Privacy & cookies
Last updated 28 October 2026
This page explains what we store when you visit atlanticcorals.co.uk or buy from us, why we store it, who else sees it, and how to stop it. We do not run ads, and we never sell or share what we collect beyond the suppliers listed below.
Who we are. NanoReef is the data controller for this site.
2 Ash Grove, Barnoldswick, Lancashire BB18 5NN, United Kingdom
aquashrimp.co.uk@gmail.com ·
07599 752555
What we collect, and why
| What | Why | Our lawful basis |
|---|---|---|
| Your name, email, delivery address and phone number when you order | To take payment, pack the right corals and get them to you | Performance of a contract |
| What you ordered, and when | Order history, refunds, and our tax records | Contract, then legal obligation (HMRC) |
| Your account email and sign-in | So you can see your orders and your watchlist | Contract |
| Reviews you write, and the name you put on them | Published on the coral’s page for other buyers to read | Consent, you choose to post it |
| Advertising subscribers: business name, artwork, billing details | To run the slot, print the sticker and take the monthly payment | Contract |
| Emails you send us | To answer you, and to keep a record if something goes wrong with an order | Legitimate interests, running a shop properly |
| Analytics (see below) | To see which corals people look at and what they search for | Consent, and only if you press Accept |
We never see your card number. Payment details go straight to Stripe and are never stored on this site.
Cookies and similar storage
Some of these are needed for the shop to work and do not need your permission. The rest do not load at all until you press Accept.
| Name | What it does | Consent? | How long |
|---|---|---|---|
nr_consent | Remembers the choice you made about this very panel | No | Until you clear your browser |
| Basket and stock cache | Keeps your basket through a page refresh, and shows prices without a flash of the wrong ones | No | Until you clear your browser |
| Firebase sign-in token | Keeps you signed in to your account | No | Until you sign out |
__stripe_mid, __stripe_sid | Set by Stripe when you open the checkout, to spot card fraud | No, security | Session to 1 year |
nr_vid | A random ID so we can tell a returning visitor from a new one. Nothing to do with your name | Yes | Until you clear your browser |
_ga, _ga_* | Google Analytics, page views and general traffic | Yes | Up to 2 years |
Our fonts are served by Google Fonts, which means Google sees the IP address your browser connects from when it fetches them. No cookie is set.
Analytics, only if you agree
If you accept, two things start: Google Analytics, and our own visit counter. Against the random ID above we record which corals you look at and for how long, what you search for, your device type and browser, the country, timezone and language your device reports, how many times you have visited, where you arrived from, and whether a visit led to an order.
No name, no email and no address goes into analytics, none of it is used for advertising, and it is never sold or shared. If you have an account, the ID is linked to it so your orders make sense alongside your visits.
Say no and the whole shop still works. Nothing is withheld, nothing is slower, and you are not asked again on that browser.
Changing your mind
Withdrawing is as easy as agreeing: open cookie settings (the same link sits at the bottom of every shop page), switch analytics off and save. Google Analytics stops and its cookies are deleted from your browser straight away. Email us if you would also like the visit record behind it deleted, and we will remove it by hand.
Who else sees your data
Only the suppliers we need to run the shop, and only for that purpose. None of them may use it for their own marketing.
- Google (Firebase / Google Cloud), hosting, the database your order sits in, and sign-in. Their privacy terms.
- Google Analytics, traffic statistics, only with your consent.
- Stripe, payments and card fraud checks. Stripe privacy policy.
- The courier, your name, address and phone number, so the parcel arrives.
Google and Stripe are international, so some of this is processed outside the UK. Both are covered by the UK’s approved safeguards for that, the UK Addendum to the EU Standard Contractual Clauses.
How long we keep it
- Orders and invoices, six years after the end of the tax year, which is what HMRC requires.
- Your account, until you ask us to close it.
- Analytics records, while they are useful for running the shop, and deleted on request. Google Analytics data expires after 14 months.
- Emails, up to two years, longer if they relate to a dispute.
Your rights
Under UK GDPR you can ask us for a copy of what we hold about you, have it corrected or deleted, restrict or object to what we do with it, withdraw consent at any time, or ask for it in a portable format. Email us and we will sort it within one month, free of charge. If you are unhappy with how we have handled it you can complain to the Information Commissioner’s Office, who regulate this in the UK.
Children
This shop is meant for adults buying livestock. We do not knowingly collect anything from children under 13. If you think we have, email us and we will delete it.
Security
The site is served over HTTPS, passwords are stored hashed by Firebase Authentication and never in readable form, and card details never touch our systems at all. No website can promise perfect security, but if something did go wrong and it put you at risk, we would tell you and the ICO.
Changes
If we change this policy we will update the date at the top. Material changes to how we use personal data will be flagged on the site.
Contact
Email aquashrimp.co.uk@gmail.com, call 07599 752555, or write to NanoReef, 2 Ash Grove, Barnoldswick, Lancashire BB18 5NN.