Privacy Policy

Effective Date: January 21, 2026

At Dycoat, we operate globally, serving makers in North America, Europe, and Australia. We respect your privacy and are committed to protecting your personal data, no matter where you reside. This Privacy Policy explains how we collect, use, and share your personal information when you visit or make a purchase from Dycoat, in compliance with US laws, the GDPR (Europe), and other international regulations.

1. Information We Collect

To fulfill your order and handle international customs clearance (DDP), we collect the following:

A. Information You Provide

• Identity Data: Your name.

• Contact Data: Billing address, shipping address, email address, and phone number.

  • Important: A valid Phone Number is mandatory for all international shipments. Carriers (DHL/FedEx) and Customs Brokers use this to contact you regarding delivery updates.

• Payment Information: We do not store your credit card details. Payment is processed securely by our third-party gateways (Stripe, PayPal, etc.).

B. Information Collected Automatically

• Device Info: IP address, browser type, time zone, and cookies. This helps us optimize our website for your specific location (e.g., showing the correct currency).

2. How We Use Your Information

We use your personal data for the following purposes:

• Order Fulfillment: To pack and ship your wood legs.

• Customs & Tax Payments (DDP): Since we pay Import Duties and Taxes on your behalf, we must provide your commercial invoice data (Name, Address, Item Value) to international customs authorities and our logistics brokers.

• Communication: To send you order confirmations, tracking numbers, and delivery updates.

• Fraud Prevention: To screen orders for potential risk (using your IP address and billing info).

• Marketing: Only with your explicit consent (e.g., subscribing to our newsletter), we may email you about new wood species or design tips. You can unsubscribe at any time.

3. Sharing Your Information

We never sell your data. However, to operate a global business, we share data with trusted partners:

• Logistics & Customs: We share your shipping details with carriers (FedEx, UPS, DHL) and Customs Brokers to facilitate the DDP (Delivered Duty Paid) process. This is a legal requirement for international trade.

• E-commerce Platform: Our store is hosted on Shopify, which securely stores your data.

• Payment Processors: To securely handle your transaction.

• Legal Compliance: We may disclose information to comply with applicable laws and regulations (e.g., tax authorities).

4. International Data Transfers (GDPR Notice)

Dycoat is headquartered in the United States (New York).

• If you are visiting from the European Economic Area (EEA), United Kingdom, or Australia, please note that your personal information will be transferred to and processed in the United States.

• We take all necessary steps to ensure your data is treated securely and in accordance with this policy and applicable laws.

5. Your Rights (GDPR & CCPA)

Depending on your location, you have specific rights regarding your personal data:

• Right to Access: You can request a copy of the personal data we hold about you.

• Right to Rectification: You can ask us to correct incorrect or incomplete data.

• Right to Erasure (“Right to be Forgotten”): You can ask us to delete your personal data (unless we are required to keep it for tax/accounting purposes).

• Right to Opt-Out: You can opt-out of marketing communications at any time.

How to Exercise Your Rights: To submit a request, please email us at support@dycoat.com. We will verify your identity before processing the request.

6. Cookies

We use cookies to improve your browsing experience (e.g., keeping items in your cart).

• You can control and manage cookies through your browser settings. However, removing cookies may affect your ability to use our checkout.

7. Data Retention

We retain your order information for our records to:

• Handle returns and warranty claims.

• Comply with tax and accounting laws (Proof of Export/Import).

• We will maintain this information unless and until you ask us to delete it (subject to legal retention periods).

8. Age Limitation

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices (e.g., adding new shipping regions) or for other operational, legal, or regulatory reasons.

10. Contact Us

For more information about our privacy practices or to exercise your data rights, please contact us:

• Email: support@dycoat.com

• Address: 43 Linden Ave, Pelham, NY 10803, United States

• Support Hours: Monday–Friday, 9:00 AM – 5:00 PM (EST)