Cookie Policy
What cookies we set, why we set them, and how you can change your choice at any time.
Last updated: 18 August 2026
What cookies are
Cookies are small text files stored on your device when you visit a website. They let a site remember things like your basket, your sign-in session, or how you found us. We also use similar technologies such as localStorage, which works the same way for the purposes of this policy.
Your choice
When you first visit evrycard.co.uk you will see a cookie banner. Nothing beyond strictly necessary cookies is set until you choose — analytics and marketing tags start in a denied state under Google Consent Mode v2, so no measurement or advertising identifier exists on your device before you accept.
You can change your mind at any time, and withdrawing consent is as easy as giving it. Reopening the panel below lets you switch each category on or off; turning analytics off also deletes any Google Analytics cookies already on your device.
If you are signed in to an Evrycard account, your choice is saved to that account as well as to this browser, so you are not asked again on your phone, tablet or laptop once you have decided. Signed-out visitors have their choice stored only on the device that made it.
Consent linked to your account
Cookie choices are normally per browser: clearing your browsing data, using private mode, or switching device resets them and the banner appears again. To avoid re-asking people who have already decided, we attach the choice to your Evrycard account when you are signed in.
- What is stored — only the categories you allowed (analytics yes/no, marketing yes/no), the date you chose and the policy version. No browsing history is attached.
- When it applies — on sign-in we restore your saved preference to the current browser, so the banner stays hidden and your tags load exactly as you chose.
- Changing it — any later change made while signed in updates the account record too, and applies on your next visit from any device.
- Deleting it — closing your account removes the stored preference along with the rest of your account data.
Legal basis and how long consent lasts
Strictly necessary cookies are set under Regulation 6(4) of the Privacy and Electronic Communications Regulations (PECR), which permits storage that is essential to deliver a service you have asked for. Everything else — analytics and marketing — is set only on the basis of your consent, and the related personal data is processed under UK GDPR Article 6(1)(a).
In line with ICO guidance, we ask again at least every 6 months, or sooner if this policy changes materially or we add a new category of cookie. Until you answer, non-essential storage stays denied.
Strictly necessary cookies (always on)
These make the site work and cannot be switched off. They include your basket contents, checkout progress, sign-in session, guest order token, security/anti-fraud protection, and your saved cookie choice itself. They set no advertising identifiers.
| Cookie | Purpose | Retention |
|---|---|---|
| evrycard_cookie_consent | Stores your cookie choice | 12 months |
| evrycard_cart / checkout keys | Basket and checkout progress | Session – 30 days |
| evrycard guest token | Lets guests view their own order | 30 days |
| WordPress session cookies | Sign-in and security | Session – 14 days |
Analytics cookies (consent required)
Set only if you select "Accept all" or enable analytics in Preferences. They tell us which pages are used, how people move through checkout and where things break, always in aggregate.
| Cookie | Provider | Retention |
|---|---|---|
| _ga, _ga_* | Google Analytics 4 | Up to 24 months |
| _gid | Google Analytics 4 | 24 hours |
Marketing cookies
We do not set advertising cookies unless you allow them. If you enable marketing in Preferences, Google Ads conversion cookies may be set so we can measure which campaigns lead to orders. With marketing declined, ad data redaction stays on and no advertising identifiers are stored.
Third-party services
| Service | What it is used for | Category |
|---|---|---|
| Stripe | Payment processing and fraud prevention during checkout | Strictly necessary |
| Tawk.to live chat | Keeps a support conversation going between pages | Strictly necessary |
| Google Analytics 4 | Aggregated usage and checkout funnel measurement | Analytics (consent) |
| Google Ads | Measuring which campaigns lead to orders | Marketing (consent) |
| Cloudflare | Security, bot protection and content delivery | Strictly necessary |
These providers act as our processors, or as independent controllers where their own terms say so. Google may process some data outside the UK — see the transfers section of our Privacy Policy.
What we never do
- We do not sell or rent cookie data, and we do not run third-party ad networks or trackers on the site.
- We do not use cookies to build profiles of individual visitors, and analytics reporting is aggregated.
- We do not place non-essential cookies before you consent, and we do not treat continuing to browse as consent.
- We do not read the contents of your NFC business cards or profile data through cookies — that information lives in your account, not in your browser storage.
Managing cookies in your browser
You can also block or delete cookies in your browser settings. Doing so may stop the basket, checkout or sign-in from working, and it will clear the record of your cookie choice so the banner returns. Guidance is available for Chrome, Safari, Firefox and Edge.
Most browsers also offer a "Do Not Track" or Global Privacy Control signal. Where a recognised opt-out signal is sent, we treat it as a refusal of analytics and marketing cookies.
Changes and how to contact us
We review this policy whenever we add or remove a tool that stores data on your device. The date at the top of this page always reflects the current version, and material changes reset consent so you are asked again.
Questions about cookies, or a request to see what is stored against your account? Email [email protected] and we will reply within 1–2 hours during working hours. You can also complain to the UK Information Commissioner's Office at ico.org.uk.
More information
How we handle personal information generally is explained in our Privacy Policy. Our Terms & Conditions and Refund & returns policy cover the rest of your relationship with us.