Legal
Privacy policy
Last updated 1 September 2026. Written in plain English because a policy nobody reads protects nobody.
Who we are
FunnelThemeShop is operated from 1201 N Orange St, Suite 7160, Wilmington, DE 19801, US. For anything in this policy, write to [email protected].
What we collect
Three things, and nothing else:
- What you send us. The name, email, company and message you type into the quote form, plus the items in your quote drawer if you send them. We need this to reply.
- What your browser stores locally. Your theme, accent palette, accessibility settings and quote drawer contents live in your own browser's local storage. They never reach our servers, they are not readable by us, and clearing your site data deletes them.
- Anonymous usage measurement, only if you consent. If you accept analytics cookies we record which pages are visited and which funnel steps are reached, without names, emails or advertising identifiers.
We do not run session recording, we do not build behavioural profiles, and we do not buy or enrich contact data.
Cookies and consent
Nothing beyond strictly necessary storage runs before you choose. The consent banner has three categories:
- Strictly necessary — your theme, palette, accessibility settings and quote drawer. Always on, because without them the site cannot remember that you asked for larger text.
- Analytics — anonymous page and funnel-step measurement. Off until you turn it on.
- Marketing — ad measurement so we can tell which snapshots people find and how. Off until you turn it on.
Your choice is stored with a version stamp. If we change what the categories cover, the stamp changes and you are asked again. You can reopen the settings at any time from the “Cookie settings” link in the footer.
Why we are allowed to hold it
For enquiry data, because you asked us to reply — that is a contract or a legitimate interest depending on where you are. For analytics and marketing, because you consented, and only for as long as that consent stands.
Who else sees it
Our email provider, which delivers the messages we send you. Our form processor, which passes your enquiry to our inbox. Cloudflare, which serves this site and terminates the connection. That is the complete list. We do not sell data, we do not share it with advertisers, and we have never had a request to hand it to anyone else.
How long we keep it
- Enquiries that do not become customers: 24 months, then deleted.
- Customer records: seven years, because tax law requires it.
- Analytics: 14 months, aggregated.
- Anything in your browser: until you clear it. We cannot delete it for you because we cannot see it.
Your rights
Wherever you live, we will honour a request to access, correct, export or delete what we hold about you, and to withdraw consent for analytics or marketing. Email [email protected] and we will act within 30 days. We will not ask you why, and we will not make you jump through a retention flow.
International transfers
Our providers are US-based. Where data moves from the UK or EEA we rely on the standard contractual clauses those providers publish.
Children
This is a business-to-business site. We do not knowingly collect anything from anyone under 16, and if we learn that we have, we delete it.
Changes
If this policy changes materially, the consent version stamp changes with it and the banner reappears. We do not quietly update a policy and rely on you re-reading it.