About This Policy
This Cookie Policy explains how Wrinkles Schminkles uses cookies and similar tracking technologies on our UK website. It describes what these technologies are, why we use them, and your rights to control their use.
This policy is governed by the UK General Data Protection Regulation (UK GDPR) as retained in UK law by the European Union (Withdrawal) Act 2018, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR). Under PECR, we are required to obtain your consent before placing non-essential cookies on your device.
This policy should be read alongside our Privacy Policy, which is available at wrinklesschminkles.co.uk/pages/privacy-policy and provides full details of how we collect, use, and share your personal information.
What Are Cookies?
Cookies are small text files placed on your device — computer, smartphone, or tablet — when you visit a website. They allow the website to recognise your device and remember information about your visit, such as your preferences, login status, and shopping basket contents.
In addition to cookies, we use similar tracking technologies including:
- Pixels — small invisible images embedded in web pages that record when they have been viewed and transmit data to the pixel operator.
- Tags and scripts — pieces of code that run in your browser and collect data about your activity on our Site.
Local storage — data stored directly in your browser rather than as a cookie file, used for similar purposes. - Server-side tracking — data sent directly from our servers to third-party platforms, separate from your browser.
We refer to all of these collectively as "cookies" throughout this policy.
How We Use Cookies
We use cookies for the following purposes:
- To make our Site work properly and securely — including keeping your shopping basket active, processing your order, and keeping the Site secure.
- To remember your preferences and settings, such as your currency and region.
- To understand how visitors use our Site so we can improve it — including which pages are most visited and how visitors navigate between pages.
- To measure the effectiveness of our advertising campaigns on third-party platforms including Meta (Facebook and Instagram), Google, and TikTok.
- To show you relevant advertising on other websites and platforms based on your visit to our Site.
- To personalise your experience, including product recommendations, loyalty programme features, and video content.
We use a consent management platform, Pandectes, to manage your cookie preferences on this Site. When you first visit wrinklesschminkles.co.uk, Pandectes presents you with a cookie consent banner and holds all non-essential cookies in a blocked state until you have made your choice. Non-essential cookies will not fire until you have been given a clear opportunity to accept or decline them.
You may withdraw your consent or change your preferences at any time by clicking "Cookie Settings" in the footer of our Site. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.
Categories of Cookies We Use
5.1 Strictly Necessary Cookies
These cookies are essential for the Site to function and cannot be switched off in our systems. They are set in response to actions you take such as setting your privacy preferences, logging in, or adding items to your basket. You can set your browser to block or alert you about these cookies, but some parts of the Site will not work as a result. These cookies do not require your consent under PECR.
5.2 Performance and Analytics Cookies
These cookies help us understand how visitors interact with our Site by collecting and reporting information. They allow us to count visits and traffic sources so we can measure and improve the performance of our Site. All information collected by analytics cookies is used to improve the Site and your experience of it. If you do not allow these cookies we will not know when you have visited our Site.
5.3 Functional Cookies
These cookies enable the Site to provide enhanced functionality and personalisation such as video content, loyalty programme features, and personalised product recommendations. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.
5.4 Targeting and Advertising Cookies
These cookies are set through our Site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites. They work by uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising. Please note that these cookies do not store directly personal information but are based on uniquely identifying your browser and internet device.
Cookies Used on This Site
The following tables list the specific cookies and tracking technologies currently in use on wrinklesschminkles.co.uk, based on a scan of the Site conducted in September 2026 and analysis of the Site's code.
This list is reviewed and updated periodically. Some cookies may be set as a result of third-party apps and integrations not listed below — we will update this policy to reflect any changes.
Strictly Necessary Cookies
| Cookie Name | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
| _pandectes_gdpr | Pandectes | 1st party | Stores your cookie consent preferences so we canrespect your choices on this and future visits to the Site. | 1 year |
| _shopify_essential | Shopify | 1st party | Contains essential information for the correct functionality of the store, including session and checkout data and anti-tampering information. | 1 year |
| _shopify_y | Shopify | 1st party | Shopify analytics - assigns a unique ID to avisitor for session tracking. | 1 year |
| _shopify_s | Shopify | 1st party | Identifies a given browser session for the store. Expires 30 minutes after last use. | 30 minutes |
| _shopify_country | Shopify | 1st party | Used for stores where pricing currency is set from location, to avoid repeated location look ups. | 30 minutes |
| cart | Shopify | 1st party | Stores the contents of your shopping basket soitems are retained as you browse the Site. | 2 weeks |
| _ab | Shopify | 1st party | Controls when the admin bar is shown on the storefront for store administrators. | 1 year |
| secure_customer_sig | Shopify | 1st party | Used to authenticate a logged-in customer. | 2 years |
| _shopify_fs | Shopify | 1st party | Tracks if this is the first session for avisitor. | 1 year |
| _shop_app_essential | Shopify / Shop | 3rd party | Contains essential information for Shop Pay andrelated Shopify checkout services. | 1 year |
| rmlconsent_*, rmuid,__rmco,__rmco_cs, __rmid, rm_storage_test_*, rmStore | Rakuten | 3rd party | Used by Rakuten Advertising to attribute purchases to the correct affiliate publisher and credit cashback to the visitor. Classified as Strictly Necessary under ICO guidance (October 2024). | 30 days |
Performance and Analytics Cookies
| Cookie Name | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
| rmStore | Rakuten Advertsising | 1st party,advertising domain | Affiliate tracking used by Rakuten Advertising Affiliate Network. | 30 days |
| _ga | Google Analytics | 1st party | Registers a unique ID used to generate statistical data on how you use the Site. | 1 year |
| _ga_WVC6DX3G | Google Analytics | 1st party | Used by Google Tag (GT-WVC6DX3G) to persist session state and count page views. | 1 year |
| _gcl_au | 1st party | Used by Google Tag to store and track conversions. | 3 months | |
| _clck | Microsoft Clarity | 1st party | Used by Microsoft Clarity to store a unique userID and persist across sessions. | 1 year |
| _clsk | Microsoft Clarity | 1st party | Used by Microsoft Clarity to store a unique session ID to connect multiple page views within a single session. | 1 day |
| SM | Microsoft Clarity | 3rd party | Measures website usage for internal Microsoft analytics on clarity.ms. | Session |
| CLID | Microsoft Clarity | 3rd party | Identifies the first time Clarity saw this user on any site using Clarity. | 1 year |
| _orig_referrer | Shopify | 1st party | Identifies where visitors arrived from when they come from other websites | 2 weeks |
| _landing_page | Shopify | 1st party | Captures the landing page of a visitor when they arrive from another site. | 2 weeks |
| _shopify_analytics | Shopify | 1st party | Contains analytics data for buyer surfaces such as the storefront or checkout. | 1 year |
| __cf_bm | Cloudflare | 3rd party | Used by Cloudflare to manage incoming traffic and distinguish human visitors from bots. Set on multiple Cloudflare-protected domains. | 30 minutes |
Functional Cookies
| Cookie Name | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
| _cfuvid | Cloudflare | 3rd party | Sets a unique ID to distinguish users sharingthe same IP address for rate limiting purposes on third-party services. | Session |
| __cflb | Cloudflare | 3rd party | Sets a unique value for session affinity used by hCaptcha for rate limiting. | 30 minutes |
| _shopify_sa_p | Shopify | 1st party | Shopify analytics relating to marketing and referrals. | 30 minutes |
| _shopify_sa_t | Shopify | 1st party | Shopify analytics relating to marketing andreferrals | 30 minutes |
| AS_DATA_PRIVACY_DATA_REGULATED | Shopify | 1st party | Stores information related to data privacy regulation status for the current visitor session. | 1 year |
| _uetsid | Microsoft / Bing | 1st party | Used by Microsoft Advertising to track conversions and re-engage visitors. | 1 day |
| _uetvid | Microsoft / Bing | 1st party | Used by Microsoft Advertising to track visitors for retargeting. | 16 days |
Targeting and Advertising Cookies
| Cookie Name | Provider | Type | Purpose | Expiry |
|---|---|---|---|---|
| _fbp | Meta (Facebook) | 1st party | Placed by Meta to track visits across websites and build a profile for targeted advertising on Facebook and Instagram. | 3 months |
| _fbc | Meta (Facebook) | 1st party | Stores the last advertisement click attribution for Facebook Ads. | 3 months |
| fr | Meta (Facebook) | 3rd party | Used by Meta to deliver a series of advertisement products such as real-time bidding from third-party advertisers. | 3 months |
| tt_webid | TikTok | 1st party | TikTok Pixel (CU2AIPRC77U9QK0TSNCG) — assigns a unique visitor ID for TikTok ad targeting and conversion tracking. | 1 year |
| tt_sessionid | TikTok | 1st party | TikTok Pixel - session-level tracking for TikTokconversion events. | Session |
| _pin_unauth | 1st party | Used by Pinterest to group actions for visitors who have not been identified for ad targeting and measurement. | 1 year | |
| _pinterest_ct_ua | 3rd party | Pinterest user tracking cookie for ad conversion measurement. | 1 year | |
| IDE | Google / DoubleClick | 3rd party | Used by Google to measure visitor actions after they click through from a Google advertisement. | 1 year |
| NID | 3rd party | Used by Google to collect website statistics and track conversion rates for advertising. | 6 months | |
| MUID | Microsoft / Bing | 3rd party | Placed by Microsoft to track visits across websites for Microsoft advertising. | 1 year |
| MR | Microsoft / Bing | 3rd party | Used by Microsoft to collect information for advertising analytics on Bing and Microsoft-affiliated platforms. | 1 week |
| ANONCHK | Microsoft Clarity | 3rd party | Stores a session ID to verify clicks from Bing advertisements for reporting and personalisation. | 10 minutes |
| __kla_id | Klaviyo | 1st party | Tracks when someone clicks through a Klaviyo email to our website for email marketing attribution. Note: Klaviyo onsite javaScript is not active on the UK store — this cookie is set only via Shopify Customer Events. | 1 year |
| __tvpa | TVPage / Creatable | 1st party | Used by TVPage to track shoppable video engagement on product pages. | 1 year |
| __tvpab | TVPage / Creatable | 1st party | Used by TVPage for video attribution and engagement measurement. | 1 year |
Third Parties We Share Data With
The following third parties receive personal information through cookies and tracking technologies used on our Site. We do not control how these third parties use the data they collect through their own technologies - please refer to their respective privacy policies for further information.
tHIRD PARTY COOKIES
| Cookie Name | Provider | Type | Purpose | Category |
|---|---|---|---|---|
| Meta Platforms Ireland Ltd | facebook.com, instagram.com | Ad targeting, conversion tracking, and lookalike audience building for Facebook and Instagram campaigns | facebook.com/privacy/policy | Targeting |
| Google Ireland Ltd | google.com, youtube.com, doubleclick.net | Analytics (GA4 via Google Tag), ad targeting,and conversion tracking | policies.google.com/privacy | Performance / Targeting |
| TikTok Technology Ltd | tiktok.com, analytics.tiktok.com | Ad targeting and conversion tracking for TikTok campaigns | tiktok.com/legal/privacy-policy-eea | Targeting |
| Pinterest Europe Ltd | pinterest.com, pinimg.com | Ad targeting and campaign measurement for Pinterest | policy.pinterest.com/en-gb/privacy-policy | Targeting |
| Microsoft Ireland Operations Ltd | bing.com, clarity.ms, c.bing.com | Session recording and heatmap analytics(Microsoft Clarity), ad targeting (Bing Ads / Microsoft Advertising) | privacy.microsoft.com | Performance / Targeting |
| Klaviyo Inc | klaviyo.com | Email marketing and SMS platform — active via Shopify Customer Events on the UK store | klaviyo.com/legal/privacy | Targeting / Marketing |
| Rakuten Advertising | rakutenadvertising.com | Affiliate network tracking and commissionattri bution | rakutenadvertising.com/legal/privacy | Strictly Necessary |
| Shopify Inc | shopify.com | Platform provider — cart, checkout, orderprocessing, and analytics | shopify.com/legal/privacy | Strictly Necessary / Performance |
| Pandectes | pandectes.io | Consent management platform — manages your cookie preferences and records consent decisions | pandectes.io/privacy-policy | Strictly Necessary |
| Cloudflare Inc | cloudflare.com | Security, bot management, and traffic optimisation | cloudflare.com/privacypolicy | Performance / Functional |
| Afterpay / Clearpay | afterpay.com | Buy now pay later payment processing widget | afterpay.com/en-GB/privacy-policy | Functional |
| LoyaltyLion Ltd | loyaltylion.com | Customer loyalty programme | loyaltylion.com/privacy | Functional |
| TVPage / Creatable | tvpage.com | Shoppable video content on product pages | tvpage.com/privacy | Functional |
| Manychat Inc | manychat.com | Chat and messenger marketing widget | manychat.com/privacy | Targeting |
| Wetracked.io | pixel.wetracked.io | Server-side conversion tracking — sends purchase data directly from our servers to ad platforms | wetracked.io/privacy | Targeting |
Your Rights Under UK GDPR
As a UK resident, you have the following rights in relation to personal data collected through cookies on our Site. These rights are provided by the UK GDPR and the Data Protection Act 2018.
Your Rights Under UK GDPR
As a UK resident, you have the following rights in relation to personal data collected through cookies on our Site. These rights are provided by the UK GDPR and the Data Protection Act 2018.
Right to Be Informed
You have the right to be told how we use cookies and what data we collect. This Cookie Policy is designed to fulfil that obligation. We will notify you of any material changes to this policy through our cookie consent banner.
Right to Withdraw Consent
Where we rely on your consent to place non-essential cookies, you have the right to withdraw that consent at any time. You can do this by clicking "Cookie Settings" in the footer of our Site and adjusting your preferences. Withdrawing consent does not affect the lawfulness of any processing carried out before withdrawal.
Right of Access
You have the right to request a copy of the personal data we hold about you, including data collected through cookies where it is linked to you personally. To make a subject access request, contact us at hello@wrinklesschminkles.co.uk with the subject line "Subject Access Request". We will respond within one month.
Right to Erasure
You have the right to request that we delete personal data we hold about you that was collected through cookies, subject to certain exceptions. Note that deleting strictly necessary cookie data may affect the functionality of the Site.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes, including profiling for direct marketing. Where we process data on the basis of legitimate interests, you also have the right to object on grounds relating to your particular situation.
Right to Lodge a Complaint
If you are unhappy with how we handle your personal data or respond to your rights requests, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
• Website: ico.org.uk
• Telephone: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Lawful Basis for Processing
Under UK GDPR, we process personal data collected through cookies on the following legal bases:
• Consent (Article 6(1)(a) UK GDPR) - for all non-essential cookies including analytics, targeting, advertising, and affiliate tracking cookies. You provide consent through our cookie banner when you first visit the Site. You may withdraw consent at any time via Cookie Settings in the footer.
• Legitimate Interests (Article 6(1)(f) UK GDPR) - for strictly necessary cookies that are essential for the Site to function, and for fraud prevention purposes. We have assessed that our legitimate interests are not overridden by your rights and interests in these cases.
• Contract Performance (Article 6(1)(b) UK GDPR) - for cookies that are necessary to process your orders and deliver the services you have requested, including the shopping basket and checkout cookies.
Where we rely on consent, we maintain a record of when and how consent was given. This record is stored by our consent management platform (Pandectes) and is available to you on request.
International Data Transfers
Some of the third parties listed in Section 7 are based outside the United Kingdom. Where personal data collected through cookies is transferred to countries outside the UK, we ensure that appropriate safeguards are in place in accordance with UK GDPR. These safeguards may include:
• UK adequacy regulations made by the Secretary of State recognising the destination country as providing an adequate level of data protection.
• The UK International Data Transfer Agreement (IDTA) or a UK Addendum to the EU Standard Contractual Clauses.
• Binding corporate rules approved by the ICO.
Each third-party provider listed in Section 7 is responsible for ensuring its own data transfers comply with applicable UK data protection law. Please refer to their individual privacy policies for details of the transfer mechanisms they use.
Managing Cookies Through Your Browser
In addition to the controls available through our cookie consent banner, you can manage or delete cookies through your browser settings. Most browsers allow you to:
• View what cookies have been set and delete them individually or in bulk.
• Block third-party cookies from being set.
• Block all cookies from specific websites.
• Block all cookies entirely - note this will significantly affect the functionality of most websites including ours.
For guidance on how to manage cookies in your browser, visit www.allaboutcookies.org. For guidance specific to your browser, see the support pages for Chrome (support.google.com), Safari (support.apple.com), Firefox (support.mozilla.org), and Microsoft Edge (support.microsoft.com).
You can also opt out of interest-based advertising from participating companies through the Your Online Choices platform at youronlinechoices.com/uk, or through the Digital Advertising Alliance at optout.aboutads.info.
Server-Side Tracking
In addition to browser-based cookies, we use a server-side tracking technology (Wetracked.io) that sends conversion data directly from our servers to advertising platforms. This data transmission occurs on the server and does not use cookies in your browser.
Server-side tracking allows us to measure advertising performance more accurately. The data sent typically includes information about purchases and other conversion events, associated with identifiers such as hashed email addresses, IP addresses, and order data.
If you withdraw your consent to targeting cookies using Cookie Settings in the footer of our Site, we will apply your preference to server-side data transmissions as well as browser-based cookie tracking.
Changes to This Cookie Policy
We review and update this Cookie Policy periodically to reflect changes in the technologies we use, changes in applicable law, or changes in our business practices. When we make material changes, we will update the "Last updated" date at the top of this policy and notify you through our cookie consent banner.
We encourage you to review this policy periodically to stay informed about how we use cookies.