Privacy policy
Last updated: 11 September 2026
DIDA AUTOS LTD ("we", "us") of 129 Bernard Street, Southampton, England, SO14 3DY is the data controller for personal data collected through this website. This policy explains what we collect, why, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. What we collect
- Order information - name, email address, phone number, billing and delivery address, and details of the products you buy.
- Payment information - handled entirely by Stripe. We receive confirmation of payment and the last four digits of your card, never your full card number.
- Enquiries - anything you send us through the contact form, by email or by phone.
- Technical data - IP address, browser type and pages visited, collected by our hosting provider (Netlify) for security and performance.
- Basket data - stored locally in your browser only, so your basket is remembered between visits. It is not sent to us until you check out.
2. Why we use it and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Processing and delivering your order, sending receipts and tracking updates | Performance of a contract |
| Responding to your enquiries | Legitimate interests / steps prior to a contract |
| Preventing fraud and keeping the site secure | Legitimate interests and legal obligation |
| Keeping accounting and tax records | Legal obligation |
| Marketing emails (only if you opt in) | Consent - withdraw at any time |
3. Who we share it with
We share data only with providers needed to run the business: Stripe (payments), Netlify (website hosting and contact form), our delivery carriers (name and address for shipping), and our accountants where required by law. We do not sell personal data.
Some providers process data outside the UK. Where they do, transfers are protected by the UK International Data Transfer Agreement or adequacy regulations.
4. How long we keep it
Order records are kept for six years after the transaction to meet HMRC requirements. Enquiries are kept for 12 months after our last contact. Technical logs are kept by our hosting provider for a limited period for security purposes.
5. Cookies
This site does not use advertising or tracking cookies. Your basket is stored in your browser's local storage. Stripe sets cookies on its own checkout page to prevent fraud; these are covered by Stripe's privacy policy.
6. Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent where we rely on it. To exercise any of these, email info@didaautos.shop. We respond within one month.
If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
7. Security
The site is served over HTTPS. Payments are taken on Stripe's PCI DSS Level 1 certified platform. Access to order data is limited to staff who need it to fulfil your order.
8. Changes and contact
We may update this policy from time to time; the date at the top shows the latest version. Questions about privacy can be sent to info@didaautos.shop or posted to DIDA AUTOS LTD, 129 Bernard Street, Southampton, SO14 3DY.