Privacy Policy

The DIY Vault ("The DIY Vault," "we," "us," or "our") provides DIY guides, woodworking resources, newsletters, and related website content. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, subscribe to communications, download resources, follow an affiliate link, or contact us.

This policy applies globally. Local privacy law may give you additional rights that take priority where this policy provides less protection.

Depending on how you interact with us, we may collect:

• Contact information: your name, email address, and information included in messages you send us.
• Subscription information: your email address, signup source, consent record, and communication preferences.
• Device and activity information: IP address, browser and device type, operating system, language, referring and exit pages, pages viewed, links clicked, timestamps, and approximate location derived from IP address.
• Cookie and advertising information: cookie identifiers, campaign and attribution parameters, advertising interactions, and similar online identifiers.
• Affiliate information: referral identifiers and information showing that an affiliate link was followed. Any purchase is completed on the third party’s website; we do not directly receive or store your full payment-card details.

We collect information directly from you, automatically through cookies and similar technologies, and from service providers and advertising or referral partners.

We use personal information to:

• Provide the website, downloads, and content you request.
• Send newsletters or marketing messages where permitted and manage your preferences.
• Respond to questions, support requests, and privacy requests.
• Measure traffic, understand campaign performance, improve content, and maintain website functionality.
• Detect, investigate, and prevent fraud, abuse, security incidents, and technical problems.
• Comply with law, enforce our terms, and establish or defend legal claims.

Where the GDPR, UK GDPR, or similar law applies, we rely on one or more of these legal bases:

• Consent for optional cookies, certain advertising activities, and marketing communications where required. You may withdraw consent at any time.
• Contract when processing is needed to provide something you requested.
• Legitimate interests in operating, securing, analyzing, and improving our website and communications, provided those interests are not overridden by your rights.
• Legal obligation when processing is needed to comply with applicable law.

We and our service providers may use cookies, pixels, local storage, and similar technologies to keep the website working, remember attribution information, measure traffic and campaign performance, and deliver or measure advertising.

These technologies may collect device and activity information and connect your activity across websites or services. Where required, we ask for consent before using non-essential cookies. You can also block or delete cookies in your browser, use available consent controls, or enable recognized browser-based opt-out signals. Blocking some technologies may affect website functionality or attribution.

We send promotional email only where you requested it or where otherwise permitted by law. You may unsubscribe at any time using the link in an email or by contacting us. We may retain a limited suppression record so we can honor your request. Transactional or service messages may still be sent when necessary.

Our practices are intended to respect applicable requirements, including CAN-SPAM, Canada’s Anti-Spam Legislation (CASL), and European and UK electronic-marketing rules.

We may disclose personal information to:

• Vendors that provide hosting, security, analytics, advertising measurement, form processing, email delivery, and technical support.
• Affiliate and referral partners when you follow an affiliate link, including through referral or campaign identifiers.
• Professional advisers, regulators, courts, law enforcement, or other parties where reasonably necessary to comply with law or protect rights, safety, and security.
• A buyer, successor, or adviser in connection with a merger, reorganization, financing, sale, or transfer of all or part of our operations.

We do not sell personal information for money. Some advertising, analytics, or affiliate disclosures may be considered a “sale,” “sharing,” or targeted advertising under certain U.S. state laws. Where applicable, you may opt out as described below.

Some pages contain affiliate links. If you follow one and make a purchase, we may receive a commission at no additional cost to you. Third-party websites operate under their own terms and privacy policies. We are not responsible for their privacy, security, or content, and we encourage you to review their policies before providing information.

We and our service providers may process information in countries other than where you live, including the United States. Those countries may have different data-protection laws. Where required, we use appropriate safeguards, such as approved standard contractual clauses, adequacy decisions, or another lawful transfer mechanism.

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing requested communications, maintaining consent and suppression records, protecting security, resolving disputes, and meeting legal, tax, or accounting obligations. Retention periods vary based on the type of information, the purpose of processing, and applicable law. We delete or de-identify information when it is no longer needed.

Depending on your location and subject to legal exceptions, you may have the right to:

• Know whether we process your personal information and access or receive a copy of it.
• Correct inaccurate information and request deletion.
• Restrict or object to processing and withdraw consent without affecting earlier lawful processing.
• Receive certain information in a portable format.
• Opt out of marketing, targeted advertising, sale or sharing of personal information, and certain profiling.
• Appeal a refusal of your request and lodge a complaint with your local data-protection authority.
• Receive equal service and not be discriminated against for exercising privacy rights.

Residents of California and other U.S. states may also request the categories and sources of personal information collected, the purposes for collection and disclosure, and the categories of recipients. We do not knowingly sell or share personal information of consumers under 16.

To exercise a right, email support@thediyvault.com and describe your request and jurisdiction. We may need to verify your identity. An authorized agent may submit a request where permitted, but we may require proof of authority. We will respond within the period required by applicable law.

Where legally required and technically feasible, we treat a recognized Global Privacy Control signal as a request to opt out of sale, sharing, or targeted advertising for the browser or device sending the signal. Because there is no universal standard for other “Do Not Track” signals, the website may not respond to them.

The website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If local law requires a higher age for valid consent, we will seek parental or guardian consent before processing information based on consent. If you believe a child provided personal information unlawfully, contact us so we can investigate and delete it where appropriate.

European Economic Area, United Kingdom, and Switzerland: you may exercise the rights listed above and complain to the supervisory authority where you live or work. The DIY Vault is the controller of personal information covered by this policy.

Canada: you may request access or correction, withdraw consent subject to legal limits, and complain to the Office of the Privacy Commissioner of Canada or the relevant provincial authority.

United States: rights vary by state. Where an appeal is available, reply to our decision and state that you wish to appeal. California residents may also request information under California’s “Shine the Light” law about certain disclosures for direct marketing, where applicable.

The DIY Vault is responsible for the personal information described in this policy. For questions, complaints, or privacy-rights requests, contact:

The DIY Vault
support@thediyvault.com

If we cannot resolve your concern, you may have the right to contact the privacy or data-protection authority in your jurisdiction.