This site collects an email address if you give one, and an order or a booking if you make one.

Three forms on this site accept an email address: the restoration updates signup, the visit interest list, and the store opening notice. Each is a separate list, and joining one does not join you to the others. The forms request nothing else — no name, no telephone number, no postal address, and no payment details.

Each form contains a hidden field that people never see and that automated submissions typically complete. Where it is returned completed, the submission is discarded and nothing about it is stored.

If you buy from the store, Stripe collects your payment details on its own page; we never see your card. Stripe passes us your name, email address and shipping address so the order can be posted, and we keep those with the order. Your cart is remembered in your own browser's storage until you check out or clear it — it never leaves your device.

If you book a trip, the booking form takes your name, your email address and your telephone number, and the name and email address of each person travelling with you. For a person under 18 it takes a name only. You are giving us other people's details when you do this, and each adult you name receives one email from the station telling them that you booked them a place and how to decline. The form records the wording you agreed to when you ticked its two boxes. It asks nothing about health; that is asked later, of each person directly, inside the station's portal. Stripe collects your payment details on its own page; we never see your card or your bank account number. Because the balance is drawn later from the same card or bank account, Stripe keeps that payment method on file for your booking.

Our server also keeps a count of page views. Each count records which page was viewed, the page you came from if it was one of ours, the hour, the website a visitor arrived from (its domain only, never the page), the country, whether the device was a phone, tablet or computer, and any campaign tag that was on the link. To tell visitors apart from page views, each count also carries a one-way code made from your connection and browser mixed with a secret that changes every day and is then discarded; it cannot be turned back into an address and cannot be matched from one day to the next. No IP address, no browser details and no cookie are kept, and a count cannot be connected to a signup or an order. A small script of our own reports the page change when you move between pages; nothing from any third party runs here. Counts are kept for two years, then reduced to weekly totals.

Mailing lists and message delivery are operated through Resend, an email service provider based in the United States. Your address is stored there, in the audience you joined, and is used to deliver mail from this station. Signups are also recorded in the station's own records system, a database hosted in the United States, so the station knows who has asked to hear from it; the store-opening list was held there until the store opened on 2 September 2026. The site itself is hosted on Vercel, which — as any web host does — retains standard server logs of requests, including IP addresses and browser user-agent strings, as part of operating the service.

Typefaces are self-hosted and served from this site's own domain, so loading a page here does not issue a request to a font provider on your behalf.

The weather page shows a wind map from FishWeather. It loads from FishWeather's own website whenever the weather page is opened, and FishWeather sets its own cookie and measures the visit with Google Analytics, under FishWeather's privacy policy rather than this one. No other page loads it.

Bookings are recorded in the station's own records system, hosted in the United States, and the payment in Stripe. A booking that is started and not paid for is kept as an unpaid record with the details typed into the form. Booking records are retained for seven years as accounting records. The confirmation and invitation emails are delivered through Resend.

Orders are recorded in the station's own records system, hosted in the United States, and in Stripe. Order records are retained for seven years as accounting records. The shipping address is redacted from the order record one year after delivery; the raw payment notices Stripe sends the station, which also carry the address, are part of the accounting record and are kept with it for the seven years.

Every message sent to a list carries an unsubscribe link, and using it takes effect without anyone having to approve it. You may also write to the station inbox and ask to be removed from any list or all of them, and to have your address deleted rather than merely suppressed. It will be done, and you will be told once it is.

No explanation is required.