Privacy policy

Who is responsible

Bright Light Fireworks, of 163 Pear Tree Road, Derby, DE23 8NQ and Ironville Post Office, 1 Market Street, Ironville, Nottingham, NG16 5NJ, is the data controller for this website. You can reach us on the phone number or email address listed on our find us page.

What this website collects

Nothing you type. There is no contact form, no newsletter signup, no account and no shopping basket on this site, so there is nothing for you to submit and nothing for us to store.

We do not use advertising pixels or third-party tracking scripts, and we do not build any profile of you. We may use Google Analytics to see, in aggregate, how many people visit and which pages they look at. See Cookies below for exactly how that works.

Cookies

This site can only set one kind of cookie for visitors: Google Analytics, and only if two things are both true: we have switched it on, and you have said yes to it. You will see a banner asking first; if you say no, or don’t answer, no analytics cookie is ever set. You can change your mind at any time from the “Cookie settings” link in the footer.

Aside from that, the only other cookies this site is capable of setting are session cookies used to keep shop staff signed in to the private content management area, and those are only ever set after someone signs in there. You will never encounter them as a visitor.

Server logs

The site is hosted on Cloudflare. Like any web host, Cloudflare processes technical information needed to serve the page and protect the site from attacks, including IP addresses, browser type and the page requested. This is handled by Cloudflare as our processor under their own privacy terms, is used only for delivery and security, and is retained for a short period.

Embedded content

Our find us page embeds Google Maps so you can see where our shops are. When those maps load, Google receives your IP address and may set its own cookies, under Google’s privacy policy rather than ours. Links to our social pages, such as Instagram and Facebook, open on those platforms, where their own privacy policies apply.

Buying in the shop

Fireworks are always handed over in person. If we ask to see ID because you look under 25, we check it and hand it straight back. We do not photocopy, scan or record it. Card payments are processed by our payment provider; we never see or store your full card number. Till receipts and card terminal records are kept as long as tax and consumer law require, and no longer.

Who we share information with

Nobody, other than the hosting and payment providers described above, and anyone we are legally required to disclose to.

Your rights

Under UK GDPR you have the right to ask what personal data we hold about you, to have it corrected or erased, to restrict or object to how it is used, and to receive a copy of it. Because this website collects nothing from visitors, in most cases the honest answer to such a request will be that we hold nothing at all. Ask us at the shop and we will confirm in writing.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, or on 0303 123 1113.

Changes to this policy

If we add anything else to the site that collects information (a contact form, a mailing list) we will update this page before it goes live.