Cookie Policy Template

This Cookie Policy explains how Northwind Coffee Roasters Ltd ("we", "us") uses cookies and similar technologies on https://northwind-coffee.example, and what choices you have about them.

It takes effect on 1 October 2026 and sits alongside our Privacy Policy, which describes what we do with personal data once it has been collected.

What cookies and similar technologies are

A cookie is a small text file that a website asks your browser to store on your device. Other technologies do the same job by different means, and this policy treats them all the same way:

• Local storage and session storage held by your browser
• Pixels, tags and tracking beacons embedded in pages or emails
• Software development kits and device identifiers used inside apps

Session and persistent storage

Session cookies are deleted when you close your browser. Persistent cookies stay on your device until they expire or you delete them, so that your browser can be recognised on a later visit.

Strictly necessary cookies

Strictly necessary cookies are the ones without which the site cannot do what you have asked it to do. They keep pages loading, balance traffic across our servers, remember what you have typed into a form and protect against forged requests.

Because they are essential to delivering the service you asked for, we set them without asking for consent. You can still block them in your browser, but parts of the site will stop working if you do.

Session and authentication cookies

If you create an account, we set a session cookie when you sign in so that you stay signed in as you move between pages, and so that your session can be told apart from everyone else's.

We treat these as strictly necessary, because there is no way to keep you signed in without them. They are cleared when you sign out, and a separate cookie remembers your "keep me signed in" choice where you make one.

Payment processor cookies

Paid clause. This section is written for you when your answers need it — “Payments”, $14, paid once per policy.

Functional cookies

Paid clause. This section is written for you when your answers need it — “Subscriptions”, $14, paid once per policy.

Analytics cookies

Paid clause. This section is written for you when your answers need it — “Analytics and tracking”, $24, paid once per policy.

Third-party cookies

Some of the technologies described here are set by third parties rather than by us. Where that happens, the third party — not us — decides how long its cookie lasts and what it does with the information the cookie collects.

The third parties we allow to set cookies through our site typically include:

• Hosting, content delivery and security providers
• Email delivery and customer support providers
• Measurement and advertising partners

Each publishes its own cookie and privacy notice, and we ask each to keep an up-to-date list of what it sets.

Marketing and advertising cookies

Paid clause. This section is written for you when your answers need it — “Analytics and tracking”, $24, paid once per policy.

When we ask for your consent

We divide the technologies above into two groups.

1. Strictly necessary cookies, which we set because you asked for something that cannot be delivered without them. No consent is needed and they cannot be switched off from our banner.
2. Everything that is not strictly necessary, which we set only where you have allowed it or the law otherwise permits it.

Our cookie banner reflects that split, and refusing the second group is as easy as accepting it.

Consent before cookies are placed

Paid clause. This section is written for you when your answers need it — “GDPR wording (European Union)”, $34, paid once per policy.

Withdrawing your consent

Paid clause. This section is written for you when your answers need it — “GDPR wording (European Union)”, $34, paid once per policy.

Global Privacy Control and other opt-out signals

Paid clause. This section is written for you when your answers need it — “CCPA/CPRA wording (California)”, $34, paid once per policy.

Controlling cookies in your browser

Independently of anything we offer, your browser can block and delete cookies. The controls usually sit under settings named privacy, security or site data, and let you:

• Delete cookies already stored, individually or all at once
• Block cookies from being set at all, or only those set by third parties
• Clear cookies automatically each time you close the browser
• Send a request not to be tracked, which not every site honours

Blocking everything will break sign-in, checkout and anything else that depends on strictly necessary cookies. Clearing cookies also erases the record of the choices you made here, so our banner will ask again.

How long cookies stay on your device

Session cookies last only until you close your browser. Persistent cookies expire on a date set when they are created, which differs from cookie to cookie and, for third-party cookies, is decided by the third party.

As a general ceiling, we aim to hold the data obtained from our own persistent cookies for no longer than 24 months, and we ask our providers to set expiry periods no longer than that. Anything still needed after that point is kept only in aggregated form that cannot be traced back to a device.

Changes to this policy

We update this policy whenever the technologies we use change, and review it at least once a year. The effective date at the top tells you which version you are reading.

If a change means we start using a new category of non-essential cookie, we will ask for your consent again before that cookie is placed rather than relying on the consent you gave for the earlier set.

Contact us

If you have questions about this policy, want an itemised list of the cookies currently in use, or think something here is out of date, contact Northwind Coffee Roasters Ltd at privacy@northwind-coffee.example.