Cookie Policy
Every cookie this site sets, what each one does, and how to change your mind.
The short version
We use a small number of cookies to keep the shop working — signing you in and remembering your basket. Nothing for analytics or advertising is set unless you accept it, and you can change your choice at any time using the "Cookie settings" link at the bottom of any page.
Strictly necessary — always on
These need no consent because the shop cannot function without them. <strong>pk_session</strong> keeps you signed in to your account and remembers your basket between visits. <strong>pk_admin_session</strong> does the same for staff signing in to the admin area. Both are httpOnly, so no script on the page can read them, and both expire on their own.
Your cookie choice itself
What you chose is stored in your browser under <strong>pk-consent</strong>. It is kept in local storage rather than in a cookie, so it is never sent to our server — recording a choice about cookies in a cookie would be circular. It records what you agreed to and when, and lapses after a year so you are asked again.
Analytics and advertising — only if you accept
If you accept analytics cookies and Google Analytics is switched on, Google sets <strong>_ga</strong> and <strong>_ga_<id></strong> to measure how the site is used. If you accept marketing cookies and the Meta pixel is switched on, Meta sets <strong>_fbp</strong> to measure which adverts lead to orders. Neither script is loaded at all until you accept — not loaded and idle, but never requested.
Payment — on the payment page only
When you reach the payment step, Stripe sets <strong>__stripe_mid</strong> and <strong>__stripe_sid</strong> to detect fraudulent card use. These are strictly necessary for the payment you have asked us to take: without them the fraud checks that protect your card do not run. They are not analytics or advertising cookies, they are not used to track you across other sites, and they are therefore not covered by the consent banner. What Stripe does with them is set out in its own privacy policy.
Changing your mind
Use the "Cookie settings" link in the footer of any page. You can accept everything, accept nothing beyond the strictly necessary, or choose analytics and marketing separately. Withdrawing consent takes effect immediately and no further data is sent — though anything already collected stays with that provider until it expires under their own retention rules.
Blocking cookies in your browser
You can block or delete cookies in your browser settings. Blocking the strictly necessary ones will stop you signing in and stop your basket working. That is a limitation of how the web works rather than a choice we have made.