Privacy Policy

DIY Tools Library CIC ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and the rights you have under UK data protection law (the UK GDPR and the Data Protection Act 2018).

1. Who we are

DIY Tools Library CIC is a Community Interest Company limited by guarantee, registered in England and Wales (Company No. 17341747), based at St Mary's Complex, 13 Waverley St, Bootle, Liverpool L20 4AP. We are the "data controller" for the personal data described in this policy.

2. What personal data we collect

We collect different data depending on how you interact with us:

• Waitlist sign-ups: your email address, which we store in EmailOctopus so we can let you know when membership opens.
• Membership: your name, email address, phone number, and a record of the tools you've borrowed, so we can run your membership and make sure tools are returned and available for other members.
• Payments: if you become a paying member, your card and billing details are collected and processed directly by our payment processor, Stripe. We do not store your full card details ourselves.
• Communications: if you contact us by email, phone or WhatsApp, we'll keep a record of that conversation to help resolve your query and for our own records.
• Donations and volunteering: if you offer to donate tools or volunteer with us, we'll collect the details you provide (such as your name and contact details) to arrange this.

3. How we use your data

• To set up and manage your membership, including processing payments and tracking tool borrowing and returns.
• To send you service-related communications, such as confirmations, reminders about tools due back, or changes to opening hours.
• To send you marketing updates (such as news about workshops or the waitlist) — only where you've agreed to receive these, and you can unsubscribe at any time.
• To respond to enquiries, donations, or volunteering offers.
• To meet our legal and accounting obligations, for example keeping financial records.

4. Our legal basis for processing

Under UK GDPR, we rely on the following legal bases:

• Contract: to provide membership services you've signed up for, including processing payments.
• Consent: for marketing emails and the waitlist — you can withdraw this at any time.
• Legitimate interests: to run and improve our services, keep records, and respond to enquiries, in ways that wouldn't reasonably surprise you.
• Legal obligation: where we need to retain records (e.g. financial data) to comply with the law.

5. Who we share your data with

We don't sell your personal data. We do share it with a small number of trusted service providers who help us run DIY Tools Library CIC:

• EmailOctopus — for managing our waitlist and email communications. EmailOctopus is a UK-incorporated company, and your data is stored on servers based in the EU (Ireland). See EmailOctopus's privacy policy.
• Stripe — for processing membership payments securely. Stripe is a PCI-DSS compliant payment processor. See Stripe's privacy policy.
• Google Analytics — only if you accept cookies on our website, to help us understand how the site is used. See Google's privacy policy.
• Google Maps — only if you accept cookies, or choose to load the map on our "Getting here" section, to show our location. See Google's privacy policy.

We may also share data where required by law, for example with HMRC or law enforcement.

6. How long we keep your data

• Waitlist data is kept until you unsubscribe, or until we've launched and either converted you to a member or the list is no longer needed.
• Membership and borrowing records are kept for the duration of your membership, and for a reasonable period afterwards to resolve any outstanding issues (such as unreturned tools).
• Financial records (linked to payments processed via Stripe) are retained for as long as required by UK tax law — currently up to 6 years.

When data is no longer needed, we delete or anonymise it securely.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data ("right to be forgotten"), where applicable.
• Restrict or object to certain processing.
• Data portability — receive your data in a portable format.
• Withdraw consent at any time, for anything we process based on consent (like marketing emails).

To exercise any of these rights, contact Vjatseslav Mendik at contact@diytoolslibrary.co.uk. We'll respond within one month, as required by law.

If you're unhappy with how we've handled your data, you also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO).

8. Cookies

Cookies are small files stored on your device. We keep the number we use to a minimum, and nothing from Google loads on our website until you choose.

When you first visit our website, a banner asks whether you'd like to accept or decline Google Analytics and the Google Maps embed on our "Getting here" section. You can change your mind at any time using the "Cookie settings" link in the footer of our homepage. You can also load the map once, without accepting cookies generally, using the "Show map" button.

Cookies we use

• Cookie choice (diyToolsConsent): remembers whether you accepted or declined. Stored for 12 months, after which we'll ask again. Doesn't require consent — it's necessary for the site to work as intended.
• Google Analytics (_ga, _ga_XBL0T56KR1): counts visitors and shows how the site is used. Set by Google, only if you accept. Lasts up to 2 years. If you decline, we remove these cookies from your browser.
• Google Maps: cookies set by Google once the map loads, with names and lifetimes controlled by Google. Only set if you accept cookies, or press "Show map".

We don't use advertising or social media tracking cookies.

9. Children

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18.

10. Changes to this policy

We may update this policy from time to time, for example as our services grow. We'll update the "last updated" date at the top of this page, and let you know about any significant changes.

11. How to contact us