Privacy policy
1. Who We Are
This shop is operated by Marc Mortiboys Products Ltd, trading as The Dental Shaman. Our registered address is 11 Long Reach, West Horsley, Leatherhead, Surrey, KT24 6LZ, United Kingdom. Companies House registration number: 15866984.
We take your privacy seriously. This policy explains what personal data we collect, why we collect it, how we use it, and what rights you have. For any privacy-related queries, contact us at shop@thedentalshaman.com or via live chat on our shop.
2. What Data We Collect
When you visit or purchase from our shop, we may collect the following personal data:
Name, email address, phone number, and delivery address when you place an order
Payment information processed securely through Shopify Payments. We never store your full card details
Browsing behaviour, pages visited, and device information through cookies and analytics tools
Communications you send us via email or live chat
Account information if you create a customer account on our shop
Wholesale application details if you apply for a wholesale account
3. Why We Collect It and Our Legal Basis
We collect and use your personal data for the following purposes:
To process and fulfil your orders and send order confirmations and shipping updates. Legal basis: contract performance
To respond to your queries and provide customer support. Legal basis: contract performance and legitimate interests
To comply with our legal obligations including fraud prevention and consumer protection law. Legal basis: legal obligation
To send you marketing emails where you have opted in. Legal basis: consent. You can unsubscribe at any time
To improve our shop, products, and customer experience through analytics. Legal basis: legitimate interests
To manage wholesale accounts and business relationships. Legal basis: contract performance
4. How We Share Your Data
We do not sell your personal data. We share your data only where necessary with the following third parties:
Shopify — our ecommerce platform which hosts our shop and processes payments. Shopify is GDPR compliant and acts as a data processor on our behalf
Our fulfilment centre — we share your name and delivery address with our international fulfilment partner to dispatch your order
Shipping carriers — your name and address are shared with the relevant carrier to deliver your order
Google Analytics — we use Google Analytics to understand how customers use our shop. This involves cookies. You can opt out via your browser settings or our cookie consent tool
Meta (Facebook and Instagram) — we run advertising on Meta platforms. If you have consented to tracking cookies, Meta may receive anonymised data to help us reach relevant audiences
Email marketing platforms — if you have subscribed to our mailing list, your email address is stored with our email service provider
We require all third parties to handle your data securely and in accordance with applicable law.
5. Cookies
Our shop uses cookies to function properly and to improve your experience. Cookies are small files stored on your device. We use the following types:
Essential cookies — required for the shop to function. Cannot be disabled
Analytics cookies — help us understand how visitors use the shop. Only placed with your consent
Marketing cookies — used to show you relevant advertising. Only placed with your consent
When you first visit our shop you will be presented with a cookie consent banner. You can update your cookie preferences at any time through the settings on our shop.
6. Your Rights by Country
Depending on where you are located, you have specific rights regarding your personal data. Where local law provides stronger rights than those stated here, your local rights take precedence.
United Kingdom and European Union
Under the UK GDPR and EU GDPR you have the right to access, correct, delete, restrict, or port your personal data. You have the right to object to processing based on legitimate interests and the right to withdraw consent at any time. To exercise any of these rights contact us at shop@thedentalshaman.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office or your national supervisory authority in the EU.
United States
By 2025, over 20 states have enacted comprehensive privacy legislation. California residents have rights under the California Consumer Privacy Act (CCPA) including the right to know what personal data we hold, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal data. We honour these rights for residents of all applicable states.
Australia
Under the Privacy Act 1988 you have the right to access and correct your personal data. You may lodge a complaint with the Office of the Australian Information Commissioner.
Canada
Under PIPEDA and applicable provincial privacy legislation you have the right to access and correct your personal data and to withdraw consent. Quebec residents have additional rights under Law 25. Contact us at shop@thedentalshaman.com to exercise your rights.
All Other Customers
We will honour reasonable requests to access, correct, or delete your personal data regardless of your location. We align with the UN Guidelines for Consumer Protection and respect the privacy rights of all customers globally.
We will respond to all data rights requests within 30 days.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes set out in this policy. Order data is retained for a minimum of 6 years to comply with UK tax and accounting obligations. Marketing data is retained until you unsubscribe. You may request deletion of your data at any time subject to our legal retention obligations.
8. International Data Transfers
Our shop is operated from the United Kingdom. Your data may be transferred to and processed in countries outside the UK and EU, including our fulfilment centre in China and our service providers in the United States. Where we transfer data outside the UK or EU we ensure appropriate safeguards are in place in accordance with UK GDPR and EU GDPR requirements, including standard contractual clauses where applicable.
9. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Our shop runs on Shopify, which maintains industry-standard security certifications. Payment data is encrypted and processed securely. No method of transmission over the internet is 100% secure, but we take this responsibility seriously.
10. Children
Our shop is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data please contact us immediately and we will delete it.
11. Third Party Links
Our shop may contain links to third party websites. We are not responsible for the privacy practices of those websites and encourage you to read their individual privacy policies.
12. Changes to This Policy
We may update this privacy policy from time to time. The current version will always be published on shop.thedentalshaman.com with the effective date updated at the top. Continued use of our shop after any changes constitutes acceptance of the updated policy.
13. Contact Us
For any privacy-related questions, data rights requests, or complaints, please reach out via live chat on our shop as it is the fastest way to get a response. You can also contact us at shop@thedentalshaman.com. We aim to respond to all queries within 2 business days.
Last updated: June 2026