Privacy policy

Last updated: 20 October 2026

This Privacy Policy explains how Dr.YUU collects, uses and shares personal information when you visit our UK online store, buy products, create an account or contact us. The store is powered by Shopify. It is intended exclusively for adults aged 18 and over.

1. Who is responsible and how to contact us

HUANQU TECH INTERNATIONAL LIMITED, trading as Dr.YUU, is the controller of personal information processed for our store's own purposes. Email service-uk@dryuu.com for order support, return instructions, privacy enquiries or rights requests. Please include your order number for order-related enquiries.

Registered address and principal place of business: RM D, 13/F, SUN FAI COMM CENTRE, 576 RECLAMATION ST, MONG KOK, HONG KONG. This is not a parcel-return address. For returns, request instructions from customer service first.

2. Information we collect and its sources

  • Information you provide: your name, email, telephone number, billing and delivery addresses, account details and preferences, order information, and messages or return requests you send us.
  • Payment and transaction information: the items purchased or returned, amounts, payment method, payment status and references. Payment providers process the card or payment-account details needed to complete payment under their own privacy notices.
  • Device and usage information: IP address, browser and device details, pages or products viewed, referral information, approximate location derived from IP, timestamps and interactions with our store. These can be collected through cookies, logs and similar technologies, subject to applicable consent requirements.
  • Information from service providers: payment confirmations, delivery updates, fraud-prevention signals and other information needed to operate the store and fulfil orders.

Providing information needed for payment, delivery or an enquiry allows us to process it; without required details we may be unable to fulfil your order or respond. Optional marketing choices are separate from purchasing.

3. Why we use information and our legal bases

  • Contract: to accept and fulfil orders, process payment, arrange delivery from China to the UK, manage accounts where applicable, communicate about orders and handle cancellations, returns and after-sales support.
  • Legal obligation: to keep required accounting and tax records, comply with consumer law and respond to valid legal requests.
  • Legitimate interests: to maintain and secure the store, prevent fraud and misuse, resolve disputes, answer enquiries and improve service where these interests are not overridden by your rights. Where a specific activity requires consent, we rely on consent instead.
  • Consent: for non-essential cookies and similar technologies, and marketing where required. You may withdraw consent at any time without affecting processing already lawfully carried out.

We use order information to provide the products and support you request. Please do not include unnecessary sensitive information or intimate images in enquiries. If information reveals special-category data, any processing must also meet an applicable additional legal condition; it is not authorised simply by a general marketing consent.

4. Cookies and marketing choices

Essential cookies support functions such as the basket, checkout, security and remembering privacy preferences. Our Shopify cookie banner is configured for UK visitors. Use the banner and any cookie-preference control offered by the store to accept, reject or change optional categories. You can also manage cookies in your browser; blocking essential cookies may affect store functions.

Where analytics or advertising technologies are used, optional storage or access to your device is subject to consent as required by UK law. We do not treat continued browsing alone as consent. You can unsubscribe from promotional emails using their unsubscribe link or contact us. Essential order and service messages may still be sent. Withdrawing marketing consent does not affect your purchase or statutory rights.

5. Who receives information

We share information needed for the relevant task with Shopify and service providers involved in hosting, payment processing, customer support, fraud prevention, storage, fulfilment and delivery. Because orders ship from China, fulfilment partners and carriers may receive delivery and order details needed to send your parcel. We may also disclose information to advisers or authorities where legally required, to protect legal rights, or in a business reorganisation subject to applicable safeguards.

Shopify: Shopify hosts this store and processes information to provide and improve its services. Shopify Network Intelligence is enabled for this store. This can involve Shopify combining information about interactions with our store with information from other merchants and Shopify to support features such as personalisation and advertising, subject to applicable privacy choices and law. For purposes where Shopify acts as an independent controller, Shopify is responsible for its own processing and associated rights requests. Read the Shopify Consumer Privacy Policy and use the Shopify Privacy Portal for more information and available choices.

Where you follow a third-party link or choose a third-party payment service, that provider's own privacy notice also applies.

6. International transfers

Our operations and service providers may process information outside the UK, including in Hong Kong, China and the United States. Shopify identifies the United States as this store's customer-data hosting location. Where UK data-transfer rules apply, transfers require an applicable legal basis and safeguards, such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, as appropriate. Contact us for information about safeguards applicable to your data.

7. Retention and security

We keep personal information for as long as necessary for its purpose, taking account of order fulfilment, account use, customer support, statutory accounting and tax requirements, fraud prevention and legal claims. Different records may need different retention periods. When information is no longer needed, it should be deleted or anonymised in accordance with applicable requirements. You may request information about the retention criteria relevant to your records.

We use appropriate technical and organisational measures to protect personal information. No system is completely secure. Avoid sending card numbers, passwords or unnecessary sensitive details in customer-service messages.

8. Your UK privacy rights

Subject to the conditions and exceptions in applicable law, you may request access to your information, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests and object to direct marketing at any time. Where processing relies on consent, you may withdraw it. You also have rights relating to solely automated decisions that have legal or similarly significant effects, where applicable.

Contact us using the details above to exercise your rights. We may need proportionate information to verify identity, but please do not send identity documents unless requested through an appropriate channel. We normally respond within one month; where a lawful extension or exception applies, we will explain it. Some information may need to be retained to fulfil legal obligations or establish, exercise or defend legal claims.

You can raise a concern with us and you have the right to complain to the UK's Information Commissioner's Office at ico.org.uk/make-a-complaint. You do not have to contact us first to exercise that right.

9. Adults only

Our website and products are not intended for anyone under 18. We do not knowingly collect children's personal information. If you believe a person under 18 has provided information, contact us so we can investigate and take appropriate steps, including deletion where required.

10. Updates

We may update this notice as our practices or legal requirements change. The latest version and update date will appear here, with additional notice where required. A revised privacy notice does not by itself replace consent where fresh consent is legally required.