Privacy Policy

Effective from: 01 April 2025
Business Name: Ditto Designs
Owner: Kerry Roberts
Website: www.dittodesigns.co.uk
Contact Email: orders@dittodesigns.co.uk

By using our website or placing an order with us, you agree to the terms of this policy.

We may collect and process the following types of personal data:

• Contact information: your name, email address, phone number, and delivery address.
   
• Order details: products purchased, personalisation details, order dates, and payment confirmations.
   
• Payment information: handled securely by PayPal; we do not store or have access to your full card details.
   
• Communication records: messages or enquiries sent via our website, email, Facebook, or Instagram.
   
• Marketing preferences: whether you wish to receive updates or newsletters.
   

We collect personal data when you:

• Place an order through our website hosted by GoDaddy.
   
• Contact us through a form, email, or social media message.
   
• Sign up to our newsletter or marketing updates.
   
• Engage with us at events or markets and provide your details voluntarily.
   

We use your personal data to:

• Process and fulfil your orders, including delivery and customer support.
   
• Respond to enquiries or messages you send us.
   
• Personalise and create your requested products.
   
• Maintain business records and comply with legal obligations.
   
• Send occasional updates or offers (only if you have opted in).
   

We will never sell or share your data with third parties for marketing purposes.

We process your information under the following lawful bases, as defined by the UK GDPR:

• Contract: to fulfil orders or respond to customer requests.
   
• Consent: when you choose to receive marketing communications.
   
• Legal obligation: to comply with tax or business record-keeping requirements.
   
• Legitimate interest: to improve our services and maintain customer relationships.
   

We may share limited information with trusted third parties, such as:

• Service providers: GoDaddy (website hosting) and PayPal (payment processing).
   
• Delivery partners: postal or courier services to deliver your order.
   

All third parties are required to handle your data securely and only use it for the purpose of providing their services.

We store your personal data securely on password-protected systems.
Our website and email providers use secure (HTTPS) connections.
Access to your information is limited to individuals who need it to complete your order or provide support.

We will keep your personal data only for as long as necessary to fulfil the purposes it was collected for, including any legal, accounting, or reporting requirements.
Typically, order records are retained for up to six years to comply with UK tax law.

Under UK data protection law, you have the right to:

• Request a copy of the personal data we hold about you.
   
• Ask us to correct or delete your information.
   
• Withdraw consent for marketing communications at any time.
   
• Object to how your data is being used.
   

To exercise any of these rights, please email orders@dittodesigns.co.uk.

Our website may use cookies to improve your browsing experience and gather anonymous data about site performance.
You can adjust your browser settings to block cookies or alert you when cookies are being used.

We may update this Privacy Policy from time to time. Any changes will be posted on this page, with the revised date shown at the top.

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at:
📧 orders@dittodesigns.co.uk
🌐 www.dittodesigns.co.uk