Privacy policy

01Who we are

This website (paisleymurals.co.uk) is operated by Paisley on the web, 14 High Street, Paisley, PA1 2BS, United Kingdom. For the purposes of UK GDPR we are the data controller for any personal information you share through this site.

If you need to reach us about anything in this policy, please email enquiries@paisleymurals.co.uk or message us on WhatsApp on 07957 166339.

02What we collect

We only collect the minimum needed to run the site and respond to you. Specifically:

Information you give us

• Your email address, if you sign up to the newsletter at the foot of the homepage.
• Anything you send us by email or WhatsApp — your name, your message, any photos you attach.

Information collected automatically

• Analytics data via Google Analytics 4 — pages visited, approximate location (city level), device type, referrer, and a randomly-generated ID. This is collected only with your consent.
• Server logs kept by our hosting provider — IP address, the page you requested, the time of the request, and the browser you used. This is kept for security and abuse-prevention purposes.

We do not knowingly collect data from children under 13. The trail is open to all ages, but the website is not directed at children.

03How we use it

We use the information above to:

• Show you the website and the interactive map.
• Reply to enquiries you've sent in.
• Send you the trail newsletter, if you signed up — typically four to six emails a year.
• Understand which murals and pages are most popular, so we can improve the route notes.
• Detect and prevent abuse (scraping, denial-of-service, attempted hacks).

We do not use your data for automated decision-making or profiling. We do not sell or rent it to anyone, ever.

04Lawful basis

Under UK GDPR we have to tell you why we're allowed to process your data. The lawful bases we rely on are:

• Consent — for the newsletter and for analytics cookies. You can withdraw this at any time.
• Legitimate interests — for keeping the site secure and replying to messages you've sent us. We've balanced this against your privacy rights and think you'd reasonably expect it.
• Legal obligation — where we have to keep records to comply with the law (rare for a site like this).

05Analytics & cookies

We use Google Analytics 4 (property G-FX1SEQ0ESC) to understand how the site is used. Analytics is loaded only after you consent via the cookie banner. IP addresses are anonymised by Google before storage.

For a full list of cookies, their purpose and how to turn them off, see the cookies page.

06Who we share with

We share data with a small number of trusted providers who help us run the site. These are all bound by data-processing agreements that meet UK GDPR requirements:

• Our web host — stores the website files and serves them to your browser.
• Google Ireland Ltd — provides Google Analytics. Data may be transferred to the United States under the EU–US Data Privacy Framework.
• Our email provider — sends the newsletter and handles enquiries@paisleymurals.co.uk.

We will also disclose data if we are required to by law — for example by a court order or a request from the police under proper authority.

07How long we keep it

• Newsletter sign-ups — until you unsubscribe, plus 30 days of grace.
• Enquiry emails — for up to 2 years after the conversation ends, then deleted.
• Analytics data — 14 months, then automatically deleted by Google.
• Server logs — 90 days.

08Your rights

Under UK GDPR you have the right to:

• Be informed about how we use your data (this page).
• Access the personal data we hold about you.
• Correct anything that's wrong.
• Erase your data ("right to be forgotten").
• Restrict or object to certain processing.
• Port your data to another service.
• Withdraw consent at any time, for anything you've consented to.

To exercise any of these rights, email enquiries@paisleymurals.co.uk. We aim to respond within 14 days and have a legal maximum of one calendar month.

If you're not happy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.

09Security

The site is served over HTTPS. Newsletter sign-ups and enquiry emails are stored on systems protected by passwords, two-factor authentication and reasonable access controls. We can't promise perfect security — no one online can — but we take it seriously.

10Changes

If this policy changes substantively we'll update the date at the top of the page and, where the change is significant, post a notice on the homepage. Minor wording fixes won't be flagged.