Cookie Policy

What cookies and browser storage are

A cookie is a small file a website asks your browser to keep. Websites also use similar storage built into your browser, such as "local storage", to remember things between pages. Both do the same basic job: they let a site remember something so it works properly. The UK rules on consent (PECR, explained below) cover both, not just cookies.

"First-party" means the storage is set by us (usedmobility.uk). "Third-party" means it is set by another company — such as Google or Meta — through a tag on our pages. Everything needed to run the shop is first-party. The optional analytics and advertising tools, described below, are third-party, and they only ever run if you have agreed to them.

Your choices: the cookie banner

When you first visit UsedMobility.uk we show a cookie banner. It lets you accept or decline the optional cookies before any of them are set. Nothing in the analytics or advertising categories runs until you choose to allow it — if you do nothing, or you decline, only the strictly necessary storage is used. Declining is as easy as accepting.

The cookies fall into three categories:

• Strictly necessary — always on. These run the shop, your basket and sign-in, and cannot be switched off.
• Analytics — optional, and off unless you allow it. These help us see how the site is used.
• Advertising and marketing — optional, and off unless you allow it. These help us show you our adverts on other sites.

You can change your choice whenever you like: open "Cookie preferences" in the footer of any page, turn the categories on or off, and save. You can also clear cookies in your browser at any time (see "How to control cookies" below). We remember your choice for about 12 months, after which the banner will appear again so you can confirm or change it.

Strictly necessary storage (always on)

Here is everything we always store in your browser to make the shop work. All of it is first-party. Under the UK rules (the Privacy and Electronic Communications Regulations, known as PECR), a website does not need to ask for your consent for storage that is strictly necessary to provide a service you have asked for — a shopping basket and staying logged in are the classic examples. We have shown whether each item is a cookie or browser "local storage", because you find and clear the two in slightly different places (see the section further down).

Cookies (these are true HTTP cookies):

• Cookie-choice record ("um_cookie_consent") — remembers whether you accepted or declined the optional cookies, so we can honour your choice and not keep asking you on every page. Purpose: to store your cookie preferences. It is first-party and strictly necessary, holds only your choice (not personal details), and lasts about 12 months, after which the banner asks again.
• Staff sign-in cookie ("um_session") — keeps a member of our team signed in to the back-office after they log in. Purpose: security and login. It holds only a random token, no personal details, and lasts about 12 hours or until sign-out. This is set only when a staff member logs in, never for ordinary shoppers.
• Trade sign-in cookie ("um_trade") — the same idea for approved trade partners signed in to their trade account. Purpose: security and login. Random token only, lasts about 12 hours or until sign-out. Set only when a trade partner logs in, never for ordinary shoppers.

Browser local storage (these are saved in your browser's site data, not as cookies):

• Your basket ("um_basket", and "um_trade_basket" for trade partners) — remembers the items you have added so your basket is still there as you move between pages. Purpose: your shopping basket. It stays until you check out or clear it.
• Checkout recovery token ("um_cart_token") — saved only after you enter your email and start checkout. It links to a saved copy of your order on our system, so you can pick up where you left off, and so we can send you a reminder or give you a call if you did not finish. Purpose: to help you complete an order you have already begun. It stays until your order is placed or you clear it. How we use your email for those reminders is explained in our Privacy Policy.

Analytics cookies (only if you consent)

If you allow analytics, we use Google Analytics 4, provided by Google LLC, to understand how the site is used — for example which pages are visited and how people move through the shop — so we can improve it. This sets Google cookies and collects information about your visit. It runs only after you have agreed, and you can switch it off again at any time in Cookie preferences.

When it is on and you have agreed, Google Analytics 4 sets third-party cookies including:

• "_ga" — tells one visitor apart from another so we can count visits; lasts about 2 years.
• "_ga_<id>" (where <id> is our Analytics property code) — keeps track of your session for Analytics; lasts about 2 years.

We use Google Consent Mode v2. This means the Google tags on our site default to "denied": they do not set cookies or collect identifiers until you have given your consent.

These tools are switched on and configured by our staff. At the moment they are turned off — no analytics IDs have been set — so no analytics cookies are being used yet. This section describes what happens once we turn them on and you have agreed.

Advertising and marketing cookies (only if you consent)

If you allow advertising cookies, we use the following. They set third-party cookies and share information about your visit with Google or Meta:

• Google Ads, provided by Google LLC — to show you our adverts on other websites after you have visited us. This is known as remarketing or retargeting.
• Meta (Facebook and Instagram) Pixel, provided by Meta Platforms, Inc. — to show you our adverts on Facebook and Instagram after you have visited us (remarketing), and to help us reach new people whose interests are similar to our customers (this is known as "lookalike" or similar audiences).

When these are on and you have agreed, they set third-party cookies including:

• "_gcl_au" (Google Ads) — used to measure advert performance and support remarketing; lasts about 90 days.
• "_fbp" (Meta Pixel) — identifies your browser so Meta can show you our adverts and build similar audiences; lasts about 90 days.
• "_fbc" (Meta Pixel) — records that you reached us by clicking one of our adverts; lasts about 90 days when set.

Like analytics, these run only after you consent, and you can switch them off again at any time in Cookie preferences. As above, these tools are configured by our staff and are currently turned off (no advertising IDs have been set), so no advertising cookies are being used yet. This section describes what happens once we turn them on and you have agreed. You can read more about the cookies these companies use, and how they handle your data, in Google's Types of cookies used by Google and privacy policy, and in Meta's Cookies Policy and privacy policy.

Sending information outside the UK

Google LLC and Meta Platforms, Inc. are companies based in the United States. If you allow analytics or advertising cookies, some of your information may be transferred to and processed in the US. Where that happens, it is protected by appropriate safeguards required by UK data protection law — such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses (SCCs), and both companies are also certified under the EU–US Data Privacy Framework and its UK Extension. If you do not allow these optional cookies, no such transfer takes place through them.

The lawful basis for these cookies

For the strictly necessary storage, we rely on it being needed to provide the service you have asked for, so your consent is not required.

For analytics and advertising cookies, and for any processing that follows from them, our lawful basis under UK GDPR is your consent (Article 6(1)(a)). You give that consent through the cookie banner or through Cookie preferences, and you can withdraw it at any time — withdrawing is as easy as giving it. Withdrawing your consent does not affect anything that was done before you withdrew it.

Payments

Today we are not set up to take card payments directly on the site, so no payment-provider cookies are set at the moment. When you place an order we reserve it and contact you to arrange payment.

When card payment is switched on, paying will send you from our site to our payment provider's own secure page (for example Stripe, at checkout.stripe.com, or Klarna where offered). Any cookies those providers use are set on their own websites, not on usedmobility.uk, and are used by them to process your payment safely and prevent fraud. For those cookies the payment provider acts as an independent controller, and their own cookie and privacy notices apply. We will link to them from the checkout when this goes live.

How to control cookies

The easiest way to manage the optional cookies is the "Cookie preferences" link in the footer of any page, where you can turn analytics and advertising on or off and save your choice. On top of that, you are always in charge of all cookies and stored data through your own browser settings. You can view, block or delete them at any time. In most browsers you will find the options under a menu called Settings, then Privacy, Security or Cookies.

Please note that our basket and recovery items (um_basket, um_trade_basket and um_cart_token) are saved as browser "local storage", not as cookies, so they may not appear in your browser's Cookies list. To remove them, look for "Site data", "Local storage" or "Clear data for this site" instead. Our cookies — um_cookie_consent, and the two sign-in cookies um_session and um_trade — do appear in the normal Cookies list. If you clear um_cookie_consent, the cookie banner will show again on your next visit.

Because the strictly necessary storage is needed to run the shop, clearing it has an effect. For an ordinary shopper the practical result is simply that your basket empties. If you are a staff member or trade partner who is signed in, clearing it will also sign you out. Either way, the site itself will still work.

More information and how to reach us

To learn what personal information we hold and how we look after it, please see our Privacy Policy.

If you have any questions about cookies, you can contact us or email hello@usedmobility.uk.

You also have the right to complain to the Information Commissioner's Office (ICO) about how we handle your personal data, including your cookie choices. You can reach the ICO at ico.org.uk, or by phone on 0303 123 1113. We would appreciate the chance to put things right first, so please do contact us as well.

UsedMobility.uk is a trading name of NBR Mobility Ltd, registered in England and Wales, company number 07231153, registered office: 142-144 Victoria Road, Diss, IP22 4JN. Our registration with the Information Commissioner's Office (ICO): [ICO registration number to be confirmed].