Last updated: [EFFECTIVE DATE].
1. What these are
A cookie is a small file a website asks your browser to keep. We also use similar technologies — local storage in your browser, and, if you consent to analytics, an identifier that tells one visit apart from another. This policy calls all of them cookies.
2. The four categories
Strictly necessary. These make the site work: they keep you signed in, hold your cart, protect forms against cross-site request forgery, and remember the cookie choice you just made. We set them without asking, because without them the site does not function. You cannot switch them off here; your browser can block them, and the site will then not work.
Functional. These remember choices you made: whether you prefer inches or millimetres, the kits you looked at recently, the path you took through the parts finder, and banners you dismissed. Off unless you turn them on. The site works without them; you just have to say "millimetres" more often.
Analytics. These tell us which pages people use, where the parts finder loses people, and which searches find nothing. We use it to fix the catalog. Off unless you turn it on.
Marketing. Advertising and retargeting identifiers, conversion tags and affiliate attribution. Off unless you turn it on, and forced off whenever your browser sends a Global Privacy Control signal.
3. The cookies we actually set
At the time of writing, this site sets only strictly necessary cookies. There is no analytics tag and no advertising tag on it. We ship the categories above anyway, so that the first tag anyone adds lands in a switch that already exists.
sd_sess — [LEGAL ENTITY NAME] — keeps you signed in — strictly necessary — 30 days.
sd_staff — [LEGAL ENTITY NAME] — keeps a staff member signed in to the admin area — strictly necessary — 30 minutes.
sd_cart — [LEGAL ENTITY NAME] — holds your cart before you sign in — strictly necessary — 30 days.
sd_anon — [LEGAL ENTITY NAME] — an anonymous identifier that ties your cookie choice to your browser, so we can prove what you chose — strictly necessary — 12 months.
sd_consent — [LEGAL ENTITY NAME] — records the choice you made, so we know what we are allowed to load — strictly necessary — 12 months.
[ANALYTICS VENDOR COOKIE TABLE — to be completed when a vendor is chosen. §7.13 item 14.]
This table is generated from the cookie registry in our code, not maintained by hand, so it cannot drift away from what the site actually sets.
4. Changing your mind
Use "Cookie preferences" in the footer of every page, or go to /privacy/preferences. You can turn any category on or off at any time. Turning a category off deletes that category's cookies from your browser straight away and records the withdrawal.
Withdrawing is exactly as easy as consenting: the same control, the same number of clicks.
5. What we do not do
We do not put a cookie wall in front of anything. The catalog, the parts finder, the product pages, the cart and the checkout all work fully after you press "Reject all". Nothing is gated on consent.
We do not pre-tick anything. Every non-essential category starts off.
We do not load a non-essential script and leave it idle waiting for permission. Until a matching consent exists, the tag is not on the page at all.
6. Browser controls
Your browser can block or delete cookies for any site. That control sits above ours and we will not work around it. Blocking strictly necessary cookies will stop you signing in or checking out.
7. Global Privacy Control
If your browser sends a Global Privacy Control signal, we treat it as an opt-out of the sale and sharing of your personal information. Marketing is forced off and stays off, and "Accept all" will not turn it back on while the signal is being sent. See the Privacy Policy, section 8.
8. How long we keep the record of your choice
We keep each consent record for 3 years after it is superseded or withdrawn, as proof that we had your permission. The IP address and user agent stored with it are truncated after 90 days.