Effective Date: 2 July 2026
Website: DIYLush.com
1. Introduction
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit DIYLush.com or purchase products from us.
Welcome to DIY Lush (“we”, “our”, “us”). We are committed to protecting your privacy and handling your personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable UK data protection laws.
2. Data Controller
DIY Lush
26 Cambridge Street
Kettering
NN14 6HB
United Kingdom
Email: hello@diylush.com
3. Personal Information We Collect
When you place an order or contact us, we may collect:
- Full name
- Billing address
- Delivery address
- Email address
- Telephone number
- Order information
- Communications you send to us
We also automatically collect certain technical information when you use our website, including:
- IP address
- Browser type
- Device information
- Website usage data
- Cookies and similar technologies
4. How We Use Your Information
We use your information to:
- Process and fulfil your orders
- Arrange delivery of your purchases
- Process payments
- Communicate with you about your order
- Respond to customer service enquiries
- Process refunds and returns
- Prevent fraud and maintain website security
- Comply with our legal and accounting obligations
- Improve our website and customer experience
5. Lawful Basis for Processing
- Performance of a contract
- Compliance with legal obligations
- Legitimate interests
- Consent (where required, such as for marketing emails or optional cookies)
We process your personal information under the following lawful bases:
6. Payment Processing
Payments are securely processed by trusted third-party providers, including:
- PayPal
- Klarna
- Clearpay
- Apple Pay (via PayPal)
DIY Lush does not store your full payment card details.
7. Sharing Your Information
We may share your information with trusted third parties where necessary, including:
- Payment providers
- Delivery and courier services
- Website hosting providers
- WooCommerce and WordPress service providers
- Professional advisers (where required)
- Government authorities where required by law
We never sell your personal information.
8. Data Retention
We retain personal information only for as long as necessary to fulfil the purposes for which it was collected.
Order information may be retained for up to six years to comply with UK tax and accounting legislation.
9. Cookies
Our website uses cookies to:
- Enable essential website functionality
- Remember your preferences
- Improve website performance
- Support the shopping experience
You can manage or disable cookies through your browser settings. Some parts of the website may not function correctly if cookies are disabled.
10. Data Security
We use appropriate technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure or destruction.
While we take reasonable precautions, no method of internet transmission or electronic storage is completely secure.
11. Your Rights
Under UK data protection law, you have the right to:
- Access your personal information
- Request correction of inaccurate information
- Request deletion of your data where applicable
- Restrict processing
- Object to processing
- Request data portability where applicable
- Withdraw consent where processing relies on consent
To exercise any of these rights, please contact us at hello@diylush.com.
12. Complaints
If you are unhappy with how we handle your personal information, you have the right to complain to the UK Information Commissioner’s Office (ICO).
13. Third-Party Websites
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those websites.
14. Children’s Privacy
DIYLush.com is not intended for children under the age of 13. We do not knowingly collect personal information from children.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.
16. Contact Us
If you have any questions regarding this Privacy Policy or your personal information, please contact:
Email: hello@diylush.com
