1. What Personal Data We Collect

When you browse or purchase from TheDIYWayy, we may collect the following categories of personal information:

• Identity & Contact Data: Your name, email address, and phone number
• Delivery & Billing Data: Shipping and billing address (including postcode and country)
• Payment Data: Payment details processed securely via our payment partner(s) — we do not store raw card data on our servers
• Technical & Usage Data: IP address, browser type, device information, pages viewed, referring URLs, and time spent on site
• Cookie & Tracking Data: Data collected via cookies and similar technologies
• Communications Data: Any messages or enquiries you send to our support team

2. Why We Collect It & How We Use It

We collect your data only for legitimate purposes directly related to providing you with a smooth shopping experience:

• To process and fulfil your orders
• To arrange shipping and calculate delivery
• To communicate order confirmations, shipping updates, and returns information
• To respond to customer enquiries
• To improve our website and product ranges based on analytics data
• To comply with legal and financial obligations

3. Third-Party Services We Share Data With

To deliver your order from cart to doorstep, we share necessary data with trusted third parties:

• Our e-commerce platform (WooCommerce) and hosting provider
• Shipping carriers — for order fulfilment and delivery

We do not sell your personal data to third parties for their own marketing purposes.

4. Data Security

Your data is protected using industry-standard security measures, including SSL/TLS encryption across our website and strict access controls. Payment details are handled exclusively by our certified payment processor(s) and are never stored on TheDIYWayy servers.

5. Data Retention

We retain your personal data for as long as necessary to fulfil your order, comply with legal obligations (typically up to 7 years for financial records under UK law), and resolve any disputes. Marketing preferences and account data are retained until you request deletion or withdraw consent.

6. Your Rights Under GDPR (UK & EU Customers)

If you are based in the UK or European Union, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Ask us to correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or direct marketing
• Right to Restrict Processing: Ask us to limit how we use your data in certain circumstances

To exercise any of these rights, please contact us using the details at the bottom of this page.

7. Your Rights Under CCPA (California Customers)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions
• Right to Opt-Out of Sale: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

8. Children's Privacy

TheDIYWayy is intended for adults purchasing toys and gifts on behalf of themselves or others. We do not knowingly collect personal data from children under the age of 13 (or 16 where required by applicable law). If you believe a child has provided us with personal information, please contact us immediately so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Any updates will be posted on this page with a revised date. We encourage you to review this page periodically.

10. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have a privacy concern, please don't hesitate to get in touch.