1.1 Cookies are small text files placed on your device when you visit a website or use an app. We also use similar technologies such as local storage, pixels, and software development kits (SDKs). In this policy we refer to all of these as “cookies”.

1.2 Cookies may be set by us (first-party cookies) or by third parties whose services we use (third-party cookies). They may last only for your session (session cookies) or remain until they expire or you delete them (persistent cookies).

1.3 Our use of cookies is governed by the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR.

2.1 We use cookies for the following purposes:

• a) Strictly necessary: required to operate the platform, for example, signing you in, keeping your session secure, remembering the items in your basket, and processing payments. These cannot be switched off and do not require your consent.
• b) Functional / preferences: remember choices you make, such as your delivery or collection location and display preferences, to give you a better experience.
• c) Analytics / performance: help us understand how the platform is used so we can fix problems and improve it. Wherever possible this data is aggregated or anonymised.
• d) Marketing: where enabled, measure and improve our marketing and show you relevant content. We only set these with your consent.

2.2 Non-essential cookies (functional, analytics, and marketing) are only set where you have given your consent, unless an exemption applies. Strictly necessary cookies do not require consent.

3.1 The table below describes the main categories of cookies we use. A detailed, up-to-date list of individual cookies, including their names, providers, and durations, is being finalised and will be published here.

Strictly necessary

Session, authentication, security, and basket cookies set by Krumblelane. Typically expire at the end of your session or shortly after.

Functional

Location and preference cookies set by Krumblelane. Persistent, typically up to 12 months.

Analytics

Usage-measurement cookies (set only with consent). Persistent, typically up to 24 months.

Payments

Set by Stripe to process payments and help prevent fraud. See Stripe’s own cookie and privacy notices.

3.2 All first-party analytics data is processed within the United Kingdom.

4.1 Where we use non-essential cookies, we ask for your consent and you can change or withdraw it at any time through the cookie controls provided on the platform.

4.2 You can also control cookies through your browser or device settings, for example, to block or delete cookies. Most browsers let you do this via their settings or help menu. Blocking strictly necessary cookies may stop parts of the platform from working.

4.3 To opt out of marketing cookies specifically, you can use the cookie controls on the platform or adjust your marketing preferences in your account settings.

5.1 Some cookies are set by third parties who provide services on our behalf. The main third party is Stripe, our payment processor, which sets cookies to process payments securely and to detect and prevent fraud.

5.2 Third parties are responsible for their own cookies and processing. Please refer to their privacy and cookie notices for details of how they use your data.

6.1 We may update this policy from time to time to reflect changes in the cookies we use or in the law. The current version, with the date it was last updated, will always be available on the platform.

7.1 If you have any questions about this policy or how we use cookies, please contact us at:

Email

privacy@krumblelane.co.uk