2.Sharing personal data with third
In order for 99DIY to provide you with our Services, we work with third parties who perform services on
our behalf and with whom we share personal data to support our Services (“Service Providers”), we may share
personal data to support these Services. Your personal data may be shared with third parties who provide
hosting and server co-location services, communications and content delivery networks, data and cyber
security services, billing and payment processing services, fraud detection and prevention services, web
analytics, email distribution and monitoring services, session recording services, marketing services, our
legal and financial advisors, among others (together – “Third Party Service Providers”). The Third Party
Service Providers may only receive the minimum amount of personal data necessary, depending on their
particular roles and purposes in facilitating and enhancing our Services and business, and may only use it
for such purposes. We will only share personal data to Third Party Service Providers that have undertaken to
comply with obligations set out in applicable data protection laws.
Note that while our Service may contain links to other websites or services, we are not responsible for
each respective website’s or service’s privacy practices, and encourage you to be aware when you leave our
Services and read the privacy statements of each and every website and service you visit. This Privacy &
We may share your personal data with our affiliates (companies within our corporate family), in our
legitimate interests for business purposes.
In certain circumstances, we are required to share information with third parties to comply with legal
requirements or requests, as well as to protect our, or a third party’s, lawful interests. We will also
disclose your information to third parties in and outside your country only to the extent allowed by
applicable law, including:
- to a prospective purchaser or purchaser that acquires all or substantially all
of us or our business;
- to a third party in the event that we sell or buy any business or undergo a
merger, in which case we may
disclose your information to the prospective buyer of such business; and
- to a third party if we sell, buy, merge or partner with other companies or
businesses, undergo a
reorganisation, bankruptcy, or liquidation; or otherwise undertake a business transaction or sell some or
all of our assets. In such transactions, your information may be among the transferred assets.
We may retain your personal data for as long as you have a 99DIY account or any of the above mentioned
legal bases for personal data processing still exists. For example, if you unsubscribe from our marketing,
newsletter, or blog emails, we will stop the processing of the personal data for such purposes. If you
have used our Services without creating a 99DIY account, we will keep your personal data as long as
necessary to comply with our legal obligation to retain information relating to provision of services, for
example, for tax purposes.
After terminating your relationship with us by deleting your 99DIY account or otherwise ceasing to use
our Services, we may continue to store copies of your as necessary to comply with our legal obligations,
to resolve disputes between you and us (or you and your customers), to prevent fraud and abuse, to enforce
our agreements, and/or to protect our legitimate interests (to the extent that we are permitted by the
applicable law to continue to store copies to protect our legitimate interests).
4. Data subject's rights
If you are located in the European Economic Area, in accordance with European Union data protection
regulations, you have certain rights with respect to your personal data.
You have the right to request access to your personal data and to correct, amend, delete, or limit the use
of your personal data by logging into your 99DIY account. Furthermore, if you believe that we have
unlawfully processed your personal data, you have the right to submit a complaint to the contact information
provided below, or to your respective data protection supervisory authority. If you are the Customer of a
Merchant, please contact the Merchant to exercise your data subject’s rights stated above.
5. Information security
We seek to use reasonable organizational, technical, and administrative measures to protect the
confidentiality, integrity, and availability of personal data.
We take reasonable steps to maintain appropriate safeguards to ensure the security, integrity and
privacy of the information you have provided us with. When you place an order or access your account
information, we use a Secure Socket Layer (SSL) encryption which encrypts your information before it is
sent to us, to protect it from unauthorised use. In addition, we will take reasonable steps to ensure that
third party business partners' to whom we transfer any data will provide sufficient protection of that
Unfortunately, no data transmission or storage system is guaranteed to be 100% secure, therefore we
cannot guarantee absolute security of information. We encourage you to take care of the personal data in
your possession that you process online and set strong passwords for your 99DIY account, limit access of
your computer and browser by signing off after you have finished your session, and avoid providing us with
any sensitive information whose disclosure you believe could cause you substantial harm.
All of 99DIY’s authorized personnel involved in the processing of your and your Customer’s personal
data have committed themselves to confidentiality obligations and shall not access or otherwise process
your personal data without your authorization if it's not for the purposes of providing you our Services.
In the event that we experience a personal data breach, we will notify you (as a Merchant or a User) in
compliance with the obligations set out in applicable laws.
6.CCPA Privacy Rights
Under the CCPA, among other rights, California consumers
have the right to:
- Request that a business that collects a consumer's personal data disclose the
categories and specific
pieces of personal data that a business has collected about consumers.
- Request that a business delete any personal data about the consumer that a
business has collected.
- Request that a business that sells a consumer's personal data, not sell the
- If you make a request, we have one month to respond to you. If you would like
to exercise any of these
rights, please contact us.
7.GDPR Data Protection Rights
Under the regulations of the General Data Protection
Regulation ("GDPR") of the EU you have certain rights as a Data Subject. These rights are as follows:
- The right to be informed:
this means we must inform you of how we intend to use your personal data and we do this through the
terms of this Policy.
- The right of access:
this means you have the right to request access to the data we hold about you and we must respond to
those requests within one month. You can do this by sending an email to [email protected].
- The right to rectification:
this means that if you believe some of the date, we hold is incorrect, you have the right to have it
corrected. You can do this by logging into your account with us, or by sending us an email with your
- The right to erasure:
this means you can request that the information we hold be deleted, and we will comply unless we have a
compelling reason not to, in which case you will be informed of same. You can do this by sending an
email to [email protected].
- The right to restrict processing:
this means you can change your communication preferences or opt-out of certain communications. You can
do this by sending an email to [email protected].
- The right of data portability:
this means you can obtain and use the data we hold for your own purposes without explanation. If you
wish to request a copy of your information, contact us at [email protected].
- The right to object:
this means you can file a formal objection with us regarding our use of your information with regard to
third parties, or its processing where our legal basis is our legitimate interest in it. To do this,
please send an email to [email protected].
In addition to the rights above, please rest assured that we will always aim to encrypt and anonymize your
personal information whenever possible. We also have protocols in place in the unlikely event that we suffer
a data breach and we will contact you if your personal information is ever at risk. For more details
regarding our security protections see the section below or visit our website at 99diy.com.
have been uploaded to this page.
Therefore, we encourage you to check this page from time to time. By continuing to use our Services or
otherwise providing personal data to us, after the amendments to this policy have been implemented, you
9. Contact information
complaint about how we process your personal data, please contact us by email at [email protected]