top of page
Reight-DIY-logo

Privacy Policy

Last updated: [DATE]
 

​

This Privacy Policy explains how we, Reight DIY, collect and use personal information when you visit our site or purchase from us. We are committed to protecting your privacy and complying with UK data-protection law (UK GDPR and Data Protection Act 2018).
 

  1. Who we are: 
    Reight DIY ([BUSINESS ADDRESS],Email: help@reightdiy.com is a limited company selling DIY kits online in the UK. We are the “data controller” responsible for your personal data.

  2. What data we collect:

    • Contact & identity data: Your name, email address, billing/delivery address, and phone number when you place an order or sign up for emails.

    • Order/payment data: Details of the products you order, quantities, prices, transaction references. We may also store payment details (last 4 digits of card, card type) but do not store full card numbers – payments are processed securely by [PAYMENT PROVIDER].

    • Communications: Record of your communications with us (emails, messages, support requests).

    • Website usage data: Technical data (IP address, browser type, device) and pages visited, collected via cookies or similar technologies (see Cookie Policy below).

    • Marketing data: If you opt into marketing, we collect your email preferences and the communications we send (and whether you click links).

    • Other: If you contact us via phone or social media, we may keep records of that communication.
       

  3. How we collect data:

    • Directly from you (when you place an order, create an account, subscribe to emails, or contact us).

    • Automatically via cookies and analytics when you browse the site (with your consent for non-essential cookies).

    • From third parties: for example, payment gateways (we receive your name and payment confirmation from [PAYMENT PROVIDER] after a transaction) and delivery services (we provide delivery details to courier services; they inform us when delivery is complete).
       

  4. Why we use your information: 
    We use your data for these purposes:

    • To process and fulfill your orders (payment, shipping, returns).

    • To communicate with you about your order (confirmation, shipping notifications, support).

    • To provide customer service and respond to enquiries or complaints.

    • To send marketing messages (only if you’ve opted in) about similar products or special offers. You can opt out at any time.

    • To improve our website and services (we use analytics to see what products or pages are popular, which helps us stock and design better kits).

    • To comply with legal obligations (e.g. retain transaction records for tax purposes, respond to lawful requests).
       

  5. Lawful basis for processing: 
    We rely on these legal bases:

    • Contract: We need to process your order and payments to fulfill the sales contract with you.

    • Consent: For marketing emails and non-essential cookies, we will obtain your consent. You can withdraw consent anytime.

    • Legal obligations: We must keep certain records (sales, accounts) for tax and consumer law.

    • Legitimate interests: For improving our site, preventing fraud, or marketing to our existing customers (only where not overridden by your rights).
       

  6. Payment information: 
    We use third-party payment processors ([e.g. PayPal, Stripe]) to handle card transactions. These providers process your card data under their own PCI-compliant systems; we do not keep your full card details on our servers.
     

  7. Sharing data with third parties: 
    We do not sell your personal data. We may share necessary data with trusted third parties only as follows:

    • Website and hosting: Wix (our site platform) will have access to technical website data and your account info for site management.

    • Payment processors: [PayPal, Stripe, etc.] receive your payment details and address to process your order.

    • Delivery services: Couriers (e.g. Royal Mail, DPD, etc.) receive your name, address and phone number to ship your order.

    • Analytics and advertising: We may use Google Analytics or similar to analyze site usage (IP and behaviour data). If enabled, we may also use Facebook Pixel or Google Ads (they receive anonymized data for ad tracking, e.g. a hashed email or cookie ID).

    • Email marketing: We use [e.g. Mailchimp, Klaviyo] for newsletters and promotions. If you subscribed, we share your email with them to send emails.

    • Legal authorities: We will share personal data with law enforcement or regulators if legally required (e.g. police or UK trading standards).

    • Professional advisors: We may share data with our accountants or lawyers as needed to manage accounts or legal compliance.

    All partners that process data on our behalf are required to keep it secure and use it only for agreed purposes.
     

  8. Data retention: 
    We keep your personal data only as long as needed. Generally:

    • Order and transaction records: 6 years (for VAT and HMRC accounting purposes).

    • Marketing consent and preferences: until you unsubscribe or request deletion.

    • Website account info: until you delete your account or we close it.

    • Inquiry correspondence: up to 3 years unless longer is required.

    After the retention period, we will securely delete or anonymize your data. (See ICO guidance: data should be “kept for no longer than is necessary”.)
     

  9. Cookies: 
    Our site uses cookies (see Cookie Policy below). Strictly necessary cookies (e.g. session IDs, shopping cart) are essential for the site to work and are always enabled. For analytics or marketing cookies, we use a cookie-consent banner to obtain your permission. You can change your cookie settings at any time via our banner or browser settings.
     

  10. Your rights:
    Under UK GDPR, you have the right to:

  • Be informed: You have the right to be told how your data is used (that’s what this policy does).

  • Access: Request a copy of the personal data we hold about you.

  • Rectification: Ask us to correct any inaccurate or incomplete data.

  • Erasure: Request we delete your personal data (sometimes called “right to be forgotten”), subject to legal retention obligations.

  • Restrict processing: Ask us to pause processing your data (e.g. during a dispute or while we correct data).

  • Data portability: Request your data in a usable format so you can transfer it elsewhere (applies to data you provided).

  • Object: Object to our processing in certain cases (e.g. direct marketing or legitimate interests basis).

Many of these rights are subject to exceptions. To exercise any right, email [BUSINESS EMAIL] with your request. We will verify your identity and respond within 1 month (as required by law).
 

  1. Complaints: If you have concerns about our data use, please contact us first. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your data properly.
     

  2. Children’s data: Our site is not intended for children under 16. We do not knowingly collect data from children. If a parent believes we have any data about their child, they can request deletion.
     

  3. Third-party links: Our site may contain links to third-party sites (e.g. our social media or manufacturer pages). This Privacy Policy does not cover those sites. Please read their own privacy policies when you visit them.
     

  4. International transfers: We operate in the UK. If any data is transferred outside the UK (for example to an analytics provider), it will only go to countries with adequate data protection (or via contracts). We use Google Analytics (data may go to the US under EU-US Privacy Shield frameworks).
     

  5. Changes to this policy: We may update this Privacy Policy to reflect changes in our practices or the law. The latest version (with the updated date) will always be on our website.

Contact us: For privacy questions, email [BUSINESS EMAIL] or write to: Reight DIY, [BUSINESS ADDRESS].

bottom of page