Can I see a copy of the confirm.php page you are using? I'll see if the issue is on the page itself. I don't see the added parameters when I browse the site. What steps do you use to get to a page that looks like:
http://www.rowingcentre.co.uk/parts/cart.php?COLLCC=487920067&
If I reproduce it maybe I can figure out why it happens.