Cookies & Storage
Cookie Policy
Last updated: 3 September 2026
1. What cookies and similar technologies are
Cookies are small data files stored on a browser or device. Similar technologies, including local storage, pixels and tags, can also store information on or access information from a device. These technologies may support website functions, remember choices, measure usage or help assess marketing effectiveness.
2. Our consent categories
| Category | Purpose | Default |
|---|---|---|
| Essential | Website security, WordPress/WooCommerce sessions, login, cart, checkout, fraud prevention, payment and storage of your privacy choices. | Always active where required for the service requested. |
| Analytics | Helps us understand how visitors use the website, diagnose usability issues and improve performance. This may include Google Analytics, Hotjar or Microsoft Clarity when enabled. | Off until you consent. |
| Marketing & advertising | Measures campaigns, supports conversion attribution, audience creation or advertising. This may include Meta Pixel, LinkedIn Insight Tag and marketing tags deployed through Google Tag Manager when enabled. | Off until you consent. |
3. Essential technologies
| Technology / category | Purpose |
|---|---|
| WordPress session / login cookies | Authentication, account security and administration for logged-in users. |
woocommerce_cart_hash / woocommerce_items_in_cart | Allows WooCommerce to recognise changes to the shopping cart. |
wp_woocommerce_session_* | Associates a visitor with cart/session data during shopping. |
| Cloudflare Turnstile / bot-protection technologies | Used on selected login, password-reset, registration and enquiry forms where necessary to distinguish legitimate use from automated abuse. Turnstile can use browser/device, network and challenge-response signals and necessary storage or security technologies to provide the protection. |
| Security, payment and fraud-prevention technologies | Used where necessary to protect the service or complete a payment requested by you. Payment providers may use their own necessary technologies. |
easethat_consent_v1 (browser local storage) | Records your analytics and marketing preferences, consent version and choice time so the website can honour your decision on later visits. |
Cloudflare Turnstile is treated as an Essential security service when it is enabled on a protected form. It is therefore not switched on or off through the Analytics or Marketing consent categories. Disabling essential security technologies in the browser may prevent protected forms from being submitted successfully.
4. Optional analytics technologies
EaseThat uses Google Analytics 4 (GA4) on eligible public pages only when it has been configured by EaseThat and you have accepted the Analytics category. GA4 may process page views, referral source, approximate location derived from IP address, device/browser information, interactions and pseudonymous identifiers. EaseThat's integration removes query strings from page locations, disables Google Signals and advertising-personalisation signals, and excludes Team Portal, Customer/My Account, company-account, cart, checkout, password, quotation, invoice and protected PDF routes.
| Analytics technology | Purpose | Typical maximum duration |
|---|---|---|
_ga | Distinguishes pseudonymous visitors and sessions for GA4 reporting after Analytics consent. | Up to 2 years. |
_ga_<stream-id> | Maintains session state for the configured GA4 web stream after Analytics consent. | Up to 2 years. |
Google Tag Manager, Hotjar and Microsoft Clarity are not part of this GA4 integration. If EaseThat adds another optional analytics or tag-management service later, it must be documented and connected to the relevant consent category before activation.
5. Optional marketing and advertising technologies
If enabled and accepted by you, Meta Pixel, LinkedIn Insight Tag and similar technologies may measure advertising or campaign performance, record conversions, associate website activity with advertising identifiers and support audience or retargeting functions. These technologies are not treated as essential and will not be intentionally activated by the theme before the relevant consent.
6. Third parties and international processing
Optional technologies may be supplied by companies such as Google, Meta, LinkedIn, Hotjar and Microsoft. Those providers may process information under their own privacy terms and may process data outside the UK. Where required, EaseThat will use appropriate contractual or legal safeguards for restricted international transfers and will review supplier terms before enabling a service.
7. Your choices
When no preference has been stored, the website allows you to Accept all, Reject optional technologies, or Manage preferences by category. Rejecting optional technologies does not prevent access to ordinary website content or B2B shop functionality.
You can change or withdraw your choice at any time using the Cookie Preferences control in the website footer. You can also delete or restrict cookies through your browser, although blocking essential WordPress or WooCommerce technologies may prevent login, cart, checkout or payment functions from working correctly.
8. Cookie inventory and review
The exact cookie names, providers and durations can change as suppliers update their technology or as EaseThat changes configuration. Before activating a new analytics, advertising, chat, CRM, embedded-media or marketing service, we will review the actual technologies used, update this policy where appropriate and ensure optional technologies are connected to the consent mechanism.