Privacy at ThistlePay.

Last updated: 30 September 2026

ThistlePay is an early-stage independent delivery analytics product based in Dundee. This notice covers our pilot website and example report.

Pilot applications

When you apply, we store your email, business name, store count and current platforms. You can also provide an order band, website and delivery challenges. We use these details to assess pilot suitability, understand retailer needs and contact you about the pilot. The form asks you to acknowledge this notice; it does not subscribe you to a marketing mailing list.

We record the submission time, privacy acknowledgement, landing path, referrer origin and campaign tags to understand where applications come from. Please avoid including customer details, confidential data or other people’s information in your answers.

How we use this information

We process pilot applications to respond to your request and arrange a possible pilot. We use aggregate feature selections and limited website events for our legitimate interest in understanding demand and improving this product. Optional Google Analytics runs only with your consent, which you can withdraw using “Analytics preferences” in the footer when analytics is configured.

Feature selections and first-party measurement

Choosing a feature saves the feature key and a random anonymous identifier. A first-party cookie, tp_vote, remembers that identifier for 30 days to prevent repeated votes for the same feature. It is set when you ask us to save a selection. It does not contain your email or business name.

We also retain a small set of validation events: starting a pilot form, successful applications, opening the example report and important CTA clicks. These are stored locally without visitor identifiers or personal form fields. We do not store general pageviews or a browsing history. Session storage remembers your first landing page and campaign information for your application; it ends when the browsing session ends.

Optional Google Analytics

If configured and accepted, GA4 receives allowlisted events such as feature choices, platform selections, CTA clicks, form starts and successful applications. Submission events contain store-count band, order band and platform count. We never send email addresses, business names, websites or free-text responses to GA4. We exclude query strings and referrers from the analytics events we send.

Google may process technical device and connection information, including an IP address, when its script loads, and may process information outside the UK. Its privacy policy explains its practices. Declining analytics keeps the Google script off. Essential application storage still works. Analytics preference storage persists until you change it or clear your browser data; Google cookie lifetimes depend on the configured GA property.

Storage, access and retention

Pilot records and validation data are held in a local SQLite database on the operator’s persistent server storage. Access is restricted to the ThistlePay team operating the pilot. We do not sell your data or provide it to delivery marketplaces. Server hosting providers may handle technical access logs.

Our pilot retention policy is to review applications within 12 months, deleting details that are no longer needed. Anonymous validation events and votes are retained for up to 6 months. Backups may retain deleted records for up to 30 days. We keep only short-lived rate-limit hashes for spam protection, not raw IP addresses. See our operational documentation for the review procedure.

Your choices and rights

You can ask to access, correct or delete your pilot details, object to processing, or withdraw from the pilot. You can also raise a concern with the UK Information Commissioner’s Office.

For a privacy request, reply to the ThistlePay team member who contacts you about the pilot. A direct privacy contact will be published here before public launch.

Example report

Every figure in the example report is synthetic. It is not customer data, proof of commercial results or an indication of a live platform connection.