Information we collect

This may include your name, contact details, billing and delivery addresses, account and sign-in information, order and return history, reward-points activity, enquiries, reviews, marketing preferences, IP address, device and browser information, cookie identifiers and website activity.

Payment-card details are entered into the payment provider’s secure service. We may receive limited payment information such as the payment status, method, transaction reference and card type or last digits, but we do not need to store your full card number.

Where information comes from

Most information comes directly from you when you browse, order, register, contact us or use the shop. We may also receive information from payment providers, delivery companies, suppliers fulfilling an order, fraud-prevention services, website analytics services and publicly available sources where appropriate.

Who we share information with

We share only what is reasonably needed with service providers such as website hosting and ecommerce providers, IT and security support, payment processors, delivery carriers, suppliers that dispatch an order, email and customer-service providers, analytics providers, professional advisers and public authorities where required by law.

Payment providers displayed at checkout may include WooPayments and its card or wallet partners, PayPal, Klarna and Clearpay. Availability depends on the order, device and provider eligibility. Those providers use information under their own privacy notices.

International transfers

Some technology and payment providers may process information outside the United Kingdom. Where this happens, we rely on an applicable adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

How long we keep information

We keep information only as long as needed for the purpose for which it was collected. Order, payment and accounting records are normally retained for at least six years after the relevant accounting period, and longer where a legal claim, tax enquiry or other obligation requires it. Account and rewards records are kept while the account is active and as needed afterwards for legal, security and transaction records. General enquiries are normally kept for up to two years unless they become part of an order, complaint or legal record.

Security

We use technical and organisational measures designed to protect personal information, including encrypted connections, access controls, maintained systems, backups and reputable payment providers. No internet service is completely risk-free, but we review and improve safeguards where appropriate.

Marketing

We send electronic marketing where you have consented or where another lawful permission applies. You can unsubscribe using a link in the message or by contacting us. Service messages about orders, accounts, safety or points are not marketing and may still be sent when needed.

Your rights

Depending on the circumstances, you may ask for access to your information, correction, erasure, restriction, portability or object to its use. You can also withdraw consent. Some rights are not absolute, particularly where we must retain transaction records by law. We may need to verify your identity before acting on a request.

Automated decisions

Paint N Decorate Limited does not normally make decisions producing legal or similarly significant effects using solely automated processing. Payment, fraud-screening and buy-now-pay-later providers may carry out their own eligibility or risk checks under their own terms and privacy notices.

Complaints

Please contact us first so we can try to resolve a concern. You also have the right to complain to the Information Commissioner’s Office, the UK data-protection regulator.