Last updated: 7 September 2026
This notice explains how Some Grub uses cookies, pixels, browser storage and similar technologies on somegrub.co.uk and on the Shopify pages used for cart and checkout.
Your choice
Strictly necessary technologies operate because the website and checkout cannot work properly without them. The anonymous site statistics described below operate by default under the statistical-purpose exception and can be switched off at any time. Google Analytics also sends cookieless measurement signals with analytics storage denied, as described below. Cookie-backed analytics, PostHog, Microsoft Clarity, personalisation and advertising technologies remain off unless you choose the relevant option.
The first consent screen must offer equally clear Accept and Decline choices, with no pre-selected optional categories. Manage preferences lets you choose categories separately. You can change or withdraw a choice at any time through Privacy and cookie choices in the site footer. Rejecting optional technologies does not stop you buying from us.
Categories
Strictly necessary
These support essential functions such as security, load balancing, fraud prevention, remembering the active basket and completing checkout. They do not require consent where the legal exemption applies. They must not be used for advertising or optional analytics.
Functional
These remember choices or information you ask the site to keep, such as optional tools or a saved dog profile. Where the storage is not strictly necessary for a service you requested, it remains off until you choose it.
Our human live chat is provided by Crisp. We do not contact Crisp or set its chat cookie when a page first loads. When you press the human-chat button, Crisp loads and may set a functional cookie beginning crisp-client/ so your requested conversation can continue between pages and visits. We configure that cookie to expire after 30 days. It is used for the chat service, not advertising.
Anonymous site statistics
We use a first-party statistical system to count public page views, landing pages, broad traffic-source categories, page-to-page routes, consent-screen choices and whether a visit progressed to checkout. It immediately adds each event to a daily total. The statistics dataset does not contain a visitor or session ID, query string, raw referrer, campaign or advertising click ID, IP address, user-agent string, form contents, customer information or an exact event time. Small route totals are suppressed in reports.
We use these totals only to understand and improve the website and its privacy controls. We do not use them to identify or profile anyone, make decisions about a person, measure advertising conversions or send data to an advertising platform. You can switch this use off under Choose separately in the privacy controls. The change applies immediately and clears the temporary route state held in that browser tab.
Analytics
Google Analytics uses Advanced Consent Mode. Before you allow analytics, analytics storage remains denied and Google may receive cookieless measurement signals for aggregate reporting and modelling. Advertising storage, advertising user data and advertising personalisation remain denied, and advertising identifiers are redacted. If you allow analytics, Google may then use analytics cookies and cookie-backed identifiers.
With your analytics consent, PostHog and Microsoft Clarity also help us understand aggregate use, diagnose problems and improve pages. Depending on the service and settings, this may involve device or browser identifiers, IP address, page URLs, referrer, interactions and session recordings. We configure these services to avoid deliberately capturing form contents or unnecessary personal information.
Advertising
With your consent, Meta and other approved advertising providers may use pixels, cookies and browser identifiers to record visits and actions, attribute an enquiry or purchase to an advert, control frequency and build website audiences.
Meta technologies may create or use identifiers such as _fbp and _fbc and may receive a Meta click reference, IP address, user-agent information, page URL, event name, event time, an event or order identity, and purchase value and currency. Where advanced matching is deliberately enabled after approval, Meta may also receive normalised and hashed contact identifiers. Hashing is not anonymisation.
We do not send dog-health answers, quiz answers, order contents or free-text responses to Meta.
Some Grub browser storage
The site also uses first-party browser storage to keep an active basket and, where permitted, remember attribution information such as landing page, referrer, UTM campaign labels and advertising click references. Advertising identifiers and click references must not be created, derived, read, stored or sent to Meta after an advertising rejection. Optional attribution storage is deleted or expires after no more than 90 days under the current design.
Provider information and retention
The live cookie-preference panel should contain an up-to-date inventory naming each technology, provider, purpose, category and expiry. This inventory must be tested against a clean browser whenever a provider or tag changes.
Meta states that Business Tools event data may be retained for up to two years and that audiences created from event data remain until they are deleted. Customer-list audiences and customer-list matching are described separately in our Privacy Notice because they use contact information rather than relying only on a browser cookie choice.
What rejection must do
When you decline advertising, or later withdraw advertising consent, Some Grub must:
- not load the Meta Pixel library;
- not send browser or server advertising events for that visit;
- not create, derive, read, persist or pass
_fbp,_fbc,fbclidor equivalent advertising identifiers for Meta use; - remove optional first-party advertising storage that Some Grub can control; and
- pass the rejected marketing/advertising state to any connected Shopify customer-privacy and pixel controls.
The public privacy-choice control is the source of the browser-level decision. A privacy notice by itself does not reject a request.
Contact
Questions about cookies or advertising choices can be sent to [email protected].