Cookie policy

Strictly necessary cookies

The site uses necessary cookies for the session and consent management. The first is the administration session (pbm_admin), which only the shop owner receives, when signing in. The second is your answer to the cookie banner (pbc_consent_v3), kept for 180 days, holding only whether you accepted or refused; we keep it so that we do not ask you again on every page.

When you start a conversation with the assistant, you receive the __Secure-pbc-assistant cookie, which ties the conversation to your browser and expires after 30 minutes.

The language you read the site in needs no cookie: it is in the address.

Three choices of yours also stay on your device, in the browser's local storage rather than in cookies: the currency you want prices shown in, the products you saved to favourites, and your basket. The currency never leaves your device. The favourites and the basket leave it only as a list of product codes, and only when you open the Favourites page or the Basket, so that we can send you back those products and their prices; nothing about you travels with the list. You can remove all of it at any time by clearing this site's data in your browser.

Traffic statistics, only with your consent

Microsoft Clarity provides click maps, scroll maps and visit replays on public pages. It is not enabled on administration, sign-in, search, checkout forms or private order pages. Sensitive content is masked. For Clarity we do not enable advertising storage.

Microsoft Ireland Operations Limited and Microsoft process Clarity data under the Microsoft Privacy Statement (https://privacy.microsoft.com/privacystatement); processing may take place outside the EEA. Clarity uses pseudonymous identifiers and the _clck and _clsk visitor/session cookies. Microsoft describes these and possible third-party cookies at https://learn.microsoft.com/clarity/setup-and-installation/clarity-cookies.

Clarity recordings are normally available for 30 days; favourites and some samples may be retained for up to 9 months. Withdrawal does not automatically delete data already collected by providers.

For consenting orders we separately keep Analytics identifiers until consent expires or is withdrawn, for at most 180 days. The HttpOnly pbc_analytics_handle cookie enables withdrawal and has the same maximum lifetime. Order placement, full receipt and refunds are sent from our server to Google without contact details or the private order link.

Withdrawal stops browser collection immediately. Unsent events are cancelled after server acknowledgement; if the connection fails, we show a message and retain the withdrawal request locally for retry until acknowledged. Requests already in flight may complete before withdrawal is acknowledged.

For statistics we use Google Analytics 4. Google Ireland Limited processes the data on our behalf, under Google's data processing terms.

Until you press Accept in the banner, nothing from Google, Microsoft or Meta loads and no request leaves for them. If you press Refuse, nothing loads, and the refusal is remembered exactly as long as an acceptance.

Once you accept, Google Analytics sets two cookies: _ga, valid 2 years, which tells one browser from another, and _ga_<id>, also 2 years, which keeps the session state.

What is sent: the pages read, the products viewed, added to the cart and ordered, with the product name, the price, the order number and the totals, the type of device and browser, plus the approximate location Google derives from the IP address; the IP address itself is discarded once the location has been derived, the approximate location stays in the reports.

What is not sent: your name, email, phone, address, or the access link to your order.

Advertising, only with your consent

The same Accept also starts advertising: the Meta Pixel, of Meta Platforms Ireland Ltd., and, from the moment we link Google Analytics to a Google Ads account of ours, Google Ads, through Google Analytics, use your visit to measure ads and to show you personalised ads on Google, Facebook and Instagram. The roles, the data sent and the pages where the Meta Pixel does not load are in the privacy policy.

Google Ads may set the _gcl_au cookie and, when you arrive from a Google ad, _gcl_aw or other _gcl_* cookies, which link the visit to the ad. Google gives them a duration of 90 days and describes them at https://business.safety.google/adscookies/.

The Meta Pixel sets the _fbp cookie, which tells one browser from another, and, when you arrive from a Meta ad, the _fbc cookie, which holds the click identifier. Meta gives them a duration of 90 days and describes them at https://www.facebook.com/privacy/policies/cookies/ and https://developers.facebook.com/docs/marketing-api/conversions-api/parameters/fbp-and-fbc.

Cookies that Google or Meta keep on their own domains (for example when you are signed in to a Google, Facebook or Instagram account) cannot be deleted by our page; you control them in your browser and account settings.

How you change your answer

The control at the bottom of this page deletes your answer, stops Google Analytics, Clarity and the Meta Pixel, deletes the cookies set on the shop's address by Google Analytics (_ga, _ga_<id>), Clarity (_clck, _clsk), Google Ads (_gcl_*) and Meta (_fbp, _fbc), withdraws the consent on the server too, and reloads the page. The banner then appears again and you can answer differently.

Withdrawal stops browser collection immediately; server deliveries stop after the displayed acknowledgement. Data already collected remains with providers for the stated retention periods.

The previous banner asked about statistics only, so we ask every visitor again. If you refuse now, the refusal also withdraws the consent given then, on the server too; if the connection fails, the request stays in the browser and is retried on the next page you open.

How long Google keeps the data

In Google Analytics, user-level and event-level data is kept for 14 months, a term we set, after which Google deletes it. The term restarts on every new visit from the same browser, so a returning visitor's data stays as long as they keep returning, plus 14 months.

Aggregated reports are not tied to a person and are not covered by that deletion.

For Google Ads and Meta we do not set the retention period: it is the one in their policies, https://policies.google.com/technologies/retention and https://www.facebook.com/privacy/policy/.

Where the data goes

Google may process the data in the United States, under the EU-US Data Privacy Framework and Google's standard contractual clauses.

Meta Platforms Ireland Ltd. may transfer the data to Meta Platforms, Inc., in the United States, under the EU-US Data Privacy Framework and standard contractual clauses.