Privacy notice
Last updated 1 October 2026
This notice covers dfydepot.com. It is written to be read rather than to be defensible, so if something here is unclear, email and we will fix the wording.
What we collect
When you contact us. Your name, email address, business name if you give one, and whatever you write in the message. We need these to answer you.
When you buy something. Your billing details and order record. Card details are handled by our payment provider and never reach our servers.
Preferences stored in your own browser. Your theme, accent colour, accessibility settings and cookie choice are stored in your browser's local storage. They stay on your device, they are never sent to us, and clearing site data removes them.
Analytics, only if you agree. If you accept analytics in the cookie banner, Google Analytics 4 records page and search counts so we know which aisles to stock next. If you decline, nothing analytics related runs. The full detail is in the Google Analytics section below. Nothing on this site is sold to anyone, ever.
What we do not collect
- We do not run advertising trackers or third-party marketing pixels.
- We do not fingerprint your device.
- We do not buy or rent contact lists, and we will not run a campaign on one for a client either.
Cookies and local storage
The strictly necessary storage holds your theme, palette, accessibility settings and your cookie choice itself. It cannot be switched off without breaking the ability to remember your settings, and it is entirely local to your browser.
Analytics storage only ever exists if you accepted it. You can change your mind at any time from the link in the footer.
Google Analytics
Analytics on this site is supplied by Google Analytics 4, a Google LLC product. The Google script is not loaded until you press "Accept all" or tick Analytics under "Choose what runs". Press "Necessary only" and Google receives nothing from this site.
After you opt in, Google Analytics logs four things:
- The pages you view, and searches you run on the shelves.
- Your device type, operating system and browser.
- Your rough location, to city or region, estimated from your IP address.
- The referrer: the page or link that sent you to the depot.
GA4 anonymises IP addresses. It reads the address to estimate location, then discards it without logging or storing it. Two first-party cookies are set: _ga, a random ID that tells browsers apart, and _ga_3602LV8WZZ, which holds session state. Each lasts up to 2 years, per Google's defaults. Our Google Analytics property keeps event data for 14 months, then it is deleted.
To withdraw consent, open (also in the footer), untick Analytics and save, or press "Necessary only". Measurement stops there. Read Google's privacy policyfor how Google treats the data, or install theGoogle Analytics opt-out add-onto block it on every site you visit.
How long we keep things
Enquiry messages are kept for two years so we can pick up a conversation later, then deleted. Order records are kept for as long as tax law requires, currently seven years. Google Analytics data is kept for 14 months and holds no name, email or order detail; the_ga cookies expire after up to 2 years, or sooner if you clear them.
Who else sees your data
Our hosting provider, our payment provider, our email provider and, if you accepted analytics, Google LLC as the operator of Google Analytics. Each sees only what it needs in order to do its job. We do not sell, rent or trade personal data. If we are ever legally compelled to hand something over, we will tell you unless we are prohibited from doing so.
Your choices
- Ask for a copy of what we hold about you.
- Ask us to correct something that is wrong.
- Ask us to delete it, where we are not required to keep it.
- Withdraw analytics consent at any time, with no effect on anything else.
- Unsubscribe from any email we send, from a link in that email.
Email for any of these. We reply within five business days.
Children
This is a business-to-business site and is not directed at anyone under 16.
Changes
If this notice changes materially we will update the date at the top and, where the change affects you directly, say so on the site rather than hoping nobody notices.