Privacy

This site runs no third-party trackers, shows no advertising, and sets exactly one cookie — the one that remembers your basket. What follows is the whole of it.

What we count

We keep our own count of which pages are looked at, so we know which decals people are after. For each view we record the page address, the day, the site you arrived from (the domain only, never the full address), whether the screen was a phone or a desktop, and the country your connection appears to be in.

We do not store your IP address. It is combined with your browser’s user-agent string and a secret that is thrown away and replaced every midnight, and only the resulting hash is kept. That is enough to count two page views by one person as one visit today, and useless for recognising anybody tomorrow — which is the point. No cookie is involved in any of it.

The one cookie

Putting something in the basket sets a cookie called cd_basket. It holds the product numbers and quantities you chose, nothing else — no name, no identifier, nothing that follows you to another site — and it exists only so your basket is still there when you move between pages. It is a strictly necessary cookie: without it there is no shop, which is why the law does not require us to ask permission for it, and why this site has no cookie banner. Emptying your basket clears it, and so does clearing your browser’s cookies.

If your browser sends a Do Not Track or Global Privacy Control signal, we honour it and count nothing at all.

Searches

We keep the words typed into the search box, with no visitor attached to them, and read them as a list of what people wanted. If a search finds nothing it is a hint we should stock something, and that is the main reason this site keeps any statistics at all.

When you contact us

The contact form sends us your name, email address, any phone number you give and your message. We keep it to answer you and to remember what was agreed if you order. We do not add you to a mailing list and we do not pass it to anybody.

When you buy

We keep your name, email address, delivery address, any telephone number you gave us and any note you added, together with what you ordered and what you paid. We need it to make up the parcel, to send it, to answer you afterwards and to keep the records HMRC requires of anybody who sells things.

We never see your card. The payment itself happens on PayPal’s own pages under their privacy statement. Your card number never reaches this site and is never stored here. What comes back to us from PayPal is a payment reference, the amount, and confirmation that it cleared — and, because PayPal supplies it with the payment, the name and address on the PayPal account, which we use to check the delivery address matches.

Your order lives at a web address containing its reference. That address is the only way in, it is never indexed by search engines, and it is why the confirmation email asks you to treat the link as you would a receipt.

How long we keep things

• Individual page views: 90 days, then only the daily totals remain.
• Daily totals: kept — they are counts, with nothing personal in them.
• Enquiries: kept while they are useful, and deleted on request.
• Orders: six years from the end of the tax year they fall in, because that is how long HMRC requires a seller to keep its records. We cannot delete an order inside that period, but we can and will delete anything in it that is not part of the record — your telephone number and your note.

Other people’s servers

This site is hosted in the EU/UK by Railway and sits behind Cloudflare, which processes requests to keep the site up and to protect it from abuse. Payments are taken by PayPal. Emails from the contact form and your order confirmation are sent through Resend. Some product photographs are still served from the image servers we first published them on until we have copied them here.

Your rights, and asking us

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Email sales@caravan-decals.com and we will deal with it inside a month. If you are not happy with how we handle it, you can complain to the Information Commissioner’s Office at ico.org.uk.