Privacy

Who is responsible for your information

The controller of the personal information described here is:

Francis McCafferty, trading as Fly Caledonia, Bannockburn, Stirling.
Email [email protected] or phone 07568 166593.

What we collect, and why

When	What	Why, and the lawful basis
You send an enquiry through a form on the site	Your name, email address, phone number if you give it, the kind of work and your message	To reply and, if you go ahead, to quote for and do the work. Legitimate interests, and taking steps at your request before a contract.
You buy from the shop	Your name, email address, phone number, delivery address and what you ordered	To make and send your order, and to contact you about it. Performance of a contract.
After an order	The order and payment record (not your card details)	Keeping business and tax records. Legal obligation.
You email, phone or message on WhatsApp	Whatever you choose to send	To reply to you. Legitimate interests.

Card and payment details are handled entirely by Stripe. Fly Caledonia never sees your full card number.

We do not use your details for marketing, do not add you to a mailing list, and never sell or share your information for anyone else's marketing.

Who else handles it

A few services are needed to run the website and send orders. Each only gets what it needs for its job:

• Stripe takes payments and sends your receipt. Stripe is responsible for card data under its own privacy policy.
• Cloudflare hosts the website and stores enquiries sent through it.
• Google delivers enquiries to Francis's email and provides his email account. The site's typefaces are also loaded from Google Fonts, which means Google receives your IP address when a page loads.
• Royal Mail or a courier receives your name and delivery address to deliver your parcel.
• Savvy Website, who build and maintain this website, may see enquiry or order information while looking after the site, and only for that purpose.

Some of these companies store data outside the UK, including in the United States. Where they do, the transfer is covered by the safeguards UK data protection law requires, such as the UK extension to the Data Privacy Framework or approved contract clauses.

How long we keep it

Enquiries are kept for as long as they are needed to deal with them and any work that follows, and are then deleted. Order records are kept for as long as the law requires for tax purposes, normally six years. You can ask for your information to be deleted sooner at any time, subject to those tax rules.

Cookies and storage in your browser

This website does not use advertising or analytics cookies, and nothing tracks you across other sites. It does use:

• Your basket, saved in your own browser (local storage) so it is still there if you come back. It never leaves your device until you check out, and clearing your browser data removes it.
• A one-page note in session storage that carries a product name into the enquiry form when you click "Ask about this". It is gone when you close the tab.
• Security cookies that Cloudflare may set to protect the site from attacks and bots.
• Stripe's cookies on the checkout page, which Stripe uses to prevent fraud.

These are all needed for the site and checkout to work, so there is no cookie banner.

Your rights

You have the right to ask for a copy of the information we hold about you, to have it corrected, to have it deleted, to object to or restrict how it is used, and to receive it in a portable form. Email Francis to ask; there is no charge, and you will get a reply within one month.

If you are unhappy with how your information has been handled, please tell Francis first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes

If this policy changes, the new version will be posted here with a new date at the top.