What are cookies?
Cookies are small text files placed on your device when you visit a website. They do things like keep you logged in, remember your preferences, and record which pages you visit. Without them, every page you loaded would feel like you'd never been to the site before.
This policy covers everything that behaves like a cookie: localStorage and sessionStorage (browser storage that isn't technically a cookie but works similarly), tracking pixels (1×1 images that can record whether you've seen a page or opened an email), and push notification tokens (which link your browser to your notification subscription). Under UK law (PECR), all of these are treated the same as cookies.
We only place non-essential versions of any of these after you've actively given your consent. Strictly necessary ones run regardless — they're what keep the site functional and secure.
Cookie categories
Strictly Necessary
No consent neededRequired for the site to function. These cover session management, security tokens, and storing your consent preferences. You can't opt out without breaking the site.
- Session management
- Security tokens (CSRF protection)
- Consent preference storage
Functional
Consent requiredRemembers your preferences so the site works better for you. Off by default — only runs if you've opted in.
- Saved searches
- Display preferences (grid vs list)
- Recently viewed listings
Analytics
Off by defaultHelps us understand how the site is used so we can improve it. We use Google Analytics 4. Only fires after you accept. IP addresses are anonymised — we never enable Google Signals.
- Page views and navigation
- Popular products and searches
- Performance monitoring
Marketing & Affiliate
Off by defaultTracks which retailer links you click so we can earn commission. This is how the price comparison tool pays for itself. We use AWIN. Only fires after you accept.
- Retailer click-out attribution
- Affiliate commission tracking
Cookie inventory
| Cookie name | Provider | Purpose | Category | Expiry | Party |
|---|---|---|---|---|---|
bopm_consent_prefs | BOPM | Stores your cookie consent choice | Strictly Necessary | 12 months | First |
_ga | Google Analytics | Distinguishes unique users | Analytics | 2 years | Third |
_gid | Google Analytics | Distinguishes unique users (session) | Analytics | 24 hours | Third |
_ga_[ID] | Google Analytics | Maintains session state | Analytics | 2 years | Third |
awin_* / aw.sv* | AWIN | Records retailer click-outs for commission attribution | Marketing & Affiliate | 30 days | Third |
This list is updated whenever we add new cookies. Last scanned: May 2026. We use a CMP to block non-essential cookies before consent is given.
Similar technologies
UK PECR covers more than just cookies. Here's what else we may use — all subject to the same consent requirements:
Browser storage that persists after you close the tab. We use it for session state — things like your view preferences or recently viewed listings. Cleared when you clear browser data.
Similar to localStorage, but cleared automatically when you close the tab. We use it for temporary navigation state — it doesn't follow you between sessions.
1×1 pixel images that can confirm a page has loaded or an email has been opened. Used by Klaviyo for email analytics — whether you opened a price drop alert, for example. Only fires after consent.
How to manage your cookies
On BOPM
Click 'Cookie preferences' in the footer of any page to open the preference centre. Accept all, reject all, or choose by category. Change your mind at any time.
In your browser
Every major browser lets you manage or delete cookies directly:
- Chrome — Settings › Privacy and security › Cookies
- Firefox — Settings › Privacy & Security › Cookies and Site Data
- Safari — Settings › Safari › Privacy & Security
- Edge — Settings › Cookies and site permissions
Blocking all cookies may break some BOPM features — session management and consent preferences need first-party cookies to work.
Specific opt-outs
You can opt out of specific third-party tracking directly:
- Google Analytics — tools.google.com/dlpage/gaoptout
- AWIN — opt-out available via the AWIN website
Opting out of affiliate tracking doesn't change the prices we show or how we rank retailers. We just won't earn commission if you buy — BOPM still works exactly the same.
If a child profile is active on your account (Phase 3), only strictly necessary cookies will run during that session. Analytics, marketing, and affiliate cookies switch off automatically. We never use targeted advertising or profiling cookies for child profiles — full stop. Parents or guardians control consent for any child profile.
International transfers
Some of our cookie partners are US-based. Where personal data leaves the UK, we rely on IDTA-compliant transfer agreements.
- Google (GA4) — US-based, covered by IDTA-compliant DPA
- Klaviyo — US-based, covered by IDTA-incorporating DPA
- AWIN — UK and EU headquartered, no international transfer applies
Contact privacy@bopm.co.uk for full details of transfer safeguards.
Updates to this policy
We update this policy whenever we add new cookies or change our practices. The version number and date at the top show when it was last revised. Material changes — like adding a new cookie category or advertising partner — will trigger a new consent request via the banner.
Questions and complaints
Questions about cookies? Get in touch:
ICO complaint
You can complain directly to the Information Commissioner's Office at any time — we'd appreciate the chance to resolve it first.
- ico.org.uk/make-a-complaint
- 0303 123 1113
- Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF