Olilo UK & Ireland Ltd. ("Olilo", "we", "us", "our") deliberately keeps its use of cookies and browser storage to an absolute minimum. We don't run an advertising network, we don't profile you across the web, and we don't sell your data to anyone. This Cookie Policy explains exactly what we do and don't set today. It should be read alongside our Privacy Notice.
1. What Is a Cookie?
1.1. A cookie is a small text file a website stores in your browser when you visit it. Cookies are widely used to make websites work properly, to remember your preferences, or to provide information to site owners.
1.2. “Similar technologies” includes things like localStorage and sessionStorage - mechanisms built into your browser that behave much like cookies for the purposes of this policy. Where we use them, we treat them the same as cookies.
2. What We Set on olilo.co.uk
2.1. At the time this policy was last updated, the public olilo.co.uk website does not set any advertising cookies or cross-site tracking identifiers of its own. We do use a small amount of browser storage for site functionality, we use PostHog for analytics, and we use Cookiebot to record consent choices where relevant.
2.2. We do use a small amount of browser storage for functionality, all of which stays on your device and is never sent back to us:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| CookieConsent | cookie | Stores your Cookiebot consent preferences so the banner can remember your choices. | As set by Cookiebot |
| consumer-redirect-dismissed | localStorage | Remembers that you dismissed the consumer redirect popup so it doesn't reappear on later visits from the same browser. | Until cleared or overwritten |
| olilo_postcode_cache | localStorage | Caches your postcode lookup results (selected address and available services) so the availability checker survives a page refresh without re-querying. | Until cleared or overwritten |
2.3. None of these leave your browser. They cannot identify you - the popup items hold a boolean flag, and the postcode cache holds the results of your most recent availability check so we don't need to re-query the API on every page load.
3. Third-Party Services That May Set Cookies
3.1. A small number of third-party services we rely on may set their own cookies when you visit the site. We do not control these, and they operate under their own privacy documentation:
- Hosting / edge network - our site is served via Vercel and may pass through Cloudflare. These providers may set short-lived cookies (for example,
__cf_bmor similar) for bot management, load balancing, and DDoS protection. We specifically use Cloudflare Turnstile to protect our forms from bot activity. These are classed as strictly necessary under PECR. - PostHog - we use PostHog for product analytics, error tracking, and session recording. We treat this as strictly necessary for operating the site: it is how we detect outages, diagnose customer-reported issues, and ensure the postcode checker, plan picker, and order flow are working. It runs regardless of consent state. PostHog's privacy policy is at posthog.com/privacy.
- Cookiebot - we use Cookiebot to display and manage consent preferences. Cookiebot stores a consent cookie to remember the choices you make. Its privacy documentation is at www.cookiebot.com/en/privacy-policy.
- Supabase - our order form submits to a Supabase-hosted database. Supabase does not set cookies on your browser as part of this flow; data is sent as an API request from the page.
3.2. We do not currently use Google Analytics, Facebook Pixel, or similar advertising-style trackers on the public site. Our current analytics tooling consists of PostHog, configured for product improvement, session recording, error tracking, and aggregate traffic insights.
4. Your Choices
4.1. Because we do not currently use advertising cookies or cross-site trackers of our own, the main browser-side items in use are the storage entries listed in section 2 and Cookiebot's consent cookie. You can manage your consent choices through the Cookiebot banner and can still block or clear browser storage items through your browser settings - at worst, a dismissed popup may reappear or the checker cache may be cleared.
4.2. You can manage or delete cookies set by third parties (section 3) through your browser's settings. Instructions vary by browser - aboutcookies.org has clear guidance for all the common ones.
4.3. We respect “Global Privacy Control” (GPC) and the older “Do Not Track” (DNT) signal. If we ever add optional analytics or similar tooling, a browser sending either of those signals will be treated as having opted out.
5. Legal Basis
5.1. Our use of cookies and similar technologies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK General Data Protection Regulation (UK GDPR).
5.2. The strictly necessary cookies set by our hosting and edge providers rely on the PECR exemption for storage that is “strictly necessary for the provision of a service requested by the user.”
5.3. Any personal data processed via the services described above is handled under our Privacy Notice.
6. Changes to This Policy
6.1. We will update this Cookie Policy whenever what we set materially changes - for example, if we add analytics, introduce a customer portal that requires a login cookie, or change hosting providers. Material changes will be notified through the site. The “Last updated” date at the top of this page shows when it was most recently revised.
7. Contact Information
Olilo UK & Ireland Ltd.
Company Number: 16352417
Registered Office: 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE
For questions about this Cookie Policy or to exercise your rights under UK GDPR:
Email: support@olilo.co.uk
Community: discord.gg/olilo
You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at ico.org.uk.