Last updated 15 October 2026
Essential authentication cookies
The pa_access_token and pa_refresh_token cookies keep signed-in customers and the administrator authenticated. They are HTTP-only, secure in production and use SameSite=Lax. They are necessary for the account and protected-content service.
Basket storage
The pa-cart value is stored in your browser’s local storage so your selected items remain on that device. It is not a cookie and is not the authoritative order record. You can remove it by clearing site data in your browser.
Optional technologies
No advertising, behavioural profiling or non-essential analytics cookies are intended in this release. If optional technologies are introduced, they will remain off until you make a clear choice, and a consent control will let you change that choice.
Official guidance
These links are provided for transparency and do not replace legal advice.
ICO: cookies and similar technologies