Skip to Content

Privacy Notice (Customers) – D2G Scotland Ltd

D2G Scotland Ltd respects your privacy and is committed to protecting your personal information. This notice explains how we collect, use, store and share your personal data when you visit our website, create an account, place an order, contact us, or otherwise interact with us.

We process personal data in accordance with UK GDPR and the Data Protection Act 2018.

Data Controller: D2G Scotland Ltd (“we”, “us”, “our”)

Contact:

📞 0203 795 9668

✉️ info@d2gscotland.co.uk

(Please use the subject line: Privacy Enquiry)

Last updated: 28\12\2025

1) What information we collect

Depending on how you use our services, we may collect:

Account & contact details

  • Name, business name (where applicable)

  • Billing and delivery address

  • Email address and telephone number

  • Account login details (where you create an account)

Order & transaction details

  • Products purchased, quantities, order history

  • Delivery preferences/instructions

  • Returns, complaints and customer service communications

Payment information

  • We do not store full card details ourselves. Card payments are processed securely by our payment provider. (If you choose a saved payment option offered by the provider, it is stored by them under their security standards.)

Technical and website usage data

  • IP address, device type, browser information

  • Pages visited and actions taken on our website

  • Cookie identifiers and similar tracking data (see Cookies section)

Security information

  • Where applicable, CCTV may be used at premises for safety and security.

2) Why we use your information and the legal bases

We only use your personal data where we have a lawful basis to do so, including:

a) Contract – to:

  • Create and manage your account

  • Process orders, deliveries, returns and refunds

  • Send service messages (order confirmations, dispatch updates)

b) Legal obligation – to:

  • Keep records required for tax, accounting, and regulatory purposes

  • Comply with lawful requests from authorities

c) Legitimate interests – to:

  • Improve our website and product offering

  • Prevent fraud, misuse, and protect our business

  • Maintain network and data security

  • Respond to enquiries and provide customer support

d) Consent – where required, for example:

  • Certain marketing communications

  • Non-essential cookies (analytics/marketing), depending on your cookie settings

3) Marketing preferences

If you opt in, we may send you marketing communications about new lines, promotions and updates.

You can unsubscribe at any time using the link in our emails or by contacting info@d2gscotland.co.uk.

We do not sell your personal data.

4) Who we share your information with

We may share personal data with trusted third parties where necessary to provide our services, including:

  • Delivery and logistics providers (to deliver your order)

  • Payment processing providers (to take payments securely)

  • IT and hosting providers (website and systems support)

  • Professional advisers (legal/accounting) when required

  • Fraud prevention and security partners where necessary to protect our business and customers

  • Regulators / law enforcement where we are legally required

We only share what is needed and expect third parties to protect your data appropriately.

5) International data transfers

Where service providers process data outside the UK, we ensure suitable safeguards are in place (such as UK adequacy regulations or appropriate contractual protections) to protect your information.

6) How long we keep your information

We keep personal data only for as long as necessary for the purposes described above, including to meet legal, accounting and reporting requirements.

Typical retention periods include:

  • Order and invoice records retained for statutory tax/accounting periods

  • Customer service records retained as needed to resolve issues and maintain audit trails

You may request deletion of your data where applicable (see Your Rights).

7) Your rights

Under UK GDPR, you may have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion (in certain cases)

  • Restrict or object to processing (in certain cases)

  • Data portability (where applicable)

  • Withdraw consent (where processing is based on consent)

To exercise your rights, email info@d2gscotland.co.uk with the subject Privacy Enquiry.

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data has been handled improperly.