Cookie Policy
A Legal Disclaimer
Last updated: 25 September 2026
PlumbParts Xpress Ltd | Company number 15330376
​
We do not activate non-essential analytics, advertising, retargeting or social-media tracking technologies until you consent. Continuing to browse, silence or inactivity is not consent. You can reject non-essential technologies as easily as you can accept them and can change your choice at any time through Cookie Settings.
​
Essential technologies keep the website and app secure, remember your basket, maintain sessions, process orders, support order fulfilment and provide features you request. Where a legal exception applies, they may operate without consent. Optional technologies support preferences, audience measurement, advertising, campaign attribution and social-media features.
​
Our marketing, analytics and advertising partners may include Mailchimp, Google, YouTube, Meta (including Facebook and Instagram), TikTok and LinkedIn. Their pixels, tags, SDKs and similar tools can recognise devices and help measure or personalise communications and advertising when the required consent has been given.
​
1. About this Policy
This Policy explains how PlumbParts Xpress Ltd (“PPX”, “we”, “us” or “our”) uses cookies and other technologies that store information on, or access information from, your device when you use our website, mobile application or related online services. It should be read with our Privacy Policy, which explains how we use personal data, our lawful bases, data sharing, international transfers, retention and your rights.
​
2. What these technologies are
A cookie is a small text file placed on a browser or device. The same legal rules can also apply to other storage and access technologies, whether or not they are called cookies. We may use browser cookies, local or session storage, tracking pixels, web beacons, scripts, tags, link-decoration parameters, mobile
SDKs, app-instance identifiers, advertising identifiers, authentication tokens, security identifiers and consent records.
​
3. The rules we apply
The Privacy and Electronic Communications Regulations 2003 (PECR), as amended, generally require consent before information is stored on or accessed from a device. UK data protection law also applies where personal data is involved. We may use a technology without consent only when its purpose and configuration fall within a legal exception.
Advertising, retargeting, advertising measurement, profiling and cross-site or cross-device tracking are not treated as strictly necessary. Where a technology has both an exempt and a non-exempt purpose, we obtain consent unless every purpose is covered by an exception.
​
4. Categories we use
Strictly necessary
These cookies support security, fraud prevention, login, basket, checkout, orders, consent choices, fulfilment, and features you request. They operate where an applicable legal exception is satisfied.
​
Preferences and functionality
These cookies remember your choices and enable optional features, content, or integrations. Consent is requested unless a legal exception applies.
​
Analytics and performance
These cookies measure use, diagnose faults, and help improve the website or app. Consent is normally requested unless a carefully configured statistical exception applies.
​
Advertising and social media
These cookies measure campaigns, attribute conversions, build audiences, retarget users, and support social features. They remain off until you consent where storage or access technologies are involved.
​
5. How we use the technologies
​
5.1 Strictly necessary and requested services
We may use essential technologies to authenticate users, keep accounts and sessions secure, remember a basket and checkout progress, process payments, prevent fraud, route traffic, provide delivery, location or tracking functions that you actively request, remember cookie choices and support fulfilment of Orders.
​
Where necessary to fulfil an Order or provide a requested feature, essential technologies may enable PPX to send or receive limited operational information with the Merchant, drivers or couriers, payment providers, mapping or routing providers, communications providers, customer-support providers and other fulfilment partners. This operational use is not advertising or profiling.
​
5.2 Preferences and functionality
With consent, or where a legal exception is properly available, we may remember settings such as language, region, display options or feature choices. Optional maps, video, chat, social or other embedded services may also use storage and access technologies.
​
5.3 Analytics, diagnostics and service improvement
Analytics and diagnostic tools may record page or screen views, navigation paths, clicks or taps, feature use, referral information, approximate location derived from IP address, device and browser characteristics, app version, error data, timestamps and pseudonymous identifiers. We normally seek consent for analytics where required by PECR.
​
5.4 Advertising, attribution and social media
If you consent, we and our advertising partners may use tags, pixels, SDKs or similar tools to record ad interactions, measure reach and effectiveness, create or update audiences, show more relevant advertising, limit repeated advertising and link activity across sessions, browsers or devices where supported. These activities may involve profiling and sharing event data with the named partner.
​
6. Providers and integrations
The providers below may be used depending on the PPX page, app feature or campaign you interact with and the choices you make. The live Cookie Settings panel identifies the technologies currently active on the device you are using.
​
PlumbParts Xpress and hosting/security providers
May use session, authentication, basket, checkout, security, load-balancing, delivery, fulfilment, and consent-record technologies. These are usually classed as strictly necessary, although some may fall under functionality.
​
Payment service providers
May use payment-session, authentication, and fraud-prevention technologies needed to process a payment you request. These are usually classed as strictly necessary where they are essential to completing the payment.
​
Mailchimp
May use signup forms, landing-page technologies and, where enabled, pixels and tagged links that measure marketing-email opens and interactions. These are usually classed as functionality, analytics, or marketing technologies.
​
Google
May use Google tags, analytics technologies, and advertising technologies for measurement, conversion attribution, and audience features. These are usually classed as analytics or advertising technologies.
​
YouTube
May use embedded video technologies and, where enabled, analytics or advertising functions associated with video content. These are usually classed as functionality, analytics, or advertising technologies.
​
Meta (Facebook and Instagram)
May use the Meta Pixel and related event technologies for campaign measurement, audience creation, retargeting, and advertising delivery. These are usually classed as advertising and social media technologies.
​
TikTok
May use the TikTok Pixel, SDK, or related event technologies for campaign measurement, audience creation, retargeting, and advertising delivery. These are usually classed as advertising and social media technologies.
​
LinkedIn
May use the LinkedIn Insight Tag and related technologies for campaign measurement, website demographics, audience creation, and retargeting. These are usually classed as advertising and social media technologies.
​
App diagnostics and push notification providers
May use SDKs or device tokens for app stability, diagnostics, and the delivery of notifications you enable. These may be classed as strictly necessary, functionality, or analytics technologies depending on their purpose.
​
Order-fulfilment partners
May use operational technologies or integrations to pass the minimum information needed to merchants, couriers, routing, mapping, communications, or support providers for the fulfilment of orders. These are usually classed as strictly necessary or requested functionality.
The names and configurations of services can change. We will update Cookie Settings and request fresh consent before using a new non-exempt provider or purpose not covered by your existing choice.
​
7. What information may be collected
ï‚· IP address and approximate location; device, operating system, browser, app version and language; ï‚· cookie, app-instance, advertising, consent or other pseudonymous identifiers; ï‚· pages, screens, products or features viewed; clicks, taps, searches, referrals and timestamps; ï‚· order or conversion events, such as that an order occurred, its approximate value or product category;
ï‚· technical diagnostics, crash information and security signals; and
ï‚· information you provide to an embedded feature or that a partner associates with your account, subject to that partner’s policy.
We do not use cookies to store full payment-card numbers. We ask advertising providers not to use PPX event data to infer sensitive characteristics, and we do not intentionally send them special-category personal data.
​
8. Email pixels and tagged links
Marketing and service emails may contain small images or tagged links that tell us whether an email was delivered, opened or selected and which device or browser was used. Mailchimp may process this information for us. You can opt out of marketing emails using the unsubscribe link; this does not stop essential service messages about your account, Order or delivery.
​
9. Mobile app technologies and permissions
The PPX app may use SDKs, device storage and device identifiers for login, security, payments, diagnostics, analytics, delivery tracking, location and push notifications. App permissions are separate from cookie consent and are controlled through your device settings.
​
10. Server-side events and our CRM
Some information about website, app, Order or campaign activity may be recorded in PPX’s own CRM, Mailchimp or sent to Google, YouTube, Meta, TikTok, LinkedIn or another approved partner through a secure server-to-server integration. A server-side transfer may not itself place information on your device, but UK data protection law still applies. Where server-side advertising events form part of consent-based advertising, we honour the related consent choice.
​
11. Duration and the detailed technology list
Session technologies expire when the browser or app session ends. Persistent technologies remain for the period stated in Cookie Settings, unless you delete them sooner. Open Cookie Settings on the PPX website or app to see the definitive current list of technology names or keys, providers, purposes, categories and durations. That list forms part of this Policy.
12. Your choices and controls
When you first use the relevant service, our consent tool offers equally accessible options to accept all optional technologies, reject all optional technologies or choose by purpose. Optional choices are off by default. If you ignore the request and continue using the service, optional technologies remain off.
​
You can open Cookie Settings at any time from the website footer or the app’s privacy/settings area to review or change your choice. You can also use browser, device and partner controls offered by Google, YouTube, Meta, TikTok, LinkedIn and other providers. Blocking essential technologies may prevent requested PPX features from working.
​
13. International processing and third-party policies
Some providers, including Mailchimp, Google, YouTube, Meta, TikTok and LinkedIn, may process information outside the United Kingdom. Where we make a restricted transfer of personal data, we use an approved transfer mechanism and other safeguards where required. Third-party services operate under their own privacy and cookie information.
​
14. Changes to this Policy
We may update this Policy when our technology, providers, purposes or the law changes. We will post the revised version and update the date above. If a change requires fresh consent, we will ask before activating the affected non-exempt technology.
​
15. Contact us
Questions, requests or complaints about cookies, similar technologies or personal data can be sent to: PlumbParts Xpress Ltd, Prosper House, 18 Craig Hopson Avenue, Castleford, England, WF10 5US. Email: chat@plumbpartsxpress.com | Telephone: 0114 551 3090 | Website: www.plumbpartsxpress.com | Company number: 15330376.
​
If your concern relates to personal data and you remain dissatisfied, you may complain to the Information Commissioner’s Office (ICO). Please also read the Privacy Policy for our wider use of personal data and the Terms and Conditions for use of the Platform.