Website analytics privacy

Optional first-party website analytics are not active publicly. No external analytics provider is connected by this feature. Browsing and enquiries do not require analytics consent.

If separately activated, analytics require optional consent and respect Do Not Track and Global Privacy Control. Consent and a random session-only identifier expire with the browser session; identifiers rotate after 30 minutes. Withdraw using the analytics choice below to clear the identifier and stop future collection.

Permitted observations cover public pages, approved product/category views, search-result buckets and WhatsApp clicks. No raw searches, contact details, passwords, full addresses, IP addresses, full user agents, private order paths or authentication tokens are stored in analytics. A WhatsApp click is not evidence of a conversation or a sale.

Reports count distinct consented sessions, not unique people. Country is available only from trusted hosting metadata; otherwise it is Unknown. Location does not establish nationality or diaspora membership. Bot filtering is best effort.

Analytics records have a 30-day reporting and retention limit. An authorised CEO must run the retention purge; unattended deletion is not yet scheduled. Withdrawal prevents future collection but does not erase previously aggregated counts. CEO and existing Sales access is limited to authorised aggregate reporting.

Marketing permission on an enquiry is a separate optional choice. Existing enquiry contact information is handled by the enquiry workflow, not analytics.