Customer Cookies Policy
ZIETARS
Website, customer dashboard, mobile applications and related digital services
| Controller / Owner | Zietars Limited (company number 14093701) |
|---|---|
| Registered office | 124 City Road, London, EC1V 2NX, United Kingdom |
| Effective date | 26 August 2026 |
| Related documents | Customer Privacy Notice; Customer Terms and Conditions |
1. About this policy
This Cookies Policy explains how Zietars Limited ("Zietars", "we", "us" or "our") uses cookies and similar storage or access technologies when customers, prospective customers and other Platform visitors use zietars.com, the Zietars customer dashboard, Customer mobile application, embedded content and related digital services (together, the "Platform").
This policy should be read with the Zietars Customer Privacy Notice. Where a cookie or similar technology processes personal data, both this policy and the Privacy Notice apply.
2. Who is responsible
Zietars Limited is responsible for deciding which first-party technologies it deploys and, where applicable, is the controller of personal data collected through them. A third-party provider may act as our processor, an independent controller or a joint controller depending on its service and contractual role. You can contact Zietars at the registered office above or through the Contact Us section of the Platform.
3. What cookies and similar technologies are
Cookies are small text files placed on a browser or device. Similar technologies can include software development kits (SDKs), pixels, tags, scripts, local or session storage, advertising identifiers, device identifiers and related storage or access technologies. They may recognise a device, maintain a session, remember choices, measure use, prevent fraud or support advertising. Session technologies usually expire when the browser or application closes; persistent technologies remain for a stated period or until deleted.
4. Categories and purposes
| Category | Typical purpose | Consent / control position |
|---|---|---|
| Strictly necessary | Authentication, account security, booking/payment-session continuity, network management, fraud prevention, consent records and delivery of features expressly requested by the user. | Used without consent only where an applicable legal exception permits the storage or access. Any processing of personal data must also have a valid data-protection lawful basis. |
| Preferences / functionality | Remember language, location radius, display choices, saved settings or optional convenience features. | Consent is requested where required. A technology may be used without consent where an applicable exception covers a setting or functionality requested by the user and its conditions are met. |
| Analytics / performance | Understand journeys, diagnose errors, measure performance and improve the Platform. | Consent is requested where required. Where a statutory exception for qualifying statistical purposes applies, we use it only when its conditions are met, including appropriate transparency and a simple means to object where required. |
| Advertising / personalisation | Select, personalise, deliver or measure advertising or promotions, including cross-site or cross-app activity and profiling. | Prior consent is required unless the law provides another applicable basis or exception. Non-exempt advertising technologies remain blocked until the user opts in. |
| Social media / embedded content | Enable maps, video, social sharing, chat or other third-party content that may observe interaction. | Consent is requested where required unless a specific legal exception applies and its conditions are met. |
5. Strictly necessary and exempt technologies
We use a storage or access technology without consent only where an applicable legal exception is available and its conditions are met. This can include technologies necessary to transmit a communication or provide an online service or feature you have requested, and other limited statutory exceptions where applicable. Commercial convenience, advertising or general Platform improvement does not by itself make a technology necessary or exempt.
Security and fraud-prevention technologies may qualify where they are essential and proportionate to protect the Platform, accounts, payments or users. We do not repurpose them for unrelated advertising or profiling without an appropriate lawful basis and, where required, consent.
6. Consent and your choices
Where consent is required, non-essential technologies are not intended to operate before you make a choice. The consent interface provides options to accept or reject non-essential technologies and, where appropriate, make category-level choices. Optional categories are not selected by default, and continued browsing, scrolling or leaving a control unchanged is not treated as consent.
You can change or withdraw your choices through the Cookie Settings control available on the Platform or relevant application privacy settings. Withdrawing consent applies to future storage or access and does not make earlier lawful processing unlawful. We may retain a limited record of your preference so that we can respect and demonstrate your choice. Where an applicable exception requires a means to object, we provide that control through the relevant settings or consent interface.
Refusing optional technologies does not prevent access to core Zietars services, although an optional feature that technically depends on a rejected technology may not function until it is enabled.
7. How long cookies and consent choices last
Session technologies normally expire when the browser or application closes. Persistent technologies remain for their stated duration or until deleted. Cookie expiry may differ from the retention period for personal data copied to our systems; relevant personal-data retention information is set out in the Customer Privacy Notice. We may ask you to make a fresh choice after a material change to purposes, providers or technology, or where we can no longer recognise an earlier preference.
8. Customer accounts, bookings, payments and security
Strictly necessary technologies may keep you signed in, preserve a booking or basket, route requests, remember consent choices, prevent duplicate submissions, protect payment flows and detect suspicious access. Payment providers may use their own essential technologies to process a transaction and meet legal, security or fraud-prevention obligations.
Security signals may include IP address, device and browser attributes, timestamps, session identifiers, login attempts and transaction-risk indicators. We do not use security technologies as a covert means of marketing or unrelated profiling.
9. Analytics, advertising and profiling
Where enabled with the required consent, analytics technologies may help us understand Platform usage, diagnose errors and measure performance. Where a qualifying statutory exception applies to statistical technologies, we use it only within the scope and conditions of that exception. Advertising or personalisation technologies may use Platform activity to deliver or measure promotions and remain subject to applicable consent requirements. Where profiling could produce legal or similarly significant effects, additional information and safeguards will be provided in the relevant Privacy Notice or user journey.
10. Third parties and embedded services
Third parties may provide services such as payments and payouts, identity or business verification, hosting, content delivery, maps, support, analytics, error monitoring, anti-fraud services, advertising or embedded media. Where a third party stores or accesses information on your device, the relevant consent, exception and transparency requirements apply. Where we collect consent for a third-party technology, withdrawal stops future non-essential processing controlled through that choice.
11. International transfers
Some service providers may process personal data outside the United Kingdom. Where personal data is transferred internationally, Zietars uses an appropriate lawful transfer mechanism and safeguards as described in the Customer Privacy Notice.
12. Mobile applications and device controls
Mobile applications may use SDKs, local storage, push tokens, advertising identifiers or device permissions rather than browser cookies. Where consent is legally required for storage or access, the same prior-consent standard applies. Device or operating-system settings may also allow you to control location, camera or notification access, reset identifiers or clear application data. Granting a device permission does not by itself amount to consent for unrelated optional tracking.
13. Browser controls and deletion
Most browsers allow you to view, block and delete cookies. Blocking all cookies may prevent login, booking, payment or other requested functions that rely on essential session storage. Browser controls may not remove SDKs or other application technologies, and deleting a preference cookie may cause the consent interface to appear again.
14. Children
The Customer Platform is intended for people aged 18 or over. We do not knowingly use advertising or profiling technologies to target children. If we learn that optional tracking has been applied to a child, we will investigate and take appropriate steps as required by law.
15. Data protection rights and complaints
Where information collected through cookies or similar technologies is personal data, you may have rights including access, rectification, erasure, restriction, objection, portability and withdrawal of consent, depending on the circumstances and lawful basis. Requests can be made through the Contact Us or privacy contact route on the Platform or as described in the Customer Privacy Notice. You also have the right to complain to the UK Information Commissioner’s Office at www.ico.org.uk.
16. Changes to this policy
We may update this policy to reflect changes in law, guidance, service providers or Platform technology. We will publish the revised policy with an updated effective date and provide proportionate notice of material changes. Where required, we will obtain fresh consent before deploying or materially repurposing non-essential technologies.
17. Contact us
Zietars Limited, company number 14093701. Registered office: 124 City Road, London, EC1V 2NX, United Kingdom. Contact: through the Contact Us or privacy contact route on the Platform.
18. Cookie and technology details
The cookies and similar technologies currently available through the Platform, together with their purposes, providers, durations and available controls, should be presented through the Cookie Settings interface where applicable. The live Cookie Settings record should be treated as the operational inventory and kept aligned with the technologies actually deployed. Where third-party technologies are used, further information may also be available from the relevant provider’s privacy information.
The following table is the current operational inventory of cookies and similar technologies used on the Platform:
| Name | Purpose | Duration | Category | Provider |
|---|---|---|---|---|
| sessionid | Keeps you signed in while you use the Platform | Session, or up to 14 days if you choose “Remember me” | Strictly necessary | Zietars (first party) |
| csrftoken | Protects forms against cross-site request forgery | Up to 12 months | Strictly necessary | Zietars (first party) |
| zietars_cookie_consent | Stores your cookie consent choices so we can honour them | 12 months | Strictly necessary | Zietars (first party) |
| Local storage: zietars_cookie_consent | Mirrors your consent choices in the browser | Until you clear site data or change preferences | Strictly necessary | Zietars (first party) |
| Google reCAPTCHA | Prevents spam on the Partner with Us form | As set by Google (typically session to 6 months) | Strictly necessary on that form | Google Ireland Limited / Google LLC |
| Google Fonts (Inter) | Loads the Inter typeface used in the public website design | Typically up to 12 months (browser cache) | Functional | Google Ireland Limited / Google LLC |
| Stripe cookies (payment pages only) | Processes card payments, prevents fraud and completes checkout | As set by Stripe (session to 2 years depending on cookie) | Strictly necessary (requested payment) | Stripe Payments UK Ltd / Stripe, Inc. |
| Google / Apple account cookies | Complete “Sign in with Google” or “Sign in with Apple” if you choose social login | As set by Google or Apple | Functional (only if you use social login) | Google LLC; Apple Inc. |