This policy explains what data The Carry List (thecarrylist.co.uk) collects, why, and what rights you have over it. It’s a small, independently run site — just me — and I’ve tried to write this in plain English rather than dense legal boilerplate.
Who I Am
The Carry List is a UK-based blog reviewing men’s leather bags and accessories, at thecarrylist.co.uk. For any privacy queries, get in touch via the Contact page.
Affiliate Links and Advertising
Some links on this site are affiliate links. If you click through and make a purchase, I may earn a commission at no extra cost to you, via affiliate networks including Awin, Rakuten Advertising, and Refersion. This never affects my editorial opinion — a bag gets recommended because it earned it, not because of the commission rate.
I may also display third-party advertising in the future. If I do, this policy will be updated to name the ad network(s) used and the data they collect.
What Data I Collect
Analytics. I use Google Analytics (via Site Kit by Google) to understand how visitors use the site — pages viewed, time on site, general location, and device type. This data is aggregated and doesn’t identify you personally. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
Contact form. If you use the contact form (powered by WPForms), I collect the name, email address, and message you provide, solely to respond to your enquiry.
Comments. If comments are enabled and you leave one, I collect the comment content, your IP address, and browser user agent string to help with spam detection. Comments are checked through Akismet, an automated spam-filtering service.
Gravatar. An anonymised hash of your email address may be checked against the Gravatar service to display a profile picture alongside approved comments. See the Gravatar privacy policy for details.
Cookies
This site uses cookies for basic functionality (e.g. remembering your comment details) and for analytics as described above. If you leave a comment, you may opt in to saving your name, email, and website in a cookie for convenience — this lasts one year. Analytics cookies are set by Google Analytics on each visit.
Embedded Content
Articles on this site may include embedded content (e.g. images or videos) from other websites. Embedded content behaves exactly as if you’d visited the other website directly, and that site may collect data about you, use cookies, and monitor your interaction with the embedded content.
Who I Share Data With
I don’t sell your personal data. I share data only with the third-party services named in this policy (Google Analytics, Akismet, WPForms, Gravatar, and the affiliate networks above) as needed for them to perform their function, and only to the extent each requires.
How Long I Keep Data
Comments and their metadata are retained indefinitely so follow-up comments from the same person can be recognised automatically. Contact form submissions are kept only as long as needed to handle your enquiry, unless I’m legally required to keep them longer.
Your Rights
Under UK GDPR, you have the right to request a copy of the personal data I hold about you, ask me to correct or erase it, and object to how it’s processed (subject to legal exceptions). To exercise any of these rights, use the Contact page. If you’re unhappy with how your data’s been handled, you can also complain to the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
Changes to This Policy
This page will be updated if the data collected or the services used change — particularly once display advertising is introduced. Last updated: August 2026.