Privacy Policy
1. Data We Collect
We collect personal information that you provide directly, such as your name, email address, shipping address, and payment details when you place an order or sign up to our newsletter. We also collect technical data about your device and browsing behaviour via cookies and similar technologies.
2. How We Use Your Data
We use your data to process and fulfil orders, communicate with you about your purchases, improve our website and services, and send you marketing communications if you have opted in. We do not sell your personal data to third parties.
3. Legal Basis
Under UK GDPR, we process your data on the basis of contract performance (for orders), legitimate interests (for website improvements), and consent (for marketing communications).
4. Data Sharing
We share data only with trusted service providers necessary to operate our business - payment processors, courier companies, and email service providers. All providers are contractually bound to protect your data.
5. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Transaction data is typically kept for six years.
6. Your Rights
You have the right to access, correct, erase, restrict, or object to the processing of your personal data. You may also request data portability and withdraw consent at any time. To exercise these rights, contact us at hello@dvil.co.uk.
7. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, or destruction. Payment processing is handled by PCI DSS compliant providers; we do not store your full card details.
8. Changes to This Policy
We may update this privacy policy from time to time. The latest version will always be available on this page. Significant changes will be communicated to you where required by law.