Route500 Scotland
Privacy notice
Last updated 10 October 2026
1. Who we are
Route500 Scotland, 80 George Street, Edinburgh, EH2 3BU, is the controller of the personal information described here. Contact us at [email protected] about anything in this notice. It covers route500scotland.com, our shop and our emails.
2. What we collect
When you order: your name, email address, delivery address and phone number if you give one, what you bought, the price, the date, and the payment confirmation from Stripe. Your card details go straight to Stripe. We never see or store them.
When you contact us: what you write and our reply, and any photos you send about a faulty item.
When you visit: your IP address, browser and device type, the pages you view and how you arrived. If you came from a Google advert and accepted advertising cookies, this includes the click identifier Google adds to the link.
3. Why we use it
| Purpose | Our legal basis |
|---|---|
| Taking your order, delivering it, support, refunds and returns | Performing our contract with you |
| Keeping sales records for accounts and tax | Legal obligation |
| Keeping the shop secure and working | Legitimate interest |
| Measuring and improving our advertising | Your consent, given through the cookie banner |
| Emailing you news and offers | Your consent, and you can unsubscribe in any email |
4. Who receives it
We use a small number of providers, each only for the job described.
Stripe takes payment. It is also an independent controller for the payment itself (stripe.com/privacy).
HighLevel (LeadConnector) hosts this website, our order system, customer records and the emails we send you.
Delivery providers pack and post your order. We give them your name, delivery address and phone number if you provided one, and nothing else. They may be based outside the UK, so we share only the minimum needed to deliver the order you placed with us.
Google provides Google Ads and Google Analytics measurement, and Google Maps when you open a navigation link in a plan. Meta provides our advertising measurement (the Meta Pixel and Conversions API). Both receive information only as described under cookies below.
Some of these providers handle data in the United States. Where they do, we rely on the UK–US Data Bridge or the UK Addendum to the EU Standard Contractual Clauses. We do not sell your information.
5. Cookies and advertising
When you first visit the shop, a banner asks you to choose. Essential only keeps advertising and analytics cookies off. Accept all allows them.
Essential: a small cookie, r5_consent, remembers your choice for 12 months. The checkout also uses cookies it needs to work.
Only if you accept: Google Ads and Google Analytics cookies, and the Meta Pixel. Meta also receives your purchase from our order system, which can include details such as your email address and phone number, so that it can match the purchase to its users. If you choose Essential only, we do not send Meta anything.
If you choose Essential only, Google may still receive limited signals that carry no cookie, such as the page viewed and your IP address. Google uses them for aggregated statistics and to model results, not to build a profile of you.
To change your choice, clear this site’s cookies and storage in your browser. The banner will appear again on your next visit to the shop.
6. How long we keep it
Order and payment records: six years, for tax. Support emails and photos: two years. Marketing email details: until you unsubscribe or ask us to delete them. Technical logs: up to 13 months.
7. Your rights
You can ask us for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Where we rely on consent you can withdraw it at any time. Email [email protected] and we will reply within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.
8. Changes to this notice
If we change this notice we will update the date at the top. If a change is significant we will email customers.