between your browser and our servers is encrypted using TLS (HTTPS). Payment data is never stored on our servers — it passes directly to Payoneer over an encrypted connection.

No method of transmission or storage is 100% secure. If you suspect unauthorised access to your account, contact us immediately at support@storeroyce.com.

Product pages on Shop Drawer may contain links to supplier sites (Amazon, eBay, AliExpress) and other external resources. This Privacy Policy applies only to storeroyce.com. When you follow a link to another site, that site's own privacy policy governs how your information is handled. We are not responsible for the privacy practices of third-party sites.

Shop Drawer is not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of the page. For material changes, we will notify you by email (if we have your address) or by displaying a notice on the site. Your continued use of Shop Drawer after any update constitutes acceptance of the revised policy.

Questions, requests, or concerns about this Privacy Policy should be directed to: