Privacy Policy

Last Updated: 15 February 2026 Effective Date: 15 February 2026

Introduction

TARTAN KIPPER LTD (trading as "Tartan Kipper") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and share your information when you visit our website, create an account, or interact with our services. We comply fully with the General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable UK data protection legislation.

1. Cookie Categories and Purposes

We use cookies and similar tracking technologies on our website. Cookies are divided into three categories based on purpose and consent requirements:

1.1 Essential Cookies

Purpose: Core site functionality, security, session management, and user authentication.

Examples: session_id, csrf_token, cookie_consent_status, shopping_cart

Consent Required: No — these cookies are activated automatically as they are necessary for the website to function properly.

Retention: Session duration or up to 12 months for preference storage.

1.2 Analytics Cookies

Purpose: Measuring traffic, understanding user behaviour, and analysing site performance to improve your experience.

Tools: Google Analytics 4

Examples: _ga, _ga_XXXXXXX, _gid, _gat

Consent Required: Yes — activated only after you accept analytics cookies via our cookie consent banner.

Retention: Up to 14 months.

1.3 Marketing and Advertising Cookies

Purpose: Remarketing, personalised ad delivery, conversion tracking, and measuring the effectiveness of advertising campaigns.

Consent Required: Yes — activated only after you accept marketing cookies via our cookie consent banner.

Retention: Up to 540 days (Google Ads default retention period).

2. Marketing Cookies — Full Disclosure

When you consent to marketing cookies, the following technologies and practices are activated on our website:

2.1 Third-Party Ad Serving

Third-party vendors, including Google, use cookies to serve advertisements based on a user's previous visits to this website and other sites on the internet. These advertisements may appear on various websites and platforms you visit after leaving our site.

2.2 Advertising Partners

We work with advertising partners such as Google and Meta (Facebook and Instagram) to deliver advertisements tailored to your interests across various websites, applications, and platforms. These partners use cookies, pixels, and other tracking technologies to understand your browsing behaviour and display relevant advertisements.

2.3 Remarketing Services

We use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our advertisements on other websites, applications, or platforms you visit. This helps us reach individuals who have previously shown interest in our products and services.

2.4 YouTube and Google Display Network

Advertisements may appear across Google services including YouTube, Gmail, Google Search results pages, and the Google Display Network. These advertisements are delivered based on your browsing history and interests as inferred by Google's advertising algorithms.

2.5 Tracking Technologies in Use

We use the following tracking technologies on this website:

  • Cookies (first-party and third-party)
  • Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
  • Device identifiers (browser fingerprint, IP address)
  • Conversion event tags

2.6 Advertising Measurement and Conversion Tracking

We use conversion tracking to understand which advertisements lead to actions on our website, such as product enquiries, account registrations, or purchases. This allows us to measure campaign effectiveness and allocate our advertising budget appropriately. Conversion data may be shared with Google Ads and Meta for campaign optimisation purposes.

2.7 Advertising Technologies Active on This Site

The following advertising and analytics technologies are active when you consent to marketing cookies:

  • Google Ads (gtag.js / Google Tag Manager)
  • Google Analytics 4
  • Google Remarketing Tag
  • Meta Pixel (Facebook and Instagram advertising)

2.8 Opting Out of Personalised Advertising

You may opt out of personalised advertising at any time through the following channels:

Please note that opting out of personalised advertising does not remove advertisements entirely. You will continue to see non-personalised advertisements whilst browsing online.

2.9 Cookie Preference Management

You may manage your cookie preferences at any time by clicking the "Manage Cookie Preferences" link in the footer of our website. This opens a preferences panel where you can accept or reject each category of cookies independently. Essential cookies cannot be disabled as they are necessary for the website to function.

3. Consent Requirements

3.1 Cookie Consent Banner

When you first visit our website, a cookie consent banner will appear offering three options: "Accept All Cookies", "Reject Non-Essential Cookies", and "Manage Preferences". Marketing and analytics cookies are activated only after you click "Accept All Cookies" or individually enable them in the preferences panel. The banner is non-intrusive and does not block access to website content.

3.2 Consent Statement

By clicking "Accept All Cookies", you consent to the storing of cookies on your device for analytics and advertising purposes, including personalised advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

3.3 EEA and UK Users

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

3.4 Withdrawal of Consent

You may withdraw consent at any time by clicking "Manage Cookie Preferences" in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred whilst consent was valid. Once consent is withdrawn, marketing and analytics cookies will be disabled immediately, and no further tracking will occur.

4. Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

4.1 Google LLC

Data Shared: Cookie identifiers, conversion events, anonymised behavioural data, remarketing lists.
Purpose: Ad targeting, campaign measurement, remarketing across Google services.
Governed By: Google's Privacy Policy: https://policies.google.com/privacy

4.2 Meta Platforms, Inc.

Data Shared: Pixel events, conversion data, custom audiences.
Purpose: Ad targeting on Facebook and Instagram, conversion measurement, custom audience creation.
Governed By: Meta's Data Policy: https://www.facebook.com/privacy/policy

We do not sell personal data to third parties. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for advertising targeting and campaign measurement only and is not resold to unaffiliated third parties.

Google and Meta may use this data across their own platforms in accordance with their respective privacy policies. We encourage users to review those policies directly to understand how your data is processed by these third parties.

5. Lead Forms and Contact Requests

When you submit a contact form, request a quote, register for an account, or register interest in our products or services, we collect the information you provide. This typically includes your full name, email address, phone number, and any message or enquiry details you choose to share.

5.1 Legal Basis for Processing

Consent: GDPR Article 6(1)(a) — you provide explicit consent by submitting the form.
Contract Performance: GDPR Article 6(1)(b) — where a service relationship exists or you have requested information necessary to enter into a contract with us.

5.2 Retention Period

Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law or unless you request earlier deletion.

5.3 Your Rights

You may request deletion of your data at any time by contacting us at the email address provided at the end of this policy. We will respond to your request within 30 days and delete your data unless we are legally obligated to retain it.

5.4 Transparency

A link to this Privacy Policy appears adjacent to every submission button on our website. Submitting a form constitutes acknowledgment and acceptance of this policy. We will never share your contact information with unaffiliated third parties for their own marketing purposes without your explicit consent.

6. Google Services and Advertising

This website uses the following Google services:

6.1 Google Analytics 4

Google Analytics collects anonymised usage data, device information, and behavioural signals to help us understand how visitors interact with our website. IP anonymisation is enabled to protect your privacy. Data retention is set to 14 months. You may opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

6.2 Google Ads Conversion Tracking

We use Google Ads conversion tracking to record when a user completes a defined action (such as submitting a form, making a call, or completing a purchase) after clicking one of our advertisements. This data is used solely for measuring advertising campaign performance and is not used for any other purpose.

6.3 Google Remarketing

Google Remarketing allows us to show advertisements to previous visitors across Google's network, including YouTube, Gmail, and the Google Display Network. Remarketing lists are not created from sensitive data categories such as health, financial status, religion, or sexual orientation.

6.4 Google Tag Manager

Google Tag Manager is used to deploy tracking tags on our behalf. No personal data is collected by Google Tag Manager itself; it acts solely as a container for the tags listed above.

Google's advertising products are governed by their Advertising policies: https://policies.google.com/technologies/ads

7. Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The Meta Pixel may record the following data:

  • Page views and time spent on site
  • Specific conversion events (such as form submissions or purchases)
  • Custom audience membership for retargeting purposes

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy for details on how Meta processes your data: https://www.facebook.com/privacy/policy

To manage your advertising preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

8. Prohibited Content Self-Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full.

9. Landing Page Integrity Statement

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website.

10. Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at the address provided at the end of this policy if you believe we have received data from a minor.

11. International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly at the email address provided at the end of this policy.

12. Your Rights Under UK GDPR

If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:

  • Right of Access (Article 15): Request a copy of the personal data we hold about you.
  • Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
  • Right to Erasure (Article 17): Request deletion of your data (also known as the "right to be forgotten").
  • Right to Restriction (Article 18): Request that we limit how we process your data.
  • Right to Data Portability (Article 20): Receive your data in a structured, commonly used, machine-readable format.
  • Right to Object (Article 21): Object to processing based on legitimate interest or direct marketing.
  • Right to Withdraw Consent (Article 7.3): Revoke consent at any time without penalty where processing is based on consent.

To exercise any of these rights, please email us at the contact address provided at the end of this policy. We will respond to your request within 30 days. You also have the right to lodge a complaint with your local supervisory authority:

13. What Data We Collect

We collect the following categories of personal data, depending on how you interact with our website:

  • Full name
  • Email address
  • Phone number
  • IP address
  • Browser type and version
  • Device type and operating system
  • Cookies and tracking identifiers
  • Usage data (pages visited, time on site, click paths)
  • Form submission content
  • Conversion events (form submissions, calls, purchases)

14. Legal Basis for Processing

For each category of data we collect, the legal basis for processing under GDPR Article 6 is as follows:

  • Contact form data: Consent (Article 6.1.a) and contract performance (Article 6.1.b)
  • Analytics data: Consent (Article 6.1.a)
  • Marketing and remarketing data: Consent (Article 6.1.a)
  • Security and fraud prevention: Legitimate interest (Article 6.1.f)

15. Retention Periods

We retain your personal data for the following periods:

  • Contact form submissions: 2 years from date of submission
  • Analytics data (Google Analytics 4): 14 months
  • Marketing cookies (Google Ads): Up to 540 days
  • Email communications: Duration of customer relationship plus 1 year
  • Server logs: 90 days
  • Cookie consent records: 3 years (audit requirement)

After the retention period expires, data is securely deleted or anonymised unless we are legally obligated to retain it for a longer period.

16. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include secure socket layer (SSL) encryption, regular security audits, access controls, and staff training on data protection principles.

Whilst we take all reasonable precautions to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you promptly in the event of any data breach that poses a risk to your rights and freedoms.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any changes will be posted on this page with an updated "Last Updated" date at the top. Material changes will be notified via a prominent banner on our homepage for a minimum of 14 days before taking effect.

We encourage you to review this policy periodically to stay informed about how we protect your data.

18. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

TARTAN KIPPER LTD

Tillywhally House, Milnathort, Kinross, Scotland, KY13 0RN

Email: [email protected]

Phone: +44 1577 863 200

Company Registration Number: SC772324
VAT Number: GB GB 473 2699 58

We will respond to all enquiries within 30 days.