Last updated: 6 August 2026

1. ABOUT THIS PRIVACY POLICY

This Privacy Policy explains how Dragon City (“Dragon City”, “we”, “us” or “our”), collects and uses personal information when you visit dragoncitybham.co.uk, contact us, create an account, join our loyalty or referral programme, buy or receive a gift card, or place an order.

We are the controller of the personal information described in this policy.

2. OUR CONTACT DETAILS

Dragon City
186 School Road, Hall Green, Birmingham B28 8PA
Email: dragoncity.bham@gmail.com
Telephone: 0121 702 2474

3. INFORMATION WE COLLECT

Depending on how you use our services, we may collect:

• identity and contact details, such as your name, email address, telephone number, delivery address and postcode;
• order details, such as items, options, delivery or collection method, order times, instructions, order history, complaints and refunds;
• account information, sign-in details, preferences and communications;
• loyalty and referral information, including points, redemptions, referral activity, birthday information if you choose to provide it, and suspected misuse;
• gift-card details, including purchaser and recipient information, messages, value, balance and redemption history;
• payment and transaction details, such as payment status, method, amount and payment-provider reference. We do not receive your complete card number;
• information you give us in a contact form, email, telephone call, review or other communication;
• allergy, intolerance or other health-related information that you choose to give us so we can assess an order request;
• technical and usage information, such as IP address, device and browser type, approximate location, cookie identifiers, pages viewed, referral source and security logs; and
• information supplied by Wix, our payment provider, delivery or mapping services, and other service providers used to operate the website.

Please provide accurate information and tell us if important details change.

4. HOW AND WHY WE USE INFORMATION

We use personal information to:

• provide the website, basket, checkout, delivery, collection and customer support;
• accept, prepare, fulfil, confirm, change and refund orders;
• contact you about an order, enquiry, complaint, safety issue or service message;
• create and administer accounts, loyalty points, referrals and gift cards;
• check delivery eligibility, calculate charges and help locate an address;
• investigate errors, fraud, chargebacks, misuse, complaints and food-safety concerns;
• keep accounting, tax, transaction and compliance records;
• secure, troubleshoot and improve the website and ordering experience;
• understand website use where analytics consent is required and obtained; and
• send marketing where you have consented or where the law otherwise permits it, with an option to unsubscribe.

Our lawful bases under UK data protection law may include:

• contract — to take steps at your request and provide an accepted order or service;
• legal obligation — to meet tax, accounting, food-safety, consumer-protection and other legal duties;
• legitimate interests — to run and improve our business, prevent fraud, secure our services, respond to customers and keep suitable records, where those interests are not overridden by your rights; and
• consent — for optional marketing, non-essential cookies and other processing where consent is required.

5. ALLERGY AND HEALTH INFORMATION

Information about an allergy, intolerance, coeliac disease or health condition may be special category data. Where you voluntarily give us this information so we can discuss or assess an order, we rely on your explicit consent where required.

You can withdraw that consent, but we may then be unable to assess or fulfil the requested order safely. We use this information only for the relevant order, safety discussion, complaint, incident investigation and related legal record-keeping. Do not put unnecessary medical information in an order note.

6. MARKETING

We may send promotional messages only where we have a valid legal basis. You can unsubscribe using the link in a message or by contacting us. Service messages about an order, account, gift card or safety matter are not marketing and may still be sent when necessary.

7. WHO WE SHARE INFORMATION WITH

We share personal information only where reasonably necessary with:

• Wix.com and its group companies, which host the website and provide ordering, accounts, loyalty, referral, gift-card and contact-form services;
• payment providers, banks and fraud-prevention services;
• delivery personnel and service providers involved in fulfilling an order;
• IT, hosting, analytics, communications, mapping and professional advisers;
• regulators, law-enforcement bodies, courts, insurers or advisers where required or necessary to protect legal rights, safety or prevent fraud; and
• a buyer or successor if our business is reorganised or sold, subject to appropriate protections.

We do not sell your personal information.

Third-party features such as Google Maps or social-media content may process information under their own privacy policies.

8. INTERNATIONAL TRANSFERS

Some providers, including Wix and its service providers, may process information outside the United Kingdom. Where UK data protection law requires safeguards, we expect the relevant provider to use an approved transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement or an approved addendum to standard contractual clauses.

9. HOW LONG WE KEEP INFORMATION

We keep personal information only for as long as reasonably needed for the purpose collected, including legal, accounting, food-safety, fraud-prevention and dispute requirements.

Typical periods are:

• general enquiries — normally up to 12 months after the matter closes;
• order, payment, refund and accounting records — normally up to 6 years after the relevant financial year or transaction, where needed for tax or legal records;
• account, loyalty and gift-card records — while the account, programme or balance remains active, then for an appropriate period for disputes, fraud prevention and legal obligations;
• allergy or health-related notes — for the relevant order and any related complaint, incident or legal retention period, with access limited as appropriate;
• marketing records — until you withdraw consent or object, plus a minimal suppression record so we can respect your choice; and
• cookie and technical data — according to the purpose and duration shown in our Cookie Policy or cookie settings.

We may keep information longer where a complaint, legal claim, regulatory request or fraud investigation requires it.

10. COOKIES

Our Cookie Policy explains the cookies and similar technologies used on the website. Where consent is required, non-essential cookies should not be used until you make a choice. You can change that choice through the website’s Cookie Settings control.

11. YOUR RIGHTS

Depending on the circumstances, you may have the right to:

• ask for access to your personal information;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information;
• ask us to restrict processing;
• object to processing based on legitimate interests or to direct marketing;
• receive certain information in a portable format;
• withdraw consent at any time, without affecting earlier lawful processing; and
• complain to the Information Commissioner’s Office.

These rights are not absolute. We may need to verify your identity and may retain information where the law allows or requires it. To exercise a right, contact dragoncity.bham@gmail.com.

You can complain to the Information Commissioner’s Office at ico.org.uk or by calling 0303 123 1113. We would appreciate the opportunity to address your concern first.

12. SECURITY AND CHILDREN

We use reasonable organisational and technical measures and trusted service providers to protect personal information. No internet service is completely secure, so please use a strong password and do not share account or gift-card credentials.

Our online ordering service is not directed at children. If a child uses the service, a parent or guardian should supervise the order and provide any necessary personal information.

13. CHANGES TO THIS POLICY

We may update this policy when our services, providers or legal duties change. The latest version and review date will appear on this page.

Questions about this policy can be sent to dragoncity.bham@gmail.com or raised by calling 0121 702 2474.