1. Introduction

Dirobee Ltd (company number 12829161), trading as Dirobee ("we", "us", "our"), is committed to protecting your privacy. This policy explains how we collect, use, store, and share your personal data when you visit www.dirobee.com or place an order with us. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our registered office is at 15b Fen End, Cambridge, Cambridgeshire, CB24 5NE.

2. What Information We Collect

We may collect the following personal data: your name, email address, postal address, telephone number, payment details (processed securely by our payment provider), order history and transaction details, information about how you use our website (including your IP address, browser type, and pages visited), and any other information you choose to provide when contacting us.

3. How We Use Your Information

We use your personal data for the following purposes: to process and fulfil your orders, to communicate with you about your order or any enquiries, to comply with our legal and regulatory obligations, to improve our website and customer experience, and, where you have given consent, to send you marketing communications about our products and offers.

4. Legal Basis for Processing

We process your personal data on the following legal bases: performance of a contract (to process your orders and deliver your goods), legal obligation (to comply with tax, consumer protection, and other legal requirements), legitimate interests (to improve our services and prevent fraud), and consent (for marketing communications, which you can withdraw at any time).

5. Sharing Your Information

We may share your personal data with the following third parties: Royal Mail, for the purpose of delivering your order; our payment processor, for secure payment handling; HMRC or other regulatory bodies, where required by law. We will never sell your personal data to any third party.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected. Order records are kept for a minimum of six years in line with HMRC requirements. If you have an account with us, your data will be retained until you request its deletion.

7. Your Rights

Under UK GDPR, you have the right to: access the personal data we hold about you, request correction of inaccurate data, request deletion of your data (subject to legal obligations), restrict or object to processing of your data, request portability of your data, and withdraw consent to marketing at any time. To exercise any of these rights, please contact us by email at sales@dirobee.com.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or destruction. Payment transactions are encrypted and handled by our secure payment provider. We do not store your full payment card details.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions or concerns about this privacy policy or how we handle your data, please contact us by email at sales@dirobee.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.