Privacy Policy

This privacy policy explains how Diamond Skies collects, uses, and protects your personal data when you visit our website or make a purchase. It is written to help you understand your privacy rights and how the law protects you.

Data controller: Pete Collins T/A Diamond Skies
Contact email: pete@diamond-skies.co.uk

1. What information we collect

We collect personal information that you provide directly to us, including:

• Account information: name, email address, and password when you create an account.
• Order information: billing and delivery address, contact phone number, and payment confirmation details.
• Communication: emails, messages, or enquiries you send us.
• Technical data: IP address, browser type, device information, and pages visited while you are on our site.

We do not store your full payment card details. Payments are handled securely by Stripe.

2. How we use your information

We use your personal information to:

• Process and fulfil your orders, including payment, production, dispatch, and delivery.
• Provide customer support and respond to your enquiries.
• Send essential transactional emails such as order confirmations and dispatch notifications.
• Maintain your account and keep our records accurate.
• Comply with legal and accounting obligations, including tax reporting.
• Improve our website and understand how visitors use it, where you have consented to analytics.

3. Legal basis for processing

Under UK data protection law, we process your personal data on one or more of the following bases:

• Contract: processing necessary to fulfil your order or provide services you request.
• Legal obligation: processing required to comply with tax, accounting, or other legal requirements.
• Legitimate interests: processing to run our business, prevent fraud, or improve our services, provided your rights are not overridden.
• Consent: where you have agreed, for example to receive marketing emails or to analytics cookies.

4. Sharing your information

We do not sell your personal information. We share it only with trusted service providers who help us operate the website and fulfil orders, including:

• Stripe - to process payments securely.
• Lovable Cloud / Supabase - to host the website, store order data, and send transactional emails.
• Google - to understand how visitors use our website through Google Analytics, when you consent to analytics cookies.
• Courier and postal services - to deliver your orders.

We may also share information if required by law, to enforce our terms, or to protect our rights, property, or safety.

5. Cookies and analytics

Our website uses cookies and similar technologies to function and to improve your experience. Essential cookies are needed for the site to work, such as keeping your basket contents while you browse.

With your consent, we use Google Analytics to collect anonymous information about how visitors use our site. This helps us understand which pages are popular and how people find us. Google Analytics sets cookies and may process data outside the UK. You can manage or withdraw consent for analytics cookies at any time. You can also install the Google Analytics opt-out browser add-on.

6. Marketing

We may send you marketing emails about new prints, exhibitions, or offers, but only if you have explicitly opted in. You can unsubscribe at any time by clicking the link in any marketing email or by contacting us at pete@diamond-skies.co.uk.

Even if you do not opt in to marketing, we will still send you essential emails about your orders and account.

7. Data retention

We keep your personal information only for as long as necessary. Order and billing records are kept for up to six years to meet UK tax and accounting requirements. Account information and marketing consent records are kept until you delete your account or withdraw consent, after which they are removed or anonymised.

8. Your data protection rights

Under UK data protection law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information in certain circumstances.
• Object to or restrict certain processing of your data.
• Withdraw consent at any time, where processing is based on consent.
• Make a complaint to the Information Commissioner's Office (ICO) if you believe your data has been misused.

To exercise any of these rights, please contact us at pete@diamond-skies.co.uk.

9. Security

We take appropriate technical and organisational measures to protect your personal information from loss, misuse, unauthorised access, or disclosure. This includes using secure hosting, encrypted connections, and access controls. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. International transfers

Some of our service providers, such as Google Analytics and Stripe, may process data outside the United Kingdom. Where this happens, we rely on appropriate safeguards, such as standard contractual clauses or adequacy decisions, to protect your information.

11. Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page, and we encourage you to review it periodically.

12. Contact us

If you have any questions about this privacy policy or how we handle your personal data, please contact us at pete@diamond-skies.co.uk.