Privacy Policy

1. Introduction

Welcome to SherpaShed ("we", "our", "us"). This Privacy Policy explains how we collect, use, and protect your information when you visit our website at www.sherpashed.co.uk (the "Site").

We are committed to protecting your privacy and complying with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our Site, you agree to the collection and use of information in accordance with this policy.

2. Who We Are

Data Controller:

SherpaShed

Email: [email protected]

3. Information We Collect

3.1 Information Collected Automatically

When you visit our Site, we automatically collect certain technical information:

• IP address (anonymized)
• Browser type and version
• Device information (type, operating system)
• Pages visited and time spent on pages
• Referring website/source
• Date and time of access

This information is collected through server logs and cookies. For detailed information about cookies, please see our Cookie Policy.

3.2 Information You Provide

Currently, we do not collect any personal information directly from users. We do not require account creation, email subscription, or form submission. If we introduce such features in the future, we will update this policy accordingly.

4. How We Use Your Information

We use the automatically collected information for the following purposes:

• To operate and maintain our Site
• To improve user experience and Site functionality
• To analyze Site usage patterns and trends
• To ensure Site security and prevent fraudulent activity
• To comply with legal obligations

Our legal basis for processing this data is our legitimate interest in operating and improving our Site, as well as ensuring its security.

5. Third-Party Services

5.1 Cloudflare

We use Cloudflare as our content delivery network (CDN) and security provider. Cloudflare processes certain data on our behalf, including IP addresses, for the purposes of providing CDN services and protecting our Site from malicious activity.

Cloudflare's privacy policy can be found at: Cloudflare Privacy Policy

5.2 Hetzner Hosting

Our Site is hosted on servers provided by Hetzner Online GmbH, located in Germany. Hetzner processes certain data (such as server logs) as part of providing hosting services.

Hetzner's privacy policy can be found at: Hetzner Privacy Policy

5.3 Price Data Collection

We collect price information from third-party merchant websites through automated web scraping. We do not share any user data with these merchants unless you click through to their sites. When you visit a merchant's website through our links, you will be subject to that merchant's privacy policy.

6. Affiliate Relationships (Future Implementation)

We may implement affiliate links in the future, which means we may earn a commission if you make a purchase through our links. We will update this policy when such features are added. Any affiliate relationships will be clearly disclosed.

When you click on merchant links, you will be subject to the privacy policies and terms of those third-party websites.

7. Data Storage and Security

We take appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Security measures include:

• Use of HTTPS encryption for data transmission
• Cloudflare's security features including DDoS protection
• Secure hosting infrastructure with Hetzner
• Regular security updates and monitoring

Data is stored on secure servers located in Germany (EU), which provides appropriate protections under UK GDPR.

8. Data Retention

We retain automatically collected data (such as server logs) for a limited period necessary to fulfill the purposes outlined in this policy:

• Server logs: Up to 90 days
• Cloudflare security logs: As per Cloudflare's retention policies

After these periods, data is automatically deleted or anonymized.

9. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Request transfer of your data
• Right to object: Object to processing of your data

To exercise any of these rights, please contact us using the details in Section 2 above.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your data appropriately. Visit www.ico.org.uk for more information.

10. International Data Transfers

Our hosting provider (Hetzner) is located in Germany, which is within the European Economic Area (EEA) and provides adequate data protection. Cloudflare operates globally but has appropriate safeguards in place for international data transfers, including Standard Contractual Clauses approved by the EU Commission.

11. Children's Privacy

Our Site is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will update the "Effective Date" at the top of this policy.

We encourage you to review this policy periodically. Your continued use of the Site after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]

We will respond to your inquiry within 30 days as required by UK GDPR.

14. Acknowledgment and Consent

By using our Site, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.