Privacy policy

Last updated: 2026-09-01.

The short version

Boot & Brush does not have user accounts, does not run a newsletter, and does not sell personal information. The only information you can actively give us is what you type into the contact form. Everything else is aggregate analytics about how pages are used.

What we collect

When you send us a message

The contact form asks for your name, email address and message. We use them for exactly one thing: replying to you. The message is delivered to our own mailbox by email; we do not add you to a mailing list, because there is no mailing list.

The form also records the time the page loaded and your IP address at the moment of submission. Both are anti-spam measures - a submission completed in under three seconds is automated, and the IP address is used to limit submissions per hour. The rate-limit record lives in server memory and is discarded routinely; it is not stored in a database or used to build a profile of you.

When you read a page

We use Google Analytics 4 to understand which pages get read and which links get clicked. This is aggregate measurement - page paths, referrers, approximate location derived from IP, device and browser type, and events such as a buy button being clicked. We do not use it to identify individuals, and we have no way to connect it to a name.

Google Analytics sets cookies in your browser. If you would rather it did not, browser privacy settings, tracker-blocking extensions and Google’s own opt-out browser add-on all prevent it, and the site works normally without it.

What we deliberately do not collect

• No accounts, passwords or logins - there is nothing to log in to
• No payment information - we do not sell anything and take no payments
• No newsletter list
• No advertising network trackers, retargeting pixels or ad cookies
• No record of what you bought after clicking a link - the retailer knows, we do not

Affiliate links

Buy buttons route through a redirect on this domain before sending you to the retailer. That redirect adds our affiliate tag to the destination URL so the retailer can attribute a sale. It does not read or store personal information about you.

Once you arrive at the retailer, their privacy policy applies, and they will typically set their own cookies to attribute the referral. Amazon’s handling of your data is governed by Amazon’s privacy notice, not this one. How the commercial relationship works is set out on the affiliate disclosure page.

Who processes data on our behalf

• Vercel - hosting. Processes standard web server request data in order to serve pages.
• Google Analytics - aggregate usage measurement, as described above.
• Microsoft (Graph / Outlook) - delivers contact form submissions to our mailbox.
• Amazon - the destination of affiliate links, once you leave this site.

How long we keep things

Contact form messages are kept in our mailbox for as long as they are useful for correspondence and record-keeping, and you can ask us to delete yours at any time. Analytics data is retained according to Google Analytics’ own retention settings. Anti-spam rate-limit records are transient and are discarded routinely.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, to have it corrected or deleted, and to object to or restrict how it is processed. Residents of California and of the European Economic Area and United Kingdom have specific statutory rights along these lines.

In practice, the only personal information we are likely to hold is an email you sent us. To ask about it or have it deleted, email info@bootandbrush.com. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of on that front.

Children

This site is intended for a general adult audience and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.

Security

The site is served over HTTPS. We hold very little personal information by design, which is the most effective security measure available to us. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Changes to this policy

If this policy changes we will update the date at the top of the page. Material changes will be described rather than quietly substituted.

Contact

Boot & Brush is published by Slate Mill Group. Privacy questions go to info@bootandbrush.com or via the contact page.