Privacy policy

Last updated: 13 October 2026

This policy explains how DIYUK LTD uses your personal data when you visit our website or buy from us, and the rights you have.

1. Who we are

DIYUK LTD is the controller of your personal data. We are a company registered in England and Wales (company number 14554877). Registered office: Lancaster House, Amy Johnson Way, Blackpool, FY4 2RP, United Kingdom. For any privacy question or request, email info@diyuk.co.

2. The data we collect

Contact and order details: your name, email address, phone number, delivery and billing address, the items you buy and your order history.
Payment details: payments are processed by Shopify and the payment providers shown at checkout.
Account details: if you create an account, your login details and saved addresses.
Messages: what you write to us by email or through our website.
Device and browsing data: your IP address, browser and device type, and how you use our website, collected through cookies and similar technologies.
Marketing preferences: whether you have signed up for our emails.

3. Why we use your data and our legal basis

Purpose	Legal basis (UK GDPR)
Processing, delivering and supporting your order, including returns and refunds	Performance of a contract
Keeping accounting and tax records	Legal obligation
Running and securing our website and preventing fraud	Legitimate interests
Answering your messages	Legitimate interests, or performance of a contract when it is about your order
Sending marketing emails	Consent (you can unsubscribe at any time)
Analytics and advertising cookies	Consent

4. Who we share your data with

Shopify, which hosts our shop and checkout, and the payment providers shown at checkout.
Delivery companies (Royal Mail and Evri), so they can deliver your order.
Service providers who help us run our business, such as our order management and invoicing systems.
Advertising and analytics partners (Google, Meta, TikTok and Snapchat), only where you have given consent to cookies.
Authorities, where the law requires it.

5. International transfers

Some of our service providers, including Shopify, may process your data outside the UK. Where they do, the transfer is protected by safeguards recognised under UK law, such as standard contractual clauses with the UK International Data Transfer Addendum.

6. How long we keep your data

Order, payment and invoice records: 6 years from the end of the financial year they relate to, as UK law requires.
Account details: while your account is open.
Marketing preferences: until you unsubscribe.
Messages: as long as needed to deal with your enquiry, and with the order record where they relate to an order.

7. Your rights

You have the right to access your data, to have it corrected or erased, to restrict or object to its use, to data portability, and to withdraw consent at any time. You can always object to marketing. To use any of these rights, email info@diyuk.co. We will respond without undue delay and within the time limits set by law.

8. Cookies

We use cookies that are needed for our shop to work, such as your basket and checkout. With your consent, we also use analytics and advertising cookies. You can change your choice at any time through the cookie settings on our website or in your browser.

9. Complaints

If you are unhappy with how we use your data, please contact us first. You also have the right to complain to the UK data protection regulator: ico.org.uk/make-a-complaint.

10. Changes to this policy

We may update this policy. The date at the top shows when it was last changed.