Boatshed Sailmakers
Home / Privacy policy

Privacy policy

How we collect, use and look after your personal information when you visit our website, buy from our shop or get in touch.

Last updated 21 October 2026 Questions? info@theboatshedwales.co.uk

This policy explains how Boatshed Sailmakers collects, uses and protects personal information when you visit this website, buy from our online shop, ask us for a quote or bring us work. We’re responsible for that information as the “data controller” under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Who we are

Boatshed Sailmakers is a sail loft at Sail Loft East, Outer Harbour, Pwllheli, Gwynedd LL53 5AY.

If you have a question about this policy or how we use your information, email info@theboatshedwales.co.uk, call 01758 613266 or write to us at the address above.

Information we collect

When you buy from our shop

Your name, billing and delivery addresses, email address, phone number, what you’ve ordered, whether you chose delivery or collection, and any notes you add at checkout, such as details about your boat.

When you pay

Payments are handled by our payment providers (see who we share it with). We see the payment method, the last four digits of your card and whether the payment went through. We never see or store your full card number.

When you contact us or ask for a quote

Your name, email address and phone number, the service you’re interested in, and anything you tell us or send us about your boat, including measurements and photos. This applies whether you use our contact form, email, phone, text or Facebook.

When you bring us work or store a boat with us

Your contact details, details of your boat, sails or covers, the work we carry out and what you’ve paid.

When you use our website

Technical information such as your IP address, browser, device and the pages you visit. Some of this is collected through cookies, and we only use analytics and advertising cookies if you agree to them. See Cookies.

How we use it and why

We can only use your personal information when the law gives us a reason, called a “lawful basis”. Here’s what we use it for and the basis we rely on.

We don’t sell your personal information, and we don’t make decisions about you based only on automated processing.

If you don’t give us the information we need for an order, such as a delivery address, we won’t be able to complete it.

Analytics and advertising

These tools only run if you allow them in our cookie banner, and you can change your mind at any time.

Google Analytics

We use Google Analytics 4, provided by Google Ireland Limited, to see how many people visit our website, which pages they look at, how they found us and which products are viewed, added to the basket and bought. Google Analytics doesn’t log or store IP addresses, and we only look at the results in aggregate. Google explains how it uses this information at policies.google.com/technologies/partner-sites.

Meta Pixel

We use the Meta Pixel, provided by Meta Platforms Ireland Limited, to measure our adverts on Facebook and Instagram and to show adverts to people who’ve visited our website. If you allow it, the pixel tells Meta which pages you’ve visited and what you’ve done on them, such as viewing a product, adding it to your basket or placing an order, along with technical information about your browser. If you’re logged in to Facebook or Instagram, Meta may link this to your account.

We and Meta are joint controllers for collecting this information on our website and sending it to Meta. Meta is responsible for what it does with the information after that, which is explained in Meta’s privacy policy. You can also control the adverts you see in your Facebook and Instagram ad settings.

Who we share it with

We only share your information when we need to, and only with organisations that look after it properly:

  • Payment providers: WooPayments (provided by Automattic and processed by Stripe) for card, Apple Pay and Google Pay payments. If you choose Klarna, Clearpay or Amazon Pay, that provider processes your payment and may run its own identity or credit checks under its own privacy policy.
  • Couriers: your name, delivery address, phone number and email address, so they can deliver your order and send you delivery updates.
  • Website and shop services: WP Engine, which hosts our website, and Automattic, which provides the WooCommerce services that run our shop.
  • Google: Google Analytics (only with your consent), Google reCAPTCHA, which protects our contact form from spam, and Google Maps, which shows the map on our contact page.
  • Meta: the Meta Pixel (only with your consent).
  • Professional advisers and authorities: our accountant, insurers and legal advisers where needed, and HMRC, the police or other authorities where the law requires it.

If our business is ever sold or reorganised, customer records may pass to the new owner, who would have to use them in line with this policy.

International transfers

Some of these providers, including Google, Meta, Automattic, Stripe and WP Engine, store or process information outside the UK, mainly in the United States and the European Economic Area. Where that happens, the transfer is protected by UK adequacy regulations (including the UK–US Data Bridge for certified companies) or by contracts approved under UK law, such as the International Data Transfer Agreement.

How long we keep it

  • Orders, invoices and payment records: six years from the end of the financial year they relate to, because tax law requires it.
  • Enquiries and quotes that don’t lead to an order: up to two years, then deleted.
  • Records of sails, covers and boats we’ve worked on: up to six years after we last worked for you, so we can help with repairs, alterations and repeat orders. Ask us if you’d like them deleted sooner.
  • Google Analytics data: up to 14 months.
  • Your cookie choices: 12 months, after which we’ll ask again.
  • Email marketing: until you unsubscribe.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct anything that’s wrong or incomplete;
  • ask us to delete your information, unless we have to keep it, for example for tax records;
  • ask us to restrict how we use it, or object to us using it based on our legitimate interests;
  • object to direct marketing at any time;
  • ask for the information you gave us in a format you can pass to someone else;
  • withdraw your consent at any time, for example by changing your cookie settings or unsubscribing from emails.

To use any of these rights, email info@theboatshedwales.co.uk. It’s free, and we’ll reply within one month. We may need to confirm your identity first.

If you’re unhappy with how we’ve handled your information, please tell us so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

Cookies

Cookies are small text files stored on your device when you visit a website. We use the cookies our website needs to work without asking. We only use analytics and marketing cookies if you agree to them in our cookie banner. You can change your choice at any time by selecting Cookie settings at the bottom of any page, and you can delete cookies in your browser settings.

Strictly necessary

Analytics (only with your consent)

Marketing (only with your consent)

The map on our contact page comes from Google Maps, and Google may set its own cookies when it loads. If you follow a link to our Facebook page, Meta’s own cookies and privacy policy apply.

Keeping it safe

Our website uses an encrypted (HTTPS) connection, payments are handled by PCI DSS-compliant payment providers, and only people who need your information to do their job can see it.

Our shop is for adults, and we don’t knowingly collect information from children.

Changes to this policy

We’ll update this policy when the way we use personal information changes. The date at the top of the page shows when it was last updated.