Privacy policy

Privacy Policy Last updated: 24 June 2026 This Privacy Policy explains how JONES DIY LIMITED ("Jones DIY", "we", "us" or "our") collects, uses and shares personal information when you visit our website, buy from us, contact us, interact with our marketing, or interact with our social media pages. Our website is https://jonesdiy.co.uk. Who We Are JONES DIY LIMITED is a UK hardware, fixings and ironmongery supplier. Contact details: Email: admin@jonesdiy.co.uk Phone: 01709 278897 Address: JONES DIY LIMITED, Hythedale, Dalton Magna, Rotherham S65 3ST, United Kingdom VAT number: GB 424873579 Information We Collect We collect different types of information depending on how you use our website and services. Website And Device Information When you visit our website, we may collect: IP address browser type and version device information time zone pages, products and search terms viewed referral source cookie and tracking preferences how you interact with the website We use this to operate the website, improve usability, understand performance, detect issues, and support advertising and analytics where permitted. Order Information When you place an order, we collect information needed to process and fulfil that order, including: name billing address delivery address email address phone number order details payment and transaction information delivery and tracking information Payment information is processed securely by our payment providers. We do not store full card details on our own systems. Customer Support Information If you contact us for help, returns, delivery support or product advice, we may collect: your name and contact details order number messages and emails you send us product or delivery photos you provide parcel, label or address images where needed to resolve an issue Marketing Information If you sign up for marketing or interact with our marketing, we may collect: email address marketing preferences email engagement such as opens and clicks purchase history and product interests website activity linked to marketing where permitted Social Media And Meta App Information We use Meta tools, including Facebook and Instagram, to manage Jones DIY social media activity. We may use an internal Jones DIY social publishing app to help draft, schedule, publish and review posts on our own Facebook Page and Instagram account. This app is used by Jones DIY only. It is not a public customer login app and customers do not install it. The app may process: Jones DIY Page and Instagram account identifiers post text, images, links and scheduled publish times public post engagement metrics such as reactions, comments, shares and clicks where available public comments or messages where we review them for customer service or marketing learning technical access tokens needed to publish or read permitted Page data We use this information to publish social media posts, manage our marketing, understand which posts perform better, and improve future content. We do not use this app to collect private Facebook login information from customers. We do not sell Meta data. How We Use Personal Information We use personal information to: operate and improve our website process and fulfil orders arrange delivery and returns provide customer service and product support manage payments, refunds and fraud prevention send order updates and service messages send marketing where permitted measure website, email and social media performance create and improve marketing content comply with legal, tax and accounting obligations protect our business, customers and website from misuse or fraud Lawful Bases For Processing Where UK GDPR applies, we rely on the following lawful bases: Contract: to process orders, payments, delivery, returns and customer support. Legal obligation: to keep tax, accounting and compliance records. Legitimate interests: to operate and improve our business, website, customer service, marketing performance, fraud prevention and social media management. Consent: for certain marketing, cookies or tracking where consent is required. You can withdraw consent at any time where we rely on consent. Who We Share Information With We share personal information only where needed to run the business, fulfil orders, provide services, comply with the law, or manage marketing. We may share information with: Shopify, which powers our online store payment providers and fraud prevention providers delivery and courier services, including Royal Mail, UPS, Evri/Hermes, DPD and similar delivery partners email and marketing platforms analytics and advertising platforms, including Google and Meta, where permitted IT, cloud, automation and productivity tools used to operate the business professional advisers, accountants, insurers or legal advisers public authorities or regulators where required by law We only share the information needed for the relevant purpose. International Transfers Some of our service providers may process information outside the UK. Where this happens, we rely on appropriate safeguards, such as adequacy regulations, standard contractual clauses, or the provider's own lawful transfer arrangements. Shopify may process information in countries including Canada, the United States and other locations as part of providing its ecommerce services. Cookies And Similar Technologies We use cookies and similar technologies to: make the website work remember preferences manage baskets and checkout understand website performance support advertising and marketing where permitted Some cookies are necessary for the website to function. Others, such as analytics and advertising cookies, may depend on your consent or browser settings. You can manage cookies through your browser settings. Blocking some cookies may affect website functionality. Marketing We may send marketing emails if you have subscribed, bought from us, or otherwise given permission where required. You can unsubscribe from marketing emails at any time by using the unsubscribe link in the email or contacting us. We may use advertising platforms such as Google, Facebook and Instagram to show relevant adverts or measure advertising performance. These platforms may use cookies, pixels or similar technologies subject to their own privacy terms and your privacy settings. Useful opt-out links include: Facebook ad settings: https://www.facebook.com/settings/?tab=ads Google ad settings: https://www.google.com/settings/ads/anonymous Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout Data Retention We keep personal information only for as long as needed for the purpose it was collected. Typical retention periods include: order and accounting records: normally up to 7 years customer service records: as long as needed to resolve the issue and keep reasonable business records marketing records: until you unsubscribe or we no longer need the record social media publishing and performance records: as long as needed for marketing review, audit and improvement website analytics: according to the settings of the relevant analytics provider We may keep information longer where required for legal, accounting, fraud prevention or dispute purposes. Automated Decision-Making We do not make decisions based solely on automated processing that have a legal or similarly significant effect on customers. Our ecommerce, payment and fraud prevention providers may use limited automated checks to help prevent fraud or misuse. Your Rights Depending on the circumstances, you may have rights to: access the personal information we hold about you ask us to correct inaccurate information ask us to delete information ask us to restrict how we use information object to certain processing, including direct marketing ask for a copy of information in a portable format withdraw consent where processing is based on consent To exercise your rights, contact us at admin@jonesdiy.co.uk. We may need to verify your identity before responding. Complaints If you are unhappy with how we handle your personal information, please contact us first so we can try to resolve the issue. You also have the right to complain to the UK Information Commissioner's Office. ICO website: https://ico.org.uk/make-a-complaint/ Changes To This Policy We may update this Privacy Policy from time to time to reflect changes in our business, website, systems, legal requirements or marketing activity. The latest version will be published on this page.