Privacy policy
PRIVACY POLICY
Last updated: 2 September 2026
This covers what we collect when you use chromedrxp.com, why we have it, and what you can do about it.
The site is operated by Chrome Drxp.
What we collect
When you order: your name, email, delivery address, billing address, phone number if you give one, and what you bought.
We never see your card. Payment details go straight to the payment provider. They do not reach us and we could not store them if we wanted to.
When you just browse: your IP address, roughly where in the world that is, your browser and device, which pages you looked at, how long you stayed, and what you came from.
If you sign up: your email, and whether you open what we send.
If you email us or message us on social: whatever is in the message.
Why we have it
- to take, pack, and send your order
- to email you about that order
- to answer you when you contact us
- to spot fraud and chargebacks
- to see which pieces people actually look at, so we buy better
- to send you things, only if you asked us to
Who it goes to
We do not sell your information for money. Not to anyone, ever.
It reaches these, and only for the reasons above:
- Shopify, which runs the shop and stores the order data
- payment providers, to take the payment and handle disputes
- our suppliers and fulfilment partners, who receive your name and delivery address so the parcel can be packed and sent. They get what is needed to ship and nothing else.
- carriers, to deliver it and to give you tracking
- email and analytics tools we use to run the shop
- advertising platforms, where we run ads
- anyone we are legally required to give it to
On advertising, plainly: we use advertising platforms, and the tracking they place on the site can pass information about your visit back to them. California law counts that as selling or sharing personal information even though no money changes hands for it. If you would rather we did not, email us and we will switch it off for you, or set the Global Privacy Control signal in your browser and we will honour it.
Some of these are outside Australia. Our suppliers are in China and our order data sits on Shopify's infrastructure, largely in the United States. Your name and delivery address reach China so your parcel can be packed and sent. Ordering from us means agreeing to that, because there is no way to ship you the item without it.
Cookies
The site uses cookies. Some are necessary and the shop cannot work without them, cart and checkout in particular. The rest are analytics and advertising.
Your browser can block or clear them. Blocking the necessary ones will break checkout.
How long we keep it
Order records for 7 years, because tax law requires it.
Marketing contacts until you unsubscribe.
Browsing analytics for no longer than 24 months.
Your rights
Email chromedrxpshop@gmail.com and you can:
- ask what we hold about you
- get a copy of it
- have anything wrong corrected
- have it deleted, except order records we are legally required to keep
- withdraw consent to marketing at any time
- unsubscribe from any email using the link at its bottom
We will respond within 30 days.
If you are in Australia and you are not happy with how we have handled your information, tell us first and we will look into it and reply within 30 days. If you are still not satisfied, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.
If you are in the EU or the UK, the GDPR gives you these rights plus the right to object to processing, to restrict it, and to take your data elsewhere in a portable format. Our legal bases are contract, for anything needed to fill your order; consent, for marketing; and legitimate interests, for fraud prevention and understanding how the shop is used. You can complain to your national data protection authority.
If you are in California, you can ask what has been collected about you in the past 12 months, ask for it to be corrected, and ask for it to be deleted. You can also tell us to stop sharing your information with advertising platforms, as set out above.
Children
The shop is not for under 16s and we do not knowingly collect their information. If you think we have, email us and it will be deleted.
Security
Shopify runs the shop on encrypted connections and is PCI compliant. That is the standard payment card processing is held to.
No system is completely secure and nobody honest will tell you otherwise. If a breach ever affects your information, we will tell you and the relevant authority, as the law requires.
Changes
If this policy changes materially we will post the new version here with a new date at the top.
Contact
chromedrxpshop@gmail.com