Privacy Policy
Introduction
TARTAN KIPPER LTD (trading as "Tartan Kipper") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website, create an account, or interact with our services. We comply fully with the General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable UK data protection legislation.
1. Cookie Categories and Purposes
We use cookies and similar tracking technologies on our website. Cookies are divided into three categories based on purpose and consent requirements:
1.1 Essential Cookies
Purpose: Core site functionality, security, session management, and user authentication.
Examples: session_id, csrf_token, cookie_consent_status, shopping_cart
Consent Required: No — these cookies are activated automatically as they are necessary for the website to function properly.
Retention: Session duration or up to 12 months for preference storage.
1.2 Analytics Cookies
Purpose: Measuring traffic, understanding user behaviour, and analysing site performance to improve your experience.
Tools: Google Analytics 4
Examples: _ga, _ga_XXXXXXX, _gid, _gat
Consent Required: Yes — activated only after you accept analytics cookies via our cookie consent banner.
Retention: Up to 14 months.
1.3 Marketing and Advertising Cookies
Purpose: Remarketing, personalised ad delivery, conversion tracking, and measuring the effectiveness of advertising campaigns.
Consent Required: Yes — activated only after you accept marketing cookies via our cookie consent banner.
Retention: Up to 540 days (Google Ads default retention period).
2. Marketing Cookies — Full Disclosure
When you consent to marketing cookies, the following technologies and practices are activated on our website:
2.1 Third-Party Ad Serving
Third-party vendors, including Google, use cookies to serve advertisements based on a user's previous visits to this website and other sites on the internet. These advertisements may appear on various websites and platforms you visit after leaving our site.
2.2 Advertising Partners
We work with advertising partners such as Google and Meta (Facebook and Instagram) to deliver advertisements tailored to your interests across various websites, applications, and platforms. These partners use cookies, pixels, and other tracking technologies to understand your browsing behaviour and display relevant advertisements.
2.3 Remarketing Services
We use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our advertisements on other websites, applications, or platforms you visit. This helps us reach individuals who have previously shown interest in our products and services.
2.4 YouTube and Google Display Network
Advertisements may appear across Google services including YouTube, Gmail, Google Search results pages, and the Google Display Network. These advertisements are delivered based on your browsing history and interests as inferred by Google's advertising algorithms.
2.5 Tracking Technologies in Use
We use the following tracking technologies on this website:
- Cookies (first-party and third-party)
- Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
- Device identifiers (browser fingerprint, IP address)
- Conversion event tags
2.6 Advertising Measurement and Conversion Tracking
We use conversion tracking to understand which advertisements lead to actions on our website, such as product enquiries, account registrations, or purchases. This allows us to measure campaign effectiveness and allocate our advertising budget appropriately. Conversion data may be shared with Google Ads and Meta for campaign optimisation purposes.
2.7 Advertising Technologies Active on This Site
The following advertising and analytics technologies are active when you consent to marketing cookies:
- Google Ads (gtag.js / Google Tag Manager)
- Google Analytics 4
- Google Remarketing Tag
- Meta Pixel (Facebook and Instagram advertising)
2.8 Opting Out of Personalised Advertising
You may opt out of personalised advertising at any time through the following channels:
- Google Ads Settings: https://adssettings.google.com
- Your Online Choices (EU): https://www.youronlinechoices.eu
- Network Advertising Initiative: https://optout.networkadvertising.org
- Digital Advertising Alliance: https://optout.aboutads.info
Please note that opting out of personalised advertising does not remove advertisements entirely. You will continue to see non-personalised advertisements whilst browsing online.
2.9 Cookie Preference Management
You may manage your cookie preferences at any time by clicking the "Manage Cookie Preferences" link in the footer of our website. This opens a preferences panel where you can accept or reject each category of cookies independently. Essential cookies cannot be disabled as they are necessary for the website to function.
3. Consent Requirements
3.1 Cookie Consent Banner
When you first visit our website, a cookie consent banner will appear offering three options: "Accept All Cookies", "Reject Non-Essential Cookies", and "Manage Preferences". Marketing and analytics cookies are activated only after you click "Accept All Cookies" or individually enable them in the preferences panel. The banner is non-intrusive and does not block access to website content.
3.2 Consent Statement
By clicking "Accept All Cookies", you consent to the storing of cookies on your device for analytics and advertising purposes, including personalised advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.
3.3 EEA and UK Users
Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.
3.4 Withdrawal of Consent
You may withdraw consent at any time by clicking "Manage Cookie Preferences" in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred whilst consent was valid. Once consent is withdrawn, marketing and analytics cookies will be disabled immediately, and no further tracking will occur.
4. Data Sharing with Advertising Partners
We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:
4.1 Google LLC
Data Shared: Cookie identifiers, conversion
events, anonymised behavioural data, remarketing lists.
Purpose:
Ad targeting, campaign measurement, remarketing across Google
services.
Governed By: Google's Privacy
Policy:
https://policies.google.com/privacy
4.2 Meta Platforms, Inc.
Data Shared: Pixel events, conversion data,
custom audiences.
Purpose: Ad targeting on
Facebook and Instagram, conversion measurement, custom audience
creation.
Governed By: Meta's Data Policy:
https://www.facebook.com/privacy/policy
We do not sell personal data to third parties. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for advertising targeting and campaign measurement only and is not resold to unaffiliated third parties.
Google and Meta may use this data across their own platforms in accordance with their respective privacy policies. We encourage users to review those policies directly to understand how your data is processed by these third parties.
5. Lead Forms and Contact Requests
When you submit a contact form, request a quote, register for an account, or register interest in our products or services, we collect the information you provide. This typically includes your full name, email address, phone number, and any message or enquiry details you choose to share.
5.1 Legal Basis for Processing
Consent: GDPR Article 6(1)(a) — you provide
explicit consent by submitting the form.
Contract Performance:
GDPR Article 6(1)(b) — where a service relationship exists or you
have requested information necessary to enter into a contract with
us.
5.2 Retention Period
Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law or unless you request earlier deletion.
5.3 Your Rights
You may request deletion of your data at any time by contacting us at the email address provided at the end of this policy. We will respond to your request within 30 days and delete your data unless we are legally obligated to retain it.
5.4 Transparency
A link to this Privacy Policy appears adjacent to every submission button on our website. Submitting a form constitutes acknowledgment and acceptance of this policy. We will never share your contact information with unaffiliated third parties for their own marketing purposes without your explicit consent.
6. Google Services and Advertising
This website uses the following Google services:
6.1 Google Analytics 4
Google Analytics collects anonymised usage data, device information, and behavioural signals to help us understand how visitors interact with our website. IP anonymisation is enabled to protect your privacy. Data retention is set to 14 months. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout
6.2 Google Ads Conversion Tracking
We use Google Ads conversion tracking to record when a user completes a defined action (such as submitting a form, making a call, or completing a purchase) after clicking one of our advertisements. This data is used solely for measuring advertising campaign performance and is not used for any other purpose.
6.3 Google Remarketing
Google Remarketing allows us to show advertisements to previous visitors across Google's network, including YouTube, Gmail, and the Google Display Network. Remarketing lists are not created from sensitive data categories such as health, financial status, religion, or sexual orientation.
6.4 Google Tag Manager
Google Tag Manager is used to deploy tracking tags on our behalf. No personal data is collected by Google Tag Manager itself; it acts solely as a container for the tags listed above.
Google's advertising products are governed by their Advertising policies: https://policies.google.com/technologies/ads
7. Meta Advertising Services
This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The Meta Pixel may record the following data:
- Page views and time spent on site
- Specific conversion events (such as form submissions or purchases)
- Custom audience membership for retargeting purposes
We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.
Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy for details on how Meta processes your data: https://www.facebook.com/privacy/policy
To manage your advertising preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/
8. Prohibited Content Self-Declaration
This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.
9. Landing Page Integrity Statement
The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.
10. Children's Privacy
This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address provided at the end of this policy if you believe we have received data from a minor.
11. International Data Transfers
Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.
These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly at the email address provided at the end of this policy.
12. Your Rights Under UK GDPR
If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:
- Right of Access (Article 15): Request a copy of the personal data we hold about you.
- Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
- Right to Erasure (Article 17): Request deletion of your data (also known as the "right to be forgotten").
- Right to Restriction (Article 18): Request that we limit how we process your data.
- Right to Data Portability (Article 20): Receive your data in a structured, commonly used, machine-readable format.
- Right to Object (Article 21): Object to processing based on legitimate interest or direct marketing.
- Right to Withdraw Consent (Article 7.3): Revoke consent at any time without penalty where processing is based on consent.
To exercise any of these rights, please email us at the contact address provided at the end of this policy. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local supervisory authority:
- EU users: https://edpb.europa.eu
- UK users: Information Commissioner's Office (ICO): https://ico.org.uk
13. What Data We Collect
We collect the following categories of personal data, depending on how you interact with our website:
- Full name
- Email address
- Phone number
- IP address
- Browser type and version
- Device type and operating system
- Cookies and tracking identifiers
- Usage data (pages visited, time on site, click paths)
- Form submission content
- Conversion events (form submissions, calls, purchases)
14. Legal Basis for Processing
For each category of data we collect, the legal basis for processing under GDPR Article 6 is as follows:
- Contact form data: Consent (Article 6.1.a) and contract performance (Article 6.1.b)
- Analytics data: Consent (Article 6.1.a)
- Marketing and remarketing data: Consent (Article 6.1.a)
- Security and fraud prevention: Legitimate interest (Article 6.1.f)
15. Retention Periods
We retain your personal data for the following periods:
- Contact form submissions: 2 years from date of submission
- Analytics data (Google Analytics 4): 14 months
- Marketing cookies (Google Ads): Up to 540 days
- Email communications: Duration of customer relationship plus 1 year
- Server logs: 90 days
- Cookie consent records: 3 years (audit requirement)
After the retention period expires, data is securely deleted or anonymised unless we are legally obligated to retain it for a longer period.
16. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include secure socket layer (SSL) encryption, regular security audits, access controls, and staff training on data protection principles.
Whilst we take all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you promptly in the event of any data breach that poses a risk to your rights and freedoms.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any changes will be posted on this page with an updated "Last Updated" date at the top. Material changes will be notified via a prominent banner on our homepage for a minimum of 14 days before taking effect.
We encourage you to review this policy periodically to stay informed about how we protect your data.
18. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
TARTAN KIPPER LTD
Tillywhally House, Milnathort, Kinross, Scotland, KY13 0RN
Email: [email protected]
Phone: +44 1577 863 200
Company Registration Number: SC772324
VAT Number: GB GB 473
2699 58
We will respond to all enquiries within 30 days.