Esprahome is a trading style of DIY World Ltd.
By registering or placing an order on this website you expressly consent to the collection, use and transfer of your information under the terms of this policy governed by the EU 2016/679, alias General Data Protection Regulation (following as GDPR).
Under the purposes of the GDPR, DIY World Ltd. is the Data Controller of this Privacy statement.
Information we collect from you and how we use it
When you visit, register or place an order with us, you may be asked to provide certain information about yourself. This may include (but is not limited to) your name, contact details and credit or debit card details. This information will allow us to process and fulfil your orders. Should you enter a competition or promotional feature, take part in a survey, or request a brochure or any other information from us, we will also ask for your details if required.
From time to time we may also collect information about your usage of our website, as well as information about you from messages you post to the website and e-mails or letters you send to us.
This information will enable us to provide you with access to all parts of our website and to supply the goods or services you have requested. We will also use and analyse the collected information to administer, support, improve and develop our business.
We may use other companies to provide services on our behalf, such as fulfilling orders, processing payments, packing and delivery as well as analysing data and carrying out market research. We will only disclose your information to the extent needed to deliver the services required.
We may use your information to contact you for your views on our services, as well as to occasionally notify you about important changes or developments to our site or services. Furthermore, we may also use your information to let you know about our other products and services which may be of interest to you. Depending on your elected means of communication, we may contact you by post, telephone or e-mail. If you decide that you do not want to receive any further communications from DIY World Ltd t/as Esprahome.co.uk , please let us know by sending an e-mail to Customer services.
Where you have consented to receive such information, we may allow other companies in our group to occasionally contact you about products and services which may be of interest to you. Depending on your elected means of communication, they may contact you by post, telephone or e-mail. If you decide you do not want to receive any further communications from these companies, please let us know by sending an e-mail to Customer Services.
How we secure customer information
The Diy World Ltd website complies with the terms of the Data Protection Act.
Ordering online via the Esprahome.co.uk website is protected by various levels of security technology. We employ security measures to protect your information from access by unauthorised persons and against unlawful processing, accidental loss, destruction and damage.
Cookies are small amounts of information which are automatically set by our website on your computer. They are generally used to remember the choices you make while on the site and are harmless to your computer system.
Unless you have specifically refused to accept cookies when disclosing your details to us, our system will automatically issue one or more cookies to your computer when you log on and use this website. Should you elect to set your computer to not accept cookies, you may not be able to use certain features on this website.
You can browse the DIY World Ltd t/as Esprahome.co.uk website without registering.
You do not need to enter your credit card details to register - credit card details will only be asked for when you order a product.
To register, you will be asked to enter your name, address and a few other personal details. Once you have registered, you can use your e-mail address and chosen password to identify yourself to the site, or 'log in'. Each time you visit the DIY World Ltd t/as Esprahome.co.uk website, you can enter these two pieces of information to access your user details.
Any personal information or account details you give us will be securely protected.
Your rights under the GDPR
Transfer of data outside the EU
The Data Controller is authorized to transfer personal data collected within the EU to third countries (eg any country that is not part of the EU) only on the basis of a specific legal basis. Any transfer of such data is based on one of the legal bases described below. Such transfers are justified if the data are collected by third-party plugins on the site or for any transoceanic legal procedure.
Data transfer to countries that guarantee European standards
If this is the legal basis, the transfer of personal data from the EU to third countries is made on the basis of an adequacy decision by the European Commission. The European Commission adopts adequacy decisions for specific countries whenever it considers that this country possesses and provides standards for the protection of personal data comparable to those established by EU data protection legislation. Users can find an updated list of all adequacy decisions published on the European Commission's website.
The user has the following rights, specific under the GDPR:
- Deny their consent at any time. Users have the right to withdraw consent if they have previously given their consent to the processing of their personal data.
- Object to the processing of personal data. The user has the right to object to the processing of his / her data if the treatment is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
- Access your data. Users have the right to know if the Data are being processed by the Data Controller, to obtain the disclosure of some aspects of the processing and to obtain a copy of the Data being processed.
- Verify and request correction. Users have the right to verify the accuracy of their data and request to be updated or correct.
- Having your personal data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the cancellation of their data from the owner.
Where Personal Data is processed for a public interest, in the exercise of an official authority conferred to the Owner or for the legitimate interests pursued by the Owner, Users may object to such processing by providing a reason related to their particular situation to justify the 'objection.
Users should know that, however, if their personal data is processed for direct marketing purposes, they may object to such processing at any time without providing any justification.
All comments, queries and requests relating to our use of your information are welcomed, and should be e-mailed to Customer services.