This policy describes what DIY KIT FZE LLC collects when you use diykit.ae,
why we collect it, who it is shared with, and what you can ask us to do about it.
It describes what the website actually does rather than a general statement of intent.
1. Information you give us
- Order and account information — name, email address, telephone number,
delivery address and emirate, and the contents and history of your orders.
- Business and institutional details — company or university name, contact
person, trade licence or TRN and purchase-order references, where you buy on account
or ask for a quotation.
- Correspondence — messages you send us by email, the contact form,
WhatsApp, or the on-site assistant, together with our replies.
- Returns and support — the reason for a return, and any photographs or
fault descriptions you provide.
- Newsletter sign-ups — if you join our mailing list we store the email
address you gave, so we can send new-stock alerts and offers and so we can stop when
you unsubscribe.
Payment card details are entered on the payment provider's own page and are never received
or stored by this website.
2. Information collected automatically
When you browse the site, whether or not you buy anything, our own server records:
- the pages, products, categories and kits you view, and when;
- the words you type into the site search, and how many results came back;
- cart and checkout activity — items added, reaching checkout, submitting an order,
and whether the order succeeded or the reason it did not;
- a visitor token, a random identifier stored in your browser so that
several page views can be recognised as one visit;
- your IP address in hashed form. Our analytics records store a one-way
hash rather than the address itself, so the address is not kept in readable form in
that table. We should be straightforward about the limits of this: the hash is still a
stable identifier derived from your connection, and standard web-server access logs
kept by our hosting provider may hold raw IP addresses for a short period for security
and fault diagnosis;
- your browser's user-agent string, the page or site you arrived from, and any campaign
tags in the link you followed (utm_source, utm_medium, utm_campaign, gclid, fbclid);
- an approximate country, region and city, derived from network-level information
supplied to our server. This is city-level at best and is not a precise location.
Traffic we identify as automated — search-engine crawlers, bots and monitoring tools — and
visits made by our own staff are excluded from these records.
2a. The on-site assistant
This site offers a chat assistant. You do not have to use it, and you do not need an
account to browse or buy without it. If you do use it, please understand what happens:
- What you type, and the assistant's replies, are stored on our systems
so the conversation has context and so we can review answers for accuracy.
- Many questions are answered from our own stored knowledge base, our product data or
your own order records, without contacting anyone outside DIY KIT. Where the assistant
cannot answer that way, your message is sent to a third-party AI provider
— at present OpenAI — whose service is operated outside the United Arab
Emirates, and is processed there to generate the reply. You will not be told which of
the two happened for a given message, so please assume any message you send may be
processed by that provider. If we change provider we will update this page.
- Where you are signed in, the assistant may look up your own orders to answer questions
about them.
Please do not type card numbers, passwords or identity-document numbers into the chat.
We never ask for them there, and the assistant has no need of them.
3. Why we use it
- To fulfil your order — taking payment, arranging delivery, issuing
invoices, and handling returns, refunds and warranty claims.
- To support you — answering questions, and keeping a record of what was
agreed.
- To prevent fraud and abuse — checking suspicious orders and limiting
repeated automated attempts.
- To run and improve the shop — understanding which products are viewed,
what customers search for and cannot find, and where people abandon the checkout,
so we can stock the right parts and fix what is broken.
- To meet legal and accounting obligations — retaining records we are
required to keep.
We do not use your data to make automated decisions that produce legal or similarly
significant effects about you, and we do not build profiles to predict your behaviour
beyond the aggregate reporting described above.
4. Who we share it with
We do not sell personal data. We share only what a provider needs in order to do its job:
- Payment providers — to take and verify payment, and to process refunds.
- Delivery companies — your name, address and telephone number, so the
parcel can reach you.
- Google — Google Analytics for website measurement, and Google Merchant
Center and Search Console for product listings and search performance. See the
Cookies & Tracking section below.
- OpenAI — processes the messages you send to the on-site assistant in
order to generate its replies, as described above.
- Marketplaces — where you buy through Amazon.ae or Noon rather than
this website, that marketplace's own privacy policy governs the order data it holds.
- Professional advisers and authorities — where we are required to
disclose information by law, or to establish or defend a legal claim.
5. Where your data is processed
Our website and order records are hosted on servers operated for us under contract.
Some of the providers above — in particular Google, our payment provider, and the AI
provider behind the on-site assistant — process data outside the United Arab
Emirates, including in the United States and the European Union.
Where that happens we rely on the provider's own contractual data-protection commitments.
6. How long we keep it
- Orders, invoices and accounting records — for as long as UAE
commercial and tax law requires us to retain them.
- Account details — while your account is open, and for a reasonable
period afterwards to handle warranty or return claims.
- Website analytics records — up to 24 months, after which they are
deleted or reduced to aggregate counts that identify no individual.
- Support correspondence — up to 24 months, unless it relates to an
order or claim we must keep for longer.
7. Your choices and your rights
You may ask us to:
- confirm what personal data we hold about you, and give you a copy;
- correct information that is wrong or out of date;
- delete data we no longer need to keep — noting that invoices and accounting records
cannot be deleted while the law requires us to retain them;
- stop sending you marketing email, which you can also do from the unsubscribe link in
any such message;
- stop using your browsing data for analytics — see Cookies & Tracking below.
To make any of these requests, write to
contactus@diykit.ae from the email address on the account, so that we can be sure the request is yours.
We will respond within 30 days. If you are not satisfied with our answer, you may raise
the matter with the competent data protection authority in the United Arab Emirates.
8. Security
The site is served over an encrypted connection. Access to order and customer records is
restricted to staff who need it, card details never reach our systems, and stored IP
addresses are hashed rather than kept in readable form. No system can be guaranteed
completely secure; if a breach affects your personal data we will act on it and notify you
and the relevant authority where we are required to.
9. Children
This shop sells electronic components and kits to hobbyists, schools and universities.
It is not directed at children, and accounts are intended for adults. Where products are
bought for classroom use, the order relationship is with the school or institution and its
staff, not with a pupil.
10. Changes to this policy
If we change how we use personal data we will update this page and the "last updated"
date shown at the top. Material changes will be highlighted on the site.