Cookie Policy

Last reviewed: June 2026

This is John Norris of Penrith Ltd's cookie policy. It explains the types of cookies and other tracking technologies that our website may place on your device. If you have any questions, please get in touch with us.

For full details of how we collect and use your personal data, please see our Privacy Policy.

What are cookies?

A cookie is a small file downloaded to your computer or device when you visit certain websites. We use a number of different cookies, including strictly necessary, functional, performance, and marketing cookies.

Your consent

When you first visit our website, you will be shown a cookie consent banner. You can choose to accept all cookies, reject non-essential cookies, or manage your preferences individually. You can change your cookie preferences at any time by clearing your browser cookies and revisiting our site.

Strictly necessary cookies do not require your consent as they are essential for the website to function. All other cookies — including performance, functional, and marketing cookies — are only placed on your device after you have given your consent, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

Lawful basis for processing

We process cookie data under the following lawful bases:

• Strictly necessary cookies — Legitimate interests / performance of a contract. These are required for the site to function and do not require consent.
• Functional cookies — Consent. These enhance your experience but are not essential.
• Performance / analytics cookies — Consent. These help us understand how visitors use our site.
• Marketing / advertising cookies — Consent. These are used to deliver relevant advertising and measure campaign effectiveness.

How cookies improve your experience

Cookies make your browsing experience better by allowing the website to remember your actions and preferences, keep track of your basket, and help us understand how our site is used so we can improve it.

Information collected

Cookies collect browsing and purchasing data — such as pages viewed and products purchased. Cookies themselves do not directly store personal details such as your name, address, telephone number, or payment information, though they may contain a unique identifier linked to you. Data collected via marketing and advertising cookies may be combined with other information held by our advertising partners (such as Google, Meta, and Microsoft) in accordance with their own privacy policies, and may be used to identify you across platforms.

Third-party and server-side tracking

In addition to browser-based cookies, we may use server-side tracking technologies (such as Meta's Conversions API) to share certain customer data — including hashed email addresses and purchase events — directly with our advertising partners. This data is transmitted securely and in hashed (pseudonymised) form. This processing is carried out on the basis of your consent and is subject to each provider's data processing terms.

We also use Google Consent Mode v2, which passes your consent signals to Google. Where consent is withheld, Google may use modelled (aggregated, non-identifiable) conversion data to help measure campaign performance without identifying you individually.

International transfers

Some of our service providers, including Google, Meta, Microsoft, Shopify and Intuit Mailchimp, may process personal data outside the United Kingdom. Where this occurs, appropriate safeguards such as the UK International Data Transfer Agreement, UK Addendum to the EU Standard Contractual Clauses, or adequacy regulations are used where required.

How long will cookies remain on my device?

Session cookies are deleted when you close your browser. Persistent cookies remain until they expire or are deleted — most of ours expire between 30 minutes and two years from download. Specific expiry periods are listed in the table below.

Cookies we use

The cookies listed below represent the main cookies currently used on our website. Specific cookies may change from time to time as our website, apps and third-party services are updated.

Cookie name	Provider	Purpose	Type	Expiry
_shopify_session	Shopify	Maintains your session and basket	Strictly necessary	Session
cart	Shopify	Stores your shopping basket	Strictly necessary	2 weeks
secure_customer_sig	Shopify	Keeps customers securely logged in	Strictly necessary	20 years
_shopify_y	Shopify	Analytics and personalisation	Performance	1 year
_shopify_fs	Shopify	First session tracking	Performance	Session
_shopify_sa_t	Shopify	Marketing attribution analytics	Marketing	30 minutes
_shopify_sa_p	Shopify	Marketing attribution analytics	Marketing	30 minutes
_shopify_evids	Shopify	Marketing event tracking	Marketing	Session
_shopify_hsa_sig	Shopify	Marketing attribution signature	Marketing	30 minutes
ts, tsrce, x-pp-s	PayPal	Fraud prevention and secure checkout	Strictly necessary	Session
_ga, _ga_*	Google Analytics (GA4)	Measures site usage and traffic; supports conversion modelling via Google Consent Mode v2	Performance	2 years
_gcl_au	Google Ads	Conversion tracking and ad performance measurement	Marketing	3 months
_fbp	Meta (Facebook/Instagram)	Advertising, retargeting, and conversion tracking. Data may also be shared via Meta Conversions API (server-side)	Marketing	3 months
_fbc	Meta (Facebook/Instagram)	Tracks clicks from Facebook ads for conversion attribution	Marketing	2 years
_uetsid, _uetvid	Microsoft Bing Ads	Advertising and retargeting via Bing	Marketing	1 day / 16 days
_mailchimp_*, _mc_*	Mailchimp (Intuit)	Email marketing personalisation and campaign tracking	Marketing	Up to 1 year
boost_*	Boost AI Search & Filter	Product filtering, search preferences, and session state	Functional	Session / 1 year
inbox_*	Shopify Inbox	Maintains your live chat session and conversation history	Functional	Session / 30 days
foursixty_*	Foursixty	Enables shoppable social UGC (user-generated content) galleries	Functional	Session
loqate_*	Loqate	Address lookup and verification at checkout	Strictly necessary	Session
smartsize_*	SmartSize	Stores your size preferences to assist with product sizing recommendations	Functional	Up to 1 year

This table is reviewed regularly. For a full list of Shopify cookies, see Shopify's cookie policy. For Google's cookies, see Google's privacy policy. For Microsoft's cookies, see Microsoft's privacy statement. For PayPal's cookies, see PayPal's cookie policy. For Meta's cookies, see Meta's cookie policy. For Mailchimp's cookies, see Mailchimp's cookie policy.

Session cookies

Deleted after each visit. They remember you for the duration of your visit only.

Persistent cookies

Remember you for a set period, allowing previously viewed products and preferences to be recalled on your next visit.

Marketing cookies

Used by our advertising partners (Google, Meta, and Microsoft Bing) to deliver relevant ads, limit ad frequency, and measure campaign effectiveness. Data collected by these cookies may be linked to your identity by our advertising partners in accordance with their own privacy policies. You can withdraw your consent at any time via our cookie banner.

How to control cookies

You can manage your preferences at any time via our cookie banner or your browser settings. Note that disabling certain cookies may affect your experience and some site features may not function correctly.

For more information on managing cookies, visit www.aboutcookies.org or www.allaboutcookies.org.

Opting out of interest-based advertising

You can opt out of interest-based advertising from our advertising partners directly:

• Google — Google Ads Settings or via the Google Analytics Opt-out Browser Add-on
• Meta (Facebook/Instagram) — Facebook Ad Preferences
• Microsoft Bing — Microsoft Ad Settings

You can also opt out of interest-based advertising from multiple companies at once via the Your Online Choices tool (EU/UK) or the Network Advertising Initiative opt-out page.

Please note that opting out does not mean you will stop seeing ads — it means the ads you see will be less tailored to your interests.

Your rights under UK GDPR

As a UK resident, you have the right to access, correct, or request deletion of personal data we hold about you, including data collected via cookies. To exercise these rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

For information about how Shopify processes your data, including your rights in relation to Shopify's own data processing, please visit the Shopify privacy portal.

Changes to this policy

Any changes will be posted on this page with an updated "Last reviewed" date.

Changes to your cookie preferences

You can change your cookie preferences by clicking the cookie banner or privacy preferences option when available, or by clearing your browser cookies and revisiting our website.