Cookie Policy

Last Updated: October 7, 2025

This Cookie Policy explains how Zyphor Ltd (“ZYPHOR”, “we”, “us”) uses cookies, SDKs, pixels and similar technologies (“cookies”) on zyphor.io (the “Site”). Read this alongside our Privacy Policy.

We comply with UK PECR, UK GDPR, and—where applicable—EU ePrivacy and EU GDPR.

1. What are cookies?

Cookies are small files stored on your device. Similar technologies include pixels, local storage, device IDs, and SDKs (for apps).

2. Legal bases consent

Under PECR/ePrivacy, non-essential cookies (e.g., analytics, advertising) require your prior consent. Strictly necessary cookies operate on our legitimate interests to deliver the Site and checkout you request. We do not set non-essential cookies until you consent via our banner.

3. Managing your choices

  • Use Cookie Settings (footer link/banner) to accept, reject, or choose categories at any time. Reject is as easy as Accept; no pre-ticked boxes; scrolling ≠ consent.
  • We re-prompt at least every 12 months or on material changes and keep records of consent (timestamp, region, categories) for audit.
  • You can also change browser settings; blocking some cookies may affect functionality (e.g., cart, checkout).

Global Privacy Control (GPC). If we detect a valid GPC signal, we treat it as an opt-out for non-essential cookies in that browser.

4. Cookie categories we use

  1. Strictly necessary (no consent)
    Security/CDN, load balancing, cookie-consent state, customer account/session, cart/checkout, fraud prevention.
  2. Functional (consent in UK/EEA)
    Remember preferences (e.g., locale, currency), improved features.
  3. Analytics performance (consent)
    Usage measurement (GA4/Shopify), A/B testing, diagnostics, error tracking.
  4. Advertising personalisation (consent)
    Meta and TikTok pixels for ad measurement, frequency capping, retargeting, cross-site profiling.

5. Third-party partners signals

We may use Google Consent Mode v2 (so Google tags respect your choices) and, if enabled, IAB TCF v2.2 with participating ad partners. Partners act per our instructions and apply appropriate safeguards.

6. International transfers

Some providers are outside the UK/EEA. Where personal data are transferred, we use EU SCCs and the UK IDTA/UK Addendum, plus transfer risk assessments and supplementary measures where required. See our Privacy Policyfor details.

7. Children

Our Site is not directed at children (under 13 in the UK; up to 16 in some EEA countries). We do not knowingly use behavioural advertising cookies for children.

8. Email pixels SDKs

Marketing emails may include pixels (opens/clicks) to improve relevance. You can unsubscribe or disable images. Any mobile SDKs follow the same consent model.

9. Cookie inventory (live list)

Your current choices and a live list of cookies (names, providers, purposes, durations) are available via Cookie Settings. Typical entries for our stack:

Strictly necessary (no consent)

Name (example) Provider Purpose Type Duration Legal basis
_shopify_country Shopify Storefront localisation 1st-party Session Legitimate interests
cart, cart_sig, cart_ts Shopify Cart/checkout integrity 1st-party Session–2 weeks Legitimate interests
secure_customer_sig Shopify Logged-in customer security 1st-party 1 year Legitimate interests
cookietest, cookie_consent CMP / Site Store consent state 1st-party 6–12 months Legitimate interests

 

Functional (consent in UK/EEA)

Name (example) Provider Purpose Type Duration Legal basis
cookietest, cookie_consent Shopify Remember currency/locale 1st-party 1 year Consent

 

Analytics performance (consent)

Name (example) Provider Purpose Type Duration Legal basis
shopify_y, _shopify_s Shopify Analytics Session attribution/analytics 1st-party 1 year / 30 min Consent
_ga Google Analytics 4 Usage measurement 1st-party 2 years Consent
_ga_<property> GA4 Session/visitor scoping 1st-party 2 years Consent
_gid GA4 Daily user differentiation 1st-party 24 hours Consent
_gcl_au GA4 Ads conversion linking 1st-party 3 months Consent

 

Advertising & personalisation (consent)

Name (example) Provider Purpose Type Duration Legal basis
_fbp Meta Ad measurement/retargeting 1st-party 3 months Consent
fr Meta (facebook.com) Ad delivery 3rd-party 3 months Consent
_ttp, _tt_enable_cookie TikTok Ad measurement/retargeting 1st-/3rd-party up to 13 months Consent

 

10. Retention

Cookie lifetimes are listed above or in the live inventory. Related personal data are retained per our Privacy Policy.

11. Changes to this Cookie Policy

We’ll update this page and the “Last updated” date when practices change. Where required, we will re-present the consent banner or otherwise notify you.

12. Contact us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:

Zyphor Ltd 
Email: contact@zyphor.io
Address: 128 City Road, London, ENG, EC1V 2NX, United Kingdom