Cookies, privacy & your choices

Cookies are small files or pieces of information that can be stored on your computer, smartphone, tablet or other device when you visit a website.

They can allow a website to recognise a device, remember choices or previous actions, maintain a shopping basket, support secure checkout and provide information about how the website is being used.

UK privacy rules are not limited to traditional cookies. They may also apply to other technologies that store information on, or access information from, a user's device.

These can include:

• cookies;
• tracking pixels;
• scripts and tags;
• web or local storage;
• link decoration and navigational tracking; and
• device fingerprinting technologies.

We refer to these collectively as storage and access technologies.

Our use of storage and access technologies is governed primarily by the Privacy and Electronic Communications Regulations, commonly known as PECR.

The PECR rules have been updated by changes introduced through the Data (Use and Access) Act 2025.

Where information stored or accessed constitutes personal data, the UK GDPR and Data Protection Act 2018 may also apply.

Unless an applicable exception applies, storage or access technologies generally require us to:

• provide clear information about the technology;
• explain what it does and why it is used; and
• obtain appropriate prior consent.

Where consent is required, it must represent a genuine positive choice.

We do not treat silence, inactivity or simply continuing to browse our website as consent.

Technologies that require consent should not be used for the relevant purpose before the appropriate choice has been made.

Our Shopify privacy controls currently provide separate choices for:

• Personalization;
• Marketing; and
• Analytics.

Required technologies remain active because they are necessary for core website functionality or an applicable legal exception applies.

PECR contains specific exceptions under which storage or access may take place without prior consent.

Communications

An exception may apply where the sole purpose is to carry out the transmission of a communication over an electronic communications network.

Strictly necessary

An exception may apply where a technology is strictly necessary to provide a service that you have requested.

This can include technologies necessary for shopping baskets, secure checkout, authentication, security or fraud prevention.

Statistical purposes

An exception may apply where the sole purpose is collecting statistical information about use of a service or website with a view to improving it.

The statutory conditions must be met, including providing appropriate information and a simple, free means of objecting.

This exception cannot be relied upon where the same technology is also used for an incompatible purpose, such as behavioural advertising.

Appearance or functionality

An exception may apply where the relevant purpose is adapting the way a service appears or functions in accordance with a user's preference.

The statutory conditions must again be met, including providing an appropriate means of objecting.

Emergency assistance

A further limited exception relates to identifying a device's geographical position for the sole purpose of providing emergency assistance. This is not ordinarily relevant to our online store.

Required

These technologies support functions necessary for the operation or security of our online store.

They may support:

• shopping baskets;
• checkout;
• customer authentication;
• security and fraud prevention;
• country or currency handling;
• store functionality; and
• recording privacy choices.

Personalization

Shopify describes this category as technologies that store details about customer actions or preferences to personalise a future visit.

Depending on their exact purpose and configuration, these technologies may operate under an applicable exception or require your consent.

Marketing

Marketing technologies can be used for advertising, campaign measurement, attribution and related marketing purposes where those services are enabled.

We use the appropriate consent controls where consent is required for these purposes.

Analytics

Analytics technologies help us understand how customers use and interact with the website.

They can provide information about visits, sessions, traffic sources and interactions so that we can identify areas of the website that may be improved.

Our online store is powered by Shopify.

Shopify documents the following cookies as cookies that may be used on merchant storefronts. Not every cookie will necessarily be placed during every visit.

Store functionality

Reporting and Analytics

Marketing

We use Shopify's native Customer Privacy functionality to present privacy choices to visitors in the United Kingdom.

The current preference centre provides the following categories:

• Required — always active;
• Personalization — customer choice;
• Marketing — customer choice; and
• Analytics — customer choice.

The preference centre also provides options to accept all, decline all optional categories or save individual choices.

Google Analytics is active on our Shopify store through our Google & YouTube integration.

We use Google Analytics to help understand how visitors interact with the website and to measure website performance.

Depending on configuration, Google Analytics may process information including:

• pages viewed;
• website and session interactions;
• approximate traffic sources;
• browser or device information; and
• pseudonymous identifiers.

Where consent is required, Analytics is controlled through the Analytics choice within Shopify's Cookie and Privacy Preferences.

Google may update its analytics technology and cookie configuration over time.

Our Shopify store is connected to the Google & YouTube sales channel.

The integration currently supports services including Google Merchant Center, local inventory and Google Analytics.

Shopify's Customer Events system currently identifies the Google & YouTube integration as an active web pixel.

Technologies associated with Google services are subject to the privacy controls applicable to their purpose.

For example, analytics processing that requires consent is governed by the Analytics preference. Marketing or advertising technologies, if enabled in future, would be subject to the appropriate Marketing consent requirements.

We periodically review our Google integrations so that this Policy and our Shopify privacy configuration remain aligned with the services actually in use.

Some features of our online store are provided by or interact with third-party service providers.

Our currently confirmed technology providers include:

• Shopify — ecommerce platform, checkout, privacy controls and store analytics; and
• Google — Google & YouTube integration and Google Analytics.

These providers may process information in accordance with the services they provide and their own applicable privacy information.

Where a third-party storage or access technology requires consent, it should not be used for that purpose until the required consent has been obtained.

You can return to Shopify's Cookie and Privacy Preferences at any time.

You can:

• accept all available optional categories;
• decline all optional categories; or
• make individual choices for Personalization, Marketing and Analytics.

You can also manage or delete cookies through your web browser.

Blocking Required technologies may prevent important parts of the website, shopping basket, customer account or checkout from operating correctly.

Where we rely on consent

You can change or withdraw your consent through Shopify's Cookie and Privacy Preferences.

Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.

Where an exception applies

Where a statistical or appearance exception requires us to provide a simple and free means of objecting, we will provide an appropriate mechanism for doing so.

The length of time information remains on a device depends on the technology and its purpose.

Session technologies

These generally operate for the duration of a browsing session and may expire when that session ends.

Persistent technologies

These may remain for a defined period or until they are deleted.

Typical durations for known Shopify and Google cookies are shown in the tables within this Policy.

Providers may update these durations, and browser privacy features may also reduce their effective lifetime.

Information collected through storage and access technologies may in some circumstances constitute personal data or become personal data when combined with other information.

Where this occurs, applicable UK data protection requirements also apply.

Our Privacy Policy provides further information about how Cycle-In Logistics Ltd collects, uses, shares, stores and protects personal information and explains the data protection rights available to individuals.

We may update this Policy where:

• technologies used on the website change;
• Shopify, Google or another service provider changes its technology;
• a new app, pixel or integration is introduced;
• an existing integration is removed;
• our purposes for using a technology change;
• applicable law or regulatory guidance changes; or
• a periodic privacy review identifies information that should be updated.

Where a new purpose requires consent that is not covered by an existing valid consent, appropriate consent will be obtained before the technology is used for that new purpose.

The date shown at the top of this Policy identifies when this version was last updated.

If you have questions about this Policy, the technologies used on our website or your privacy choices, please contact:

Cycle-In Logistics Ltd
Unit 5 Carr Lane Business Park
Carr Lane
Hoylake
Wirral
CH47 4AZ

Email: sales@cycle-in.co.uk
Telephone: 0330 220 1207