Privacy Policy

01. Introduction

Welcome to DidarShop. We are committed to protecting and respecting your privacy. This Privacy Policy explains how DidarShop ("we", "us", "our") collects, uses, stores, and protects information about you when you visit our website or use our services.

By using DidarShop, you agree to the collection and use of information in accordance with this policy. If you do not agree with any part of this policy, please do not use our website.

02. Information We Collect

We may collect and process the following categories of personal data:

03. How We Use Your Data

DidarShop uses your personal data for the following purposes:

• To process and fulfil your orders, including delivery and returns
• To create and manage your DidarShop account
• To send order confirmations, shipping updates, and invoices
• To provide customer support and respond to your enquiries
• To send you marketing emails and promotional offers (with your consent)
• To improve our website, products, and services through analytics
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal and regulatory obligations

04. Cookies Policy

DidarShop uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files placed on your device.

• Essential Cookies: Necessary for the website to function. These cannot be disabled.
• Performance Cookies: Help us understand how visitors interact with our website (e.g., Google Analytics).
• Functional Cookies: Remember your preferences such as login details and language settings.
• Marketing Cookies: Used to deliver relevant advertisements to you across the web.

You can manage your cookie preferences at any time through your browser settings. Disabling certain cookies may affect the functionality of our website.

05. Data Sharing & Disclosure

DidarShop does not sell your personal data to third parties. We may share your data with trusted partners only where necessary:

• Payment Processors: Stripe, PayPal — to process transactions securely
• Delivery Partners: Royal Mail, DPD, DHL — to fulfil and track your orders
• IT & Hosting Providers: To maintain our website infrastructure
• Analytics Providers: Google Analytics — to improve our services (anonymised data)
• Legal Authorities: Where required by law, court order, or to protect rights

All third-party processors are contractually bound to handle your data securely and in compliance with UK GDPR.

06. Data Security

We take the security of your personal data seriously. DidarShop implements appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including:

• SSL/TLS encryption for all data transmitted through our website
• PCI-DSS compliant payment processing — we never store full card details
• Regular security audits and vulnerability assessments
• Access controls — only authorised personnel can access personal data
• Secure server infrastructure with regular backups

07. Your Legal Rights

Under UK GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, please contact us at privacy@didarshop.com. We will respond within 30 days.

08. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

• Account Data: Retained for the duration of your account plus 2 years after closure
• Transaction Records: Retained for 7 years (UK tax & accounting obligations)
• Marketing Data: Until you unsubscribe or withdraw consent
• Technical Logs: Retained for up to 12 months for security purposes

09. Third-Party Links

Our website may contain links to third-party websites, plug-ins, and applications. Clicking on those links may allow third parties to collect or share data about you. DidarShop does not control these third-party websites and is not responsible for their privacy statements.

We encourage you to read the privacy policy of every website you visit.

10. Children's Privacy

DidarShop is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected data from a child, please contact us immediately and we will take steps to delete it.

Users aged 13–17 must have parental or guardian consent before using our services or making purchases.

11. Changes to This Policy

DidarShop reserves the right to update this Privacy Policy at any time. When we make significant changes, we will notify you by:

• Updating the "Last updated" date at the top of this page
• Sending an email notification to registered account holders
• Displaying a prominent notice on our website

We encourage you to review this page periodically to stay informed about how we protect your information. Continued use of DidarShop after changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection team:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data rights have been violated.