DIY Sheds privacy notice
We take your privacy and the protection of your personal information very seriously. This privacy notice (the “privacy notice”) explains:
- Who we are
- What information we collect and how we collect it
- How we use your information and how long we keep it
- Who we share your information with
- Links to other websites
- What are cookies; how we use them; and how can you manage them
- Whether we transfer your information to other countries
- How we keep your information safe
- Your legal rights
- The legal basis under which we receive and use your personal information
- Updates to our privacy notice
- How you can contact us if you have any other questions
2. Our details
diysheds.co.uk (the "website") is operated by VisualConfig Limited. Our company number is 13012920 and our registered address is 53 Fairmile Road, Christchurch, Dorset, United Kingdom, BH23 2LA ("us", "we", "our", "VCL").
We are registered with the Information Commissioner’s Office (registration reference ZA810130) and you can check our details on the ICO’s public register.
If you have any further questions about how we use your personal information after reading this privacy notice, then please email us at: email@example.com.
3. The information we collect and how we collect it
When you visit our website and use our services we may collect your personal information.
- We collect your computer’s IP address when you visit our website. We use a cookie to collect this information. You can read more about cookies in section 7, below.
- We collect your name, email address and also any message you send if you contact us by email.
- We collect your computer’s IP address, your name, email address and a copy of the password you set up if you create an account to use our configurator. We encrypt your password for added security.
- If you design a shed, garden office or playhouse using our configurator then we save a copy of the different designs you have created.
- If you place an order to buy materials so you can build the shed, garden office or playhouse you have designed, then we save a copy of your purchase history.
4. How we use your information
We use the personal information we collect in the following ways:
To monitor and improve our services
- We use the information of your visits to our website and how you use our website and services so that we can come up with improvements and new features and functionality. This information also allows us to understand the demand for our website and services at different times of the day and that helps us to ensure that we can keep them running at peak performance.
- We delete this information after 30 days.
To respond to your email enquiry
- If you contact us by email with an enquiry then we will use the information to communicate with you and to sort out your enquiry.
- We delete this information 12 months after the last email communication between us.
To send you emails about our products and services that you have requested
- If you have consented to us sending you email updates and information about our products and services, then we will use the information to send you these emails.
- You can unsubscribe from these emails or withdraw your consent at any time. We delete this information 12 months after the last email you opened or after you unsubscribe, whichever is the later.
To create, maintain and monitor your user account
- If you have created an account to use our configurator then we will use the information so that you can access your account and any saved designs you have created. We will also use the information to monitor your saved designs and – if you buy materials through our service – to keep a record of your purchases.
- We delete this information if you have not accessed your account for more than 24 months. We retain a record of purchases for 6 years.
To perform research and analysis
- We may combine different sets of information from across our services to perform research and analysis that we use to develop new tools and services and to add functionality to our existing services. We remove any personal information to anonymise it before collating this data because we only need to analyse it at an aggregated level (for example, we may analyse the most popular shed design over a specific period of time).
- We delete this information after 3 years.
5. Who we share the information with
When you use our website and services we share your information with the companies listed below. We have contracts in place with these companies and this means that they cannot do anything with your personal information unless we have instructed them to do it. They will not share your personal information with any organisation apart from us. They will hold it securely and retain it for the period we instruct.
Website reports and analysis
- We use an analytics platform provided by Google to help us collate and analyse the data we collect through our website. This data will include your computer’s IP address which we share with Google solely so it can provide these analytical service
- Google is based in the US. They will hold your personal information securely and will not share any of it with other companies or use it for any other purposes.
- We use Microsoft, Rocket Science Group and Mailgun Technologies to provide our email services. If you provide us with your personal information then we will share it with these companies solely to provide email services.
- Microsoft provides our core email platform; Rocket Science Group provides technical email marketing services; and Mailgun Technologies provides email delivery services. These companies are all based in the US.
- These companies will hold your personal information securely will not share any of it with other companies or use it for any other purposes.
Website and service hosting
- Our website, our configurator and our other services are all hosted by SiteGround Hosting. Any personal information that we collect when you use our website or any of our services will be shared with them.
- SiteGround Hosting provides powerful and very secure cloud computing services. We use SiteGround’s UK data centre to host all our company’s services and your personal information.
- They will hold your personal information securely and will not share any of it with other companies or use it for any other purposes.
We may additionally disclose your personal information as permitted by law:
- if we sell VCL;
- to comply with any legal obligation or court order, or to enforce or apply our rights;
- to protect the rights, property, or safety of us, our customers, or others; or
- for the purposes of fraud protection.
6.Links to other websites
Where we provide links to the websites of other organisations (for example building materials suppliers), this privacy notice does not cover how those organisations will process your personal information. We encourage you to read the privacy notices on the other websites you visit.
You can manage your cookie preferences by using our cookie pop-up tool when you visit our website or by changing your settings here.
You can also change your browser settings to disable cookies but you may find that some of the features on our website do not subsequently work correctly.
8.Where we transfer your information
Some of the personal information we collect will be transferred to (and stored in) the US. Where we transfer your personal information to companies based outside the European Economic Area we take specific precautions to ensure that those companies keep the information secure and process it in accordance with European data protection and privacy requirements.
All the companies we use in the US have entered into written contracts with us (called Standard Contractual Clauses) that set out how they can only use your personal information as instructed by us and how they must keep it secure and comply with the European legal requirements for data protection.
By using our website and services and by submitting your personal information to us, you consent to us transferring your personal information to companies in the US.
9. How we protect the information
We collect the minimum amount of personal information to be able to maintain our website and provide the services you want to use and we have strict procedures and information security measures in place to ensure that it is kept safe.
We encrypt any information between your computer’s browser and our website (by using Secure Sockets Layer technology). Our services – and your personal information – are hosted in a secure environment which has the latest firewall technology and continually checks for any potential software vulnerabilities. All personal information is backed-up to ensure that it cannot be lost or deleted. We also ensure that anyone who works with us or for us is trained appropriately to understand the importance of keeping our customers’ personal information safe and protecting their privacy.
If you create a password for your account, we encrypt it for additional security. We encourage you to create a strong password using a mixture of letters and numbers and ask that you do not share your password with anyone else. You are responsible for keeping your password confidential and for any use of your account, using your password.
Remember: no information sent from your computer over the internet can ever be guaranteed to be completely secure and when you share your personal information with us, you do so at your own risk.
10. Your rights
Under data protection law, you have rights we need to make you aware of. The rights available to you depend on our reason for using your personal information.
If you wish to exercise these rights then please contact us at firstname.lastname@example.org (or by post at our registered address at the bottom of this privacy notice). We have one month to fulfil your request.
- Your right of access - you have the right to ask us for a copy of your personal information. There are some exemptions, which means you may not always receive all the information we process.
- Your right to rectification - you have the right to ask us to correct any information that you think is inaccurate or that has changed since you first shared it with us.
- Your right to erasure - you have the right to ask us to erase (delete) your personal information in certain circumstances.
- Your right to restriction of processing - you have the right to ask us to limit the way we use some of your personal information in certain circumstances (for example you can ask us to stop using your information until you have updated it).
- Your right to object to processing - you have the right in certain circumstances to ask us to stop using your personal information for some purposes (for example you can request that we stop sending you emails about our products and services).
- Your right to data portability - in certain circumstances, you have the right to ask that we transfer the personal information you gave us to another organisation, or give it to you.
11. The lawful basis for processing information
Under data protection law, we must have a lawful basis (a recognised legal reason) for collecting and using your personal information.
If you have consented to us sending you email updates and information about our products and services then the lawful basis is that you have given your consent. You can withdraw your consent at any time.
If you use our configurator to design a shed, garden office or playhouse or to place an order to buy materials so you can build the shed, garden office or playhouse, then the lawful basis is that it is necessary for the performance of a contract (or prior to entering into a contract).
In all other circumstances the lawful basis for collecting and using your personal information is that it is in our legitimate business interests to do so. Legitimate business interests means that it is necessary for us to use your personal information in the interests of conducting and managing our business and to provide the service you would reasonably expect form a company of our type. We have to ensure that in these circumstances we are only using your information in a way you would expect and that will have a minimal impact on your privacy. We collect and use your personal information under the lawful basis of it being in our legitimate interests for the following purposes:
- To monitor and improve our services - It is in our legitimate interests to understand the demand for our website and services at different times of the day so that we can keep them running at peak performance.
- To respond to your email enquiry - It is in our legitimate interests to efficiently respond to any query you might have about our website or services. If you contact us, we want to provide you with fast, friendly and effective assistance so you can get the most from our services and continue to use them.
- To create your user account - It is in our legitimate interests to let you set up a user account to access the full functionality of our configurator so that you can get the most from our service. We send you an automated confirmation email when you first set up your account to confirm that it has been set up correctly and that the personal information you have submitted is correct.
- To perform research and analysis – It is in our legitimate interests to better understand how people use our services over time so we can identify trends and develop ways to enhance our services and develop new products for the benefit of our website users and customers. This information is anonymised and only used at an aggregated level.
12. Changes to this privacy notice
We keep our privacy notice under regular review to make sure it is up to date and accurate. Any updates will be posted to this page of our website and we would encourage you to review the latest version each time you provide us with any personal information.
This version was updated:
20th November 2020
13. How to contact us or make a complaint
If you have any further questions about how we use your personal information or if you wish to exercise any of your rights, detailed above, please email us at: email@example.com.
Alternatively you can write to us at:
53 Fairmile Road
If you are concerned about the way we may be using your personal information, then you can raise your concern with a supervisory authority in the EU member state where you reside. In the UK this is the Information Commissioner's Office.