01The short version
We use only the cookies and browser storage the shop needs to work: sign-in, language, basket, checkout and referral credit. There are no analytics cookies, no advertising pixels and no cross-site tracking of any kind.
The Privacy and Electronic Communications Regulations (PECR) let a site set strictly necessary cookies without asking, so the small notice at the bottom of the page is there to inform you, not to collect consent. Nothing changes if you ignore it.
03Browser storage we use
Local and session storage are kept by your browser and never sent to our server on their own. Session storage is cleared when you close the tab; local storage stays until you clear it.
zz_cart_v1EssentialYour basket. It lives in your browser only and is priced by our server each time it is shown.
- Type
- Local storage
- Lifetime
- Until you clear it
zz_checkout_v1EssentialA draft of the checkout form, so that nothing is lost if you go back to change your basket.
- Type
- Session storage
- Lifetime
- Until you close the tab
zz_last_orderEssentialYour order number after payment, so the confirmation page can find the right order.
- Type
- Session storage
- Lifetime
- Until you close the tab
zz_order_cleared_*EssentialA note that the basket has already been emptied for a paid order, so a refresh does not empty a new one.
- Type
- Session storage
- Lifetime
- Until you close the tab
zz_postcodeFunctionalThe last postcode you checked, so the delivery checker is pre-filled next time.
- Type
- Local storage
- Lifetime
- Until you clear it
zz_wishlist_postcodeFunctionalThe postcode you checked on the wishlist map, so it is pre-filled next time.
- Type
- Local storage
- Lifetime
- Until you clear it
zz_cookie_noticePreferenceRemembers that you have seen the cookie notice at the bottom of the page, so it is shown only once.
- Type
- Local storage
- Lifetime
- Until you clear it
| Name | Type | Category | Purpose | Lifetime |
|---|---|---|---|---|
zz_cart_v1 | Local storage | Essential | Your basket. It lives in your browser only and is priced by our server each time it is shown. | Until you clear it |
zz_checkout_v1 | Session storage | Essential | A draft of the checkout form, so that nothing is lost if you go back to change your basket. | Until you close the tab |
zz_last_order | Session storage | Essential | Your order number after payment, so the confirmation page can find the right order. | Until you close the tab |
zz_order_cleared_* | Session storage | Essential | A note that the basket has already been emptied for a paid order, so a refresh does not empty a new one. | Until you close the tab |
zz_postcode | Local storage | Functional | The last postcode you checked, so the delivery checker is pre-filled next time. | Until you clear it |
zz_wishlist_postcode | Local storage | Functional | The postcode you checked on the wishlist map, so it is pre-filled next time. | Until you clear it |
zz_cookie_notice | Local storage | Preference | Remembers that you have seen the cookie notice at the bottom of the page, so it is shown only once. | Until you clear it |
04Third-party services
Three services we rely on may set cookies of their own, on their own domains. None of them are used for advertising.
- Cloudflare — sits in front of the site to block attacks and may set security cookies such as __cf_bm, _cfuvid or cf_clearance to tell people from bots. They are strictly necessary and expire within a day.
- Cloudflare Turnstile — the small “are you human” check on the contact and corporate forms. It runs on challenges.cloudflare.com and does not identify you or track you across sites.
- Stripe — when you pay, Stripe’s checkout page on checkout.stripe.com sets its own cookies (such as __stripe_mid and __stripe_sid) for fraud prevention and to remember your details if you use Link. See Stripe’s cookie policy for details.
- Google and Apple sign-in — only if you choose to sign in with them, and only on their own domains while you do.
05How to control cookies
- You can delete or block cookies in your browser settings at any time; every major browser explains how in its help pages.
- If you block zz_session you will be signed out; if you block zz_locale the site will guess your language from your browser on each visit; if you clear local storage your basket empties and the cookie notice will show again.
- Signing out from your account page deletes your session on our side as well, not just the cookie.
- Because we set no optional cookies, there is nothing to opt out of: the site works exactly the same way for everyone.
06More information
For how we handle personal data more broadly, read our privacy policy. Privacy policy
Questions: [email protected].