Privacy Policy

Last updated: 1 October 2026

CatBasket ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What data we collect

Analytics data

We use Google Analytics 4 (GA4) to understand how visitors use our site. GA4 collects anonymised data including:

• Pages visited and time spent on each page
• Referring website or search engine
• General geographic location (country and city level, not precise location)
• Device type, browser, and operating system
• Interactions such as clicks and scroll depth

GA4 does not collect personally identifiable information. IP addresses are anonymised before processing. Google's privacy policy applies to data processed by GA4: policies.google.com/privacy.

Email data

If you subscribe to our newsletter, we collect your email address. We use this solely to send you content updates and will never sell or share your email address with third parties. You can unsubscribe at any time using the link included in every email.

Cookies and consent

We ask for consent through Google's consent tool (AdSense Privacy & messaging), a consent management platform certified by Google that follows the IAB Transparency and Consent Framework (TCF) v2.2. Its message lists the purposes and the partners involved, and lets you accept, reject, or choose purpose by purpose. Where Google's message is not shown to you (for example, if you are outside the regions it covers or it is blocked), our own banner asks instead, with Accept and Reject.

Until you choose, and if you reject, Google Analytics and Google AdSense run in Google Consent Mode with analytics storage, ad storage, ad user data and ad personalisation all set to "denied". In that state they set no cookies, but still send Google cookieless signals (such as the page viewed, time and browser type) so visits can be counted and non-personalised or limited ads can be shown. If you consent, the cookies below may be set. In Google's consent tool, analytics cookies need your consent to storing information on your device and to measuring content or audience statistics; advertising cookies need your consent to storing information on your device and to Google as an advertising partner; and personalised ads also need your consent to personalised advertising.

CatBasket uses the following cookies when you consent:

Analytics cookies (Google Analytics 4)

• _ga - Distinguishes unique visitors. Expires after 2 years.
• _ga_[ID] - Maintains session state. Expires after 2 years.

Advertising cookies (Google AdSense)

We use Google AdSense to display advertisements on our site. AdSense may set cookies to serve relevant ads and to limit how many times you see a particular ad. These cookies are managed by Google. You can manage your ad personalisation preferences at adssettings.google.com.

Your consent record

Google's consent tool records your choice in a cookie on catbasket.uk (such as FCCDCF) so it does not ask on every page. Our own banner saves your choice in your browser's local storage under the key catbasket_cookie_consent (not a cookie, and never sent to us). Storing your choice is strictly necessary and does not need consent.

Managing cookies

Use the Cookie settings link here or in the footer of any page to change or withdraw consent. It reopens Google's consent message where that is in use, or our banner otherwise. If you withdraw consent, we set Google consent back to denied and delete the Google Analytics and AdSense cookies on catbasket.uk that the browser lets us remove. You can also disable cookies in your browser settings at any time. Please note that disabling cookies may affect your experience on this and other websites. Most browsers allow you to block third-party cookies specifically while still allowing first-party cookies to function.

Third-party services

We use the following third-party services:

• Google consent tool (Privacy & messaging) - Asks for and records your cookie choices.
• Google Analytics (GA4) - Website analytics and visitor statistics. We also use Umami, a self-hosted, cookieless analytics tool that records aggregate page views only; it stores nothing on your device, shares nothing, and honours Do Not Track.
• Google AdSense - Display advertising. With your consent, Google may use data from your visits to this and other websites to serve personalised ads.
• Google Fonts - Typefaces loaded from fonts.googleapis.com and fonts.gstatic.com. Google receives your IP address and browser details. No cookies are set.
• Amazon Associates - Affiliate programme. When you click an Amazon affiliate link, Amazon may set cookies to track the referral. Amazon's privacy policy governs any data collected through their platform.
• Other affiliate networks - We participate in additional affiliate programmes that may set cookies when you click affiliate links. These cookies are used solely to track referrals and attribute commissions.

Legal basis for processing

Under the UK GDPR, our legal bases for processing personal data are:

• Consent - For Google Analytics and Google AdSense cookies and personalised ads, collected as described in Cookies and consent.
• Legitimate interest - For cookieless statistics and non-personalised ads that fund the site, and for keeping the site secure.
• Consent - For newsletter subscriptions, we rely on your explicit consent when you provide your email address.

Your rights

Under the UK GDPR, you have the following rights:

• Right of access - You can request a copy of any personal data we hold about you.
• Right to rectification - You can ask us to correct inaccurate personal data.
• Right to erasure - You can ask us to delete your personal data.
• Right to restrict processing - You can ask us to limit how we use your data.
• Right to data portability - You can request your data in a machine-readable format.
• Right to object - You can object to our processing of your data.
• Right to withdraw consent - Where processing is based on consent, you can withdraw it at any time.

Data retention

Analytics data is retained by Google for 14 months, after which it is automatically deleted. Newsletter subscriber data is retained until you unsubscribe, at which point your email address is removed from our mailing list.

Children's privacy

CatBasket is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Contact

If you have questions about this privacy policy or wish to exercise any of your rights, please contact us at [email protected].

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk.