Privacy & Cookie Policy

Last updated: 1 October 2026

Wigley DIY Ltd ("Wigley DIY", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy & Cookie Policy explains what personal data we collect, how we use it, why we use it, who we may share it with, how long we keep it and the rights you have in relation to your personal data when you use our website, place an order with us or contact us.

We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR), where applicable.

Please read this policy carefully.

1. Who we are

The website www.wigleydiy.co.uk is operated by:

Wigley DIY Ltd
Barracks Road
Sandy Lane Industrial Estate
Stourport-on-Severn
Worcestershire
DY13 9QB
United Kingdom
Telephone: 01299 822250

Wigley DIY Ltd is the data controller for the personal data we collect and process through this website, except where another organisation is acting as a data controller in its own right.

If you have any questions about this Privacy & Cookie Policy or how we use your personal data, please contact us.

Privacy contact: James Allen
Email: James@wigleydiy.co.uk

2. What personal data do we collect?

We only collect personal data where we have a reason to do so.

The information we collect depends on how you use our website and may include:

When you place an order

We may collect:

• Your name
• Billing address
• Delivery address
• Telephone number
• Email address
• Payment information
• Details of the products you purchase
• Order number and transaction information
• Information relating to delivery, returns, refunds or warranties
• Communications you have with us concerning your order

We do not store your full payment card details on our own systems. Payment information is passed securely to our third-party payment provider for processing.

When you contact us

If you contact us through our website, by email or by telephone, we may collect:

• Your name
• Email address
• Telephone number
• Any other information you choose to provide
• Details of your enquiry and our response

When you create or use an online account

Where applicable, we may collect:

• Your name
• Email address
• Contact details
• Account login information
• Order history
• Saved addresses and preferences

Information collected automatically

When you visit our website, certain information may be collected automatically, including:

• IP address
• Browser type
• Device type
• Operating system
• Pages visited
• Products viewed
• Referring website
• Date and time of visits
• Website usage information
• Cookie and similar technology information

Some automatically collected information may constitute personal data where it can be associated with you.

3. How do we collect your personal data?

We may collect personal data when you:

• Place an order
• Create or use an account
• Contact us
• Submit information through our website
• Communicate with our customer service team
• Request information about a product
• Return a product or request a refund
• Make a warranty claim
• Leave a review or provide feedback
• Use our website and interact with cookies or similar technologies

We do not automatically add customers to a marketing mailing list simply because they place an order.

4. Why do we use your personal data?

We use personal data for purposes including:

Processing your orders

We use your information to:

• Process your order
• Take and verify payment
• Prepare your goods
• Arrange delivery
• Send order confirmations
• Provide delivery information
• Deal with cancellations, returns and refunds
• Deal with warranty claims
• Contact you where there is an issue with your order

Providing customer service

We use information you provide to respond to enquiries, provide assistance and resolve complaints.

Maintaining records

We retain appropriate records of orders and transactions to help us deal with future enquiries, returns, warranties, refunds, accounting requirements and legal obligations.

Operating and improving our website

We may use website usage information to:

• Maintain website functionality
• Improve the website
• Understand how customers use the website
• Identify technical problems
• Improve our products and services
• Monitor website performance

Fraud prevention and security

We may process personal data to help:

• Detect and prevent fraudulent transactions
• Protect our website and systems
• Verify transactions
• Prevent misuse of our services
• Protect our customers and business

Reviews and feedback

Where appropriate, we may share relevant order information with an online review provider so that we can request or receive feedback about the service we have provided.

5. Our lawful bases for processing your personal data

Under the UK GDPR, we must have a lawful basis for processing personal data.

Depending on the circumstances, we rely on the following lawful bases:

Contract

We process information where this is necessary to enter into or perform a contract with you.

For example, when you place an order, we need your name, address, contact details and order information to process and deliver your purchase.

Legal obligation

We may process personal data where necessary to comply with legal obligations.

This may include obligations relating to:

• Accounting
• Tax
• Financial records
• Consumer rights
• Fraud prevention
• Regulatory requirements
• Legal claims

Legitimate interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests.

Our legitimate interests may include:

• Operating our business
• Providing customer services
• Managing customer relationships
• Improving our website and services
• Preventing fraud
• Maintaining website security
• Protecting our business
• Dealing with complaints and disputes
• Keeping appropriate business records

Where we rely on legitimate interests, we consider the impact that the processing may have on your privacy and your rights.

Consent

Where consent is required, we will ask you to provide it before processing your personal data for that purpose.

Where we rely on consent, you may withdraw your consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew your consent.

6. Payment information

We accept payment by the methods made available during the checkout process.

Payment transactions are processed by third-party payment providers.

Your payment details are transmitted securely to the relevant payment provider and are not stored by Wigley DIY as complete payment card details.

We may retain limited payment and transaction information necessary to maintain our business records and deal with orders, refunds, disputes and accounting requirements.

7. Who do we share your personal data with?

We do not sell your personal data.

Where necessary, we may share relevant personal data with trusted third parties who help us operate our business and provide our services.

These may include:

Payment providers

Payment providers process payments made through our website.

Delivery and courier companies

We provide delivery companies with information necessary to deliver your order, such as your name, address and relevant contact details.

Online review providers

Where applicable, we may provide relevant information to an online review provider so that we can request feedback regarding your purchase or our service.

Website, hosting and technology providers

We may use third-party companies to host, maintain, secure and operate our website and associated systems.

Professional advisers

Where necessary, we may share information with professional advisers such as accountants, auditors, insurers or legal advisers.

Government and regulatory authorities

We may disclose personal data where required by law or where necessary to protect our legal rights, customers, employees or business.

Third parties that process personal data on our behalf will be required to handle that information in accordance with applicable data protection requirements.

8. International transfers

Some third-party service providers may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that your personal data receives an appropriate level of protection.

Where required, we will use appropriate safeguards recognised under applicable UK data protection legislation.

9. Fraud prevention

We may use personal data to identify and prevent potentially fraudulent or unauthorised transactions.

This may include sharing relevant information with payment providers, fraud-prevention services or other organisations where this is necessary to protect our customers and business.

Where we identify a transaction that may present a security or fraud risk, we may contact you to verify information or take appropriate action.

10. How do we protect your personal data?

We take the security of your personal data seriously.

We use appropriate technical and organisational measures designed to protect personal data against:

• Unauthorised access
• Accidental loss
• Unauthorised disclosure
• Misuse
• Alteration
• Destruction

Our website and associated systems are maintained using appropriate security measures, including security updates and protections designed to help prevent unauthorised access.

Our website uses secure encryption technology when personal information is transmitted.

Access to personal data is restricted to those who need it for legitimate business purposes.

No method of transmitting or storing information electronically can be guaranteed to be completely secure. However, we take reasonable steps to protect the information entrusted to us.

11. How long do we keep your personal data?

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected.

The length of time we retain information depends on the type of information and why we need it.

For example:

• Order and transaction information may be retained for the periods required for accounting, tax, legal and business purposes.
• Customer account information may be retained while your account remains active and for an appropriate period afterwards.
• Customer service correspondence may be retained for as long as reasonably necessary to deal with your enquiry and any related issues.
• Returns and warranty information may be retained for as long as reasonably necessary to administer the relevant return, warranty or legal obligation.
• Fraud and security information may be retained for as long as reasonably necessary to protect our business and customers.
• Cookie consent information may be retained for an appropriate period to demonstrate and manage your cookie preferences.

When personal data is no longer required, we will securely delete it or anonymise it where appropriate.

12. Your rights

Under applicable data protection law, you may have the following rights:

Right of access

You can ask us for a copy of the personal data we hold about you.

Right to rectification

You can ask us to correct inaccurate or incomplete personal data.

Right to erasure

In certain circumstances, you can ask us to delete your personal data.

This is sometimes referred to as the "right to be forgotten".

Right to restriction

In certain circumstances, you can ask us to restrict the processing of your personal data.

Right to object

You may have the right to object to certain processing of your personal data, including processing based on legitimate interests.

You have an absolute right to object to direct marketing.

Right to data portability

In certain circumstances, you may have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to have it transmitted to another organisation.

Right to withdraw consent

Where we process your personal data on the basis of consent, you may withdraw your consent at any time.

These rights are subject to certain legal conditions and exemptions, so they may not apply in every situation.

13. How to exercise your rights

If you wish to exercise any of your data protection rights, please contact:

James Allen
Wigley DIY Ltd
Barracks Road
Sandy Lane Industrial Estate
Stourport-on-Severn
Worcestershire
DY13 9QB
Email: James@wigleydiy.co.uk
Telephone: 01299 822250

Please provide enough information to allow us to identify you and understand your request.

For security purposes, we may need to verify your identity before providing personal data or carrying out certain requests.

We will normally respond to a valid data protection request within the period required by applicable law.

14. Direct marketing

Wigley DIY does not automatically add customers to a marketing mailing list simply because they place an order.

We may send you service-related communications that are necessary to administer your order or account, such as:

• Order confirmations
• Dispatch notifications
• Delivery information
• Information about returns or refunds
• Warranty information
• Important service messages

These are not marketing communications.

If we wish to send you promotional or marketing communications, we will do so in accordance with applicable direct marketing and data protection laws.

You have an absolute right to object to direct marketing at any time.

15. Cookies

Our website uses cookies and similar technologies.

A cookie is a small text file that may be stored on your computer, tablet or mobile device when you visit a website.

Cookies can help a website remember information about your visit and can be used to provide functionality, understand how the website is used and, where permitted, support marketing or advertising activities.

Types of cookies we may use

Strictly necessary cookies

These cookies are required for essential website functions.

They may be used for purposes such as:

• Shopping basket functionality
• Checkout
• Account functionality
• Website security
• Remembering essential settings
• Processing transactions

These cookies may be used without consent where they are strictly necessary to provide a service you have requested or for the operation of the website.

Analytics and performance cookies

Where used, these cookies help us understand how visitors use our website.

They may provide information such as:

• Pages visited
• Products viewed
• How visitors navigate around the website
• Website performance
• The effectiveness of website campaigns

Where consent is required, these cookies will only be used after you have provided the appropriate consent.

Marketing, advertising and affiliate cookies

Where used, these cookies may help us measure advertising or affiliate activity and understand whether a customer has arrived at our website through a particular marketing or affiliate source.

Where consent is required, these cookies will only be placed after you have provided the appropriate consent.

16. Cookie consent

Where a cookie or similar technology requires consent, we will ask for your consent before setting or using it.

Your consent must be given through a clear positive action.

Simply browsing or continuing to use the website will not be treated as consent to non-essential cookies.

You can change or withdraw your cookie preferences at any time through the cookie settings available on our website, where provided.

17. Managing cookies

You can also control or delete cookies through your browser settings.

Most browsers allow you to:

• View cookies
• Delete cookies
• Block cookies
• Block third-party cookies
• Allow cookies from selected websites

Please be aware that blocking or deleting certain cookies may affect the functionality of our website.

In particular, disabling strictly necessary cookies may prevent certain parts of the website, including shopping basket or checkout functionality, from operating correctly.

18. Third-party websites

Our website may contain links to websites operated by third parties.

If you follow a link to another website, that website will have its own privacy and cookie policies.

We are not responsible for the privacy practices, security or content of third-party websites.

We recommend that you read the privacy policy of any third-party website before providing personal information.

19. Children's privacy

Our website is intended for general use and is not specifically directed at children.

We do not knowingly collect personal data from children for purposes that require parental consent.

If you believe that a child has provided us with personal data without appropriate consent, please contact us so that we can investigate and take appropriate action.

20. Changes to this Privacy & Cookie Policy

We may update this policy from time to time to reflect:

• Changes to our business
• Changes to our website
• Changes to the services we use
• Changes to data protection or privacy legislation
• Changes to the way we process personal data

The latest version will always be published on this page.

The "Last updated" date at the top of this policy indicates when it was most recently reviewed.

21. Complaints

If you have a concern about the way we have handled your personal data, we would encourage you to contact us first so that we can try to resolve the issue.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)
Website: ico.org.uk

The ICO can provide further information about your data protection rights and how to make a complaint.

22. Contact details

If you have any questions about this Privacy & Cookie Policy, our use of your personal data or wish to exercise your data protection rights, please contact us:

Wigley DIY Ltd
Barracks Road
Sandy Lane Industrial Estate
Stourport-on-Severn
Worcestershire
DY13 9QB
United Kingdom
Telephone: 01299 822250
Email: James@wigleydiy.co.uk
Privacy contact: James Allen