Privacy Policy
Privacy Policy
We believe in being open about how we handle your data. Here's exactly what we collect, why we collect it, and how we keep it safe.
At DiMauro, we are committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or make a purchase with us. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our site, you agree to the terms of this policy.
Who We Are
The data controller responsible for your personal data is:
DiMauro (sole trader)
Office 10176, 321-323 High Road, Chadwell Heath, Essex, RM6 6AX, United Kingdom
DiMauro is not VAT registered. As a small business, we may be exempt from ICO registration requirements — if you have questions about our data protection status, please contact us.
If you have any questions about this policy or how we handle your data, please contact us.
Information We Collect
When you visit our store or place an order, we may collect the following:
Personal Identification — your name, email address, phone number, and billing/shipping address.
Payment Information — payments are processed securely through trusted third-party providers. We do not store your full credit or debit card details on our servers.
Order & Transaction Data — details of the products you've purchased, your order history, and any customer service communications.
Technical Data — your IP address, browser type and version, time zone, operating system, and browsing activity on our site via cookies and similar technologies.
Legal Basis for Processing (UK GDPR)
Under the UK GDPR, we process your personal data on the following legal bases:
- Contract performance — to process and fulfil your orders and handle any related queries.
- Legal obligation — to comply with our legal and regulatory obligations, including tax and accounting requirements.
- Legitimate interests — to improve our website and services, and to prevent fraud.
- Consent — to send you marketing communications, where you have opted in. You may withdraw consent at any time.
How We Use Your Information
We use the information we collect to:
- Process and fulfil your orders, and send you order confirmations and shipping updates
- Communicate with you about your account or purchases
- Improve and personalise your shopping experience
- Send marketing communications, where you have opted in to receive them
- Comply with our legal and regulatory obligations
Cookies
Our website uses cookies to enhance your browsing experience, remember your preferences, and help us understand how visitors use our site. Under UK PECR, we ask for your consent before placing non-essential cookies.
You can manage or disable cookies through your browser settings at any time. Please note that disabling cookies may affect the functionality of certain features on our site.
Sharing Your Information
We do not sell, trade, or rent your personal information to third parties.
We may share your data with trusted service providers who assist us in operating our website and fulfilling your orders — such as our fulfilment partner (Printify), courier services, payment processors, and marketing platforms. All third parties are required to keep your information confidential and use it only for the purposes specified.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy or to comply with our legal obligations.
Order data is typically retained for up to 7 years for accounting and legal purposes in line with HMRC requirements.
Your Rights Under UK GDPR
As a UK resident, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Request that we correct any inaccurate or incomplete data.
Request that we delete your personal data, subject to certain conditions.
Request that we limit how we process your data in certain circumstances.
Receive your data in a structured, machine-readable format to transfer elsewhere.
Object to processing based on legitimate interests or for direct marketing purposes.
Withdraw consent for marketing at any time using the unsubscribe link in any email we send. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise any of these rights, please contact us and we'll respond within 1–2 business days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Security
We take the security of your personal data seriously. Our website uses SSL encryption and we follow industry-standard security practices to protect your information.
However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. If you have any concerns, please get in touch.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal and regulatory reasons. Any changes will be posted on this page with an updated revision date.
We encourage you to review this policy periodically to stay informed about how we're protecting your information.