PRIVACY POLICY
David Lloyd Tools Trading name of York and Beyond Last updated: 30 April 2026
1. Who We Are
David Lloyd Tools is a trading name of York and Beyond, a sole trader business based in England. Our website address is davidlloydtools.com. We are the data controller for the personal information we collect about you.
2. What Information We Collect
When you place an order or create an account we collect:
- Your name and contact details (email address, phone number)
- Your billing and delivery address
- Payment information (processed securely via PayPal — we do not store card details)
- Your order history and correspondence with us
When you browse our website we may also collect:
- IP address and browser type
- Pages visited and time spent on the site
- Cookies (see Section 7)
3. How We Use Your Information
We use your personal data to:
- Process and fulfil your orders
- Send you order confirmations and updates
- Handle returns, refunds and customer service queries
- Comply with our legal obligations
- Improve our website and customer experience
We will only contact you for marketing purposes if you have given us explicit permission to do so.
4. Legal Basis for Processing
We process your personal data on the following legal bases:
- Contract — to fulfil orders you have placed with us
- Legal obligation — to comply with applicable laws
- Legitimate interests — to improve our services and protect our business
5. Sharing Your Information
We do not sell or rent your personal data to third parties. We may share your data with:
- PayPal — to process payments securely
- Delivery carriers — to fulfil and deliver your order
- IT service providers — who host and maintain our website, subject to strict data processing agreements
We will only disclose your information to others where required by law or to protect our legal rights.
6. How Long We Keep Your Data
We retain your personal data for as long as necessary to fulfil the purposes it was collected for, including for legal, accounting and reporting requirements. Order data is typically retained for 6 years in line with HMRC requirements.
Inactive customer accounts are deleted after 24 months of inactivity.
7. Cookies
Our website uses cookies to improve your browsing experience. These include essential cookies required for the site and shopping basket to function, and analytics cookies to help us understand how visitors use the site.
You can control cookie settings through your browser. Note that disabling certain cookies may affect the functionality of the website.
8. Your Rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal obligations)
- Object to or restrict our processing of your data
- Request a copy of your data in a portable format
To exercise any of these rights please contact us via the contact page on our website. We will respond within 30 days.
9. Data Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. Payments are processed via PayPal’s secure encrypted systems and we do not store payment card details.
10. Third Party Links
Our website may contain links to third party websites. We are not responsible for the privacy practices of those sites and recommend you review their privacy policies separately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The current version will always be available on this page with the date of last update.
12. Contact and Complaints
For any privacy-related queries please contact us via the contact page on our website.
If you are unhappy with how we handle your data you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.