Skip to content

Appearance

Accent palette

Shop the snapshots

Legal

Privacy policy

Last updated 1 October 2026. Written in plain English because a policy nobody reads protects nobody.

Who we are

FunnelThemeShop is operated from 1201 N Orange St, Suite 7160, Wilmington, DE 19801, US. For anything in this policy, write to .

What we collect

Three things, and nothing else:

  • What you send us. The name, email, company and message you type into the contact form, plus the items in your basket if you send them. We need this to reply.
  • What your browser stores locally. Your theme, accent palette, accessibility settings and basket contents live in your own browser's local storage. They never reach our servers, they are not readable by us, and clearing your site data deletes them.
  • Usage measurement through Google Analytics 4, only if you consent. If you accept analytics cookies, Google Analytics records which pages are viewed and which funnel steps are reached, against a random browser ID — never your name or email. The details are under Google Analytics below.

We do not run session recording, we do not build behavioural profiles, and we do not buy or enrich contact data.

Cookies and consent

Nothing beyond strictly necessary storage runs before you choose. The consent banner has three categories:

  • Strictly necessary — your theme, palette, accessibility settings and basket. Always on, because without them the site cannot remember that you asked for larger text.
  • Analytics — page and funnel-step measurement through Google Analytics 4. Off until you turn it on.
  • Marketing — ad measurement so we can tell which snapshots people find and how. Today this only tells Google Analytics it may use Google's advertising storage; we run no separate ad pixels. Off until you turn it on.

Your choice is stored with a version stamp. If we change what the categories cover, the stamp changes and you are asked again. You can reopen the settings at any time from the “Cookie settings” link in the footer.

Google Analytics

Our analytics tool is Google Analytics 4, a service of Google LLC. The script is not even downloaded until you tick Analytics or press “Accept all” — say “Necessary only” and Google never hears about your visit.

Once you say yes, it collects:

  • the pages you view and the funnel steps you reach;
  • your device type, operating system and browser;
  • your approximate location — country and city, worked out from your IP address;
  • the referrer, meaning the site or link that sent you here.

GA4 anonymises IP addresses by design: it does not log or store them. Two first-party cookies are set — _ga, which tells one browser from another, and _ga_5LQ7F3E36K, which keeps track of your session. Both last up to 2 years, in line with Google's defaults. We keep Analytics data for 14 months, after which Google deletes it.

Changed your mind? Open “Cookie settings” in the footer, untick Analytics and save. Nothing further is sent from that point, and you can clear the existing _ga cookies in your browser. Google's own terms are in its privacy policy, and its opt-out browser add-on blocks Google Analytics on every site you visit.

Why we are allowed to hold it

For enquiry data, because you asked us to reply — that is a contract or a legitimate interest depending on where you are. For analytics and marketing, because you consented, and only for as long as that consent stands.

Who else sees it

Our email provider, which delivers the messages we send you. Our form processor, which passes your enquiry to our inbox. Cloudflare, which serves this site and terminates the connection. Google, which runs Google Analytics for us — and only for visitors who accepted analytics. That is the complete list. We do not sell data, we do not share it with advertisers, and we have never had a request to hand it to anyone else.

How long we keep it

  • Enquiries that do not become customers: 24 months, then deleted.
  • Customer records: seven years, because tax law requires it.
  • Google Analytics data: 14 months, then deleted by Google. The cookies themselves expire after up to 2 years, or sooner if you clear them.
  • Anything in your browser: until you clear it. We cannot delete it for you because we cannot see it.

Your rights

Wherever you live, we will honour a request to access, correct, export or delete what we hold about you, and to withdraw consent for analytics or marketing. Email and we will act within 30 days. We will not ask you why, and we will not make you jump through a retention flow.

International transfers

Our providers are US-based. Where data moves from the UK or EEA we rely on the standard contractual clauses those providers publish.

Children

This is a business-to-business site. We do not knowingly collect anything from anyone under 16, and if we learn that we have, we delete it.

Changes

If this policy changes materially, the consent version stamp changes with it and the banner reappears. We do not quietly update a policy and rely on you re-reading it.