Privacy Policy.

Divine Enterprises ("we," "us," "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services.

We use your personal information for the following purposes:

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Your consent — for cookieless analytics, which you can accept or decline in the banner and withdraw at any time.
• Steps taken at your request before entering a contract, and performance of a contract — to respond to your enquiry, prepare a quotation, and fulfil an order you agree.
• Our legitimate interests — to operate, secure, and improve our website, where not overridden by your rights.
• Legal obligations — where we must retain or disclose information to comply with the law.

The data controller is Divine Enterprises. To exercise your rights (access, correction, deletion, portability, objection, or withdrawal of consent) or to raise a data-protection question, contact us via our Contact page; we respond within one month.

We do not sell your personal information. We may share your information with:

We implement industry-standard security measures to protect your personal information:

• HTTPS / TLS encryption for all data in transit
• Security response headers (Content-Security-Policy, HSTS, and clickjacking, MIME-sniffing, and referrer protections)
• Access controls on the systems that store enquiry data
• Regular reviews and updates

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We do NOT use advertising or cross-site tracking cookies. We use only:

• Strictly-necessary local storage that remembers the details you type into the enquiry form and the items in your cart, so you don't have to retype them. This is required for those features and is never used to track you across sites.
• Privacy-friendly, cookieless analytics (Vercel) to understand overall site usage — loaded ONLY after you accept the consent banner, and never before.

You can decline analytics in the consent banner, and you can clear local storage at any time through your browser settings.

Depending on your location, you may have the following rights:

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

Your information may be transferred to and processed outside your country of residence — in particular to Google LLC and our website host in the United States, and to our export desk in India. Where legally required, we rely on recognised transfer safeguards such as the EU Standard Contractual Clauses together with each provider's Data Processing Addendum. If you use a WhatsApp button, your message is also transferred to Meta Platforms, Inc. in the United States under Meta's own terms.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

We retain your personal information for as long as necessary to:

• Fulfill the purposes outlined in this Privacy Policy
• Comply with legal obligations
• Resolve disputes and enforce agreements

In practice, we keep enquiry and order records for up to 24 months after our most recent contact with you, unless a longer period is required to comply with the law or to resolve a dispute — after which they are deleted or anonymised.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.