PRIVACY POLICY - DIYPhotoScan Ltd

1. Introduction

DIYPhotoScan Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy
Policy explains how we collect, use, store and protect personal data when you use our website
www.diyphotoscan.co.uk or hire equipment from us. This policy is written in accordance with the UK General
Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

For the purposes of data protection legislation, DIYPhotoScan Ltd is the data controller.

3. Personal Data We Collect

We may collect and process the following personal data: name, billing and delivery address, email address,
telephone number, order and hire history, communications with us, technical data such as IP address,
browser type and device information. We do not knowingly collect personal data relating to children.

4. How We Collect Data

Personal data is collected when you place an order, contact us, make a payment, use our services or
browse our website.

5. How We Use Personal Data

We use personal data to process orders, arrange delivery and returns, take payments, communicate with
customers, provide support, comply with legal obligations and improve our services.

6. Lawful Basis for Processing

We process personal data on the basis of contractual necessity, legal obligation, legitimate interests and,
where applicable, consent.

7. Payment Processing

Payments are processed securely by third-party providers such as Stripe. We do not store or have access to
full card details.

8. Data Sharing

We may share personal data with payment processors, delivery couriers, IT service providers, professional
advisers or legal authorities where required by law. We do not sell personal data to third parties.

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against
unauthorised access, loss or misuse.

10. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected,
including legal, accounting and regulatory requirements.

11. Your Rights

You have rights under UK GDPR including the right to access, rectify, erase, restrict or object to processing,
request data portability and withdraw consent where applicable.

12. Complaints

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO). Further
information is available at www.ico.org.uk.

13. Cookies

Our website uses cookies to improve functionality and analyse usage. You may manage cookies through
your browser settings.

14. Business Transfers

In the event of a sale, transfer or restructuring of our business, personal data may be transferred to a third
party as part of that transaction, subject to appropriate safeguards.

15. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of
those websites.

16. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. The latest version will be published on our
website.

17. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of England and Wales.