Legal
Cookie Policy
The short version
This site sets a small number of cookies that are needed to make the shop work — keeping your basket, signing you in, and taking payment securely. Those cannot be switched off.
There is one optional category, marketing, which records how you found us. Nothing in it is set unless you accept it. If you reject it, the shop works exactly as it does otherwise.
You can change your mind whenever you like using the Manage cookie consent control.
How this list was compiled
[TO CONFIRM: re-run the automated scan on the live site.] The list below was compiled by hand, by reading what each installed plugin actually sets and by inspecting the site in a browser. Complianz’s own automated cookie scan could not be used: from version 7 it runs through Complianz’s hosted scanning service, which needs a publicly reachable address, and this site is currently only available on a local development machine. Once the site is live, the scan should be run and this page checked against its results.
Strictly necessary
These are required for the site to function. They are set without consent, which PECR permits for cookies that are strictly necessary to provide a service you have asked for.
| Name | Set by | What it does | Expires |
|---|---|---|---|
wp_woocommerce_session_* |
WooCommerce | Links your browser to your basket and checkout progress on our server | 48 hours |
woocommerce_cart_hash |
WooCommerce | Tells the site when the contents of your basket have changed | When you close the browser |
woocommerce_items_in_cart |
WooCommerce | Tells the site your basket is not empty, so you are shown live pages rather than cached ones | When you close the browser |
__stripe_mid |
Stripe | Payment fraud prevention — recognises the device making a payment | 1 year |
__stripe_sid |
Stripe | Payment fraud prevention — identifies the current payment session | 30 minutes |
cmplz_* |
Complianz | Remembers your cookie choices so you are not asked again | 365 days |
| Delivery date storage | Order Delivery Date | Not a cookie, but a similar technology: your chosen delivery date is held in your browser’s local storage so it survives moving between checkout steps. Cleared when the order is placed. | Until the order completes |
| Turnstile challenge data | Cloudflare | On the contact page only. Confirms the form is being completed by a person rather than an automated script. | Session |
The Stripe cookies are only set when you reach the checkout, not while you are browsing.
Marketing — optional, off until you accept
| Name | Set by | What it does | Expires |
|---|---|---|---|
sbjs_first, sbjs_current, sbjs_first_add, sbjs_current_add, sbjs_session, sbjs_udata, sbjs_migrations, sbjs_promo |
WooCommerce Order Attribution | Records how you arrived at the site — the search engine, link or campaign that referred you — so that when an order is placed we can tell which of our marketing produced it. It is not used to build an advertising profile and is not shared with any advertising network. | 6 months |
If you reject optional cookies, these are not set. If you had accepted and then change your mind, they are actively deleted from your browser.
Statistics
We do not currently use Google Analytics or any other analytics or statistics service, and no statistics cookies are set. If that changes, this page will be updated and the consent banner will ask you before anything is set.
Changing your mind
Use the Manage cookie consent control to reopen your choices at any time. You can also delete cookies through your browser’s own settings, though doing so will empty your basket.
More information
How we handle personal data more generally is set out in our Privacy Policy.