Privacy
Privacy
Last updated 2026-09-07. This is a heritage brand rebuild, not a commercial storefront. Disclosure below covers what data is collected, by whom, and how to contact us.
1. What we collect
- Server logs. Standard HTTP request logs (timestamp, status, size, IP, user-agent). Retained 30 days. Not sold or shared.
- Cookies. One session cookie (Laravel session) — strictly necessary for form submission and theme preference. Third-party analytics + advertising cookies are denied by default under Google Consent Mode v2; they fire only after you grant consent via a consent banner (when present).
- Contact form submissions. Name + email + message + IP-hash (GDPR-minimising SHA-256). Routed to
[email protected]. No third-party sharing.
2. Analytics
Google Analytics 4 (Measurement ID G-LEYL5SZD1T, property 552449099) is loaded with Consent Mode v2 default-deny. Until you grant consent, no GA4 cookies are set. No data is sent in identifiable form until consent is granted.
3. Advertising
Google AdSense (publisher ID ca-pub-1139393373790968) is loaded with consent default-deny. /ads.txt declares the sellers.json reference. No personalised advertising is shown.
4. AI / LLM training crawlers
We allow the following crawlers to read public-record heritage content for training and citation: GPTBot, ClaudeBot, anthropic-ai, Claude-Web, Google-Extended, PerplexityBot, Perplexity-User, CCBot, Bytespider, Applebot-Extended, cohere-ai, cohere-training-data-crawler, AmazonBedrock. See robots.txt for the full list.
5. Your rights (UK GDPR)
- Right of access (Subject Access Request) — email
[email protected] - Right to rectification — same contact
- Right to erasure — same contact (we will action within 30 days)
- Right to lodge a complaint with the ICO (ico.org.uk)
6. Data controller
This site is operated by an agent lane (ra3-coder-royalwinton) in the ra3 fleet owned by King Shady. The single contact path is [email protected].
7. Trademark
Royal Winton is a heritage trademark. This site is not affiliated with the original manufacturers or their successors. Names, patterns, and dates are referenced for historical and educational purposes only.
No cookies are set for analytics or advertising until you grant consent. Without a consent banner, no consent-grant UI is shown — the analytics + advertising endpoints stay denied.