Last updated: 6 September 2025

What this policy covers
This page explains what cookies and similar technologies we use on www.shisha2go.co.uk, why we use them, and how you can control them.

What are cookies (and similar tech)?
Cookies are small text files placed on your device by websites. Similar technologies include local storage, pixels, and tags. They help sites work, stay secure, and understand performance.

How we use cookies
We keep it minimal:

• Strictly necessary cookies – to run the site securely, remember your cookie choices, and protect against abuse. These do not require consent.

• Marketing/analytics (only with your consent) – we use the Meta Pixel to understand site performance and, where permitted, measure our own ads on Meta technologies.

Your choices
On your first visit we ask for consent for non-essential cookies. You can change your choice anytime via Cookie Settings (link in our footer). You can also block or delete cookies in your browser.

• session_id (or similar)
  Provider: shisha2go.co.uk
  Purpose: Maintains basic site/session functionality and security.
  Type: Strictly necessary (1st-party)
  Expires: Session

• cookie_consent
  Provider: shisha2go.co.uk
  Purpose: Remembers your cookie preferences (Accept/Reject/Settings).
  Type: Strictly necessary (1st-party)
  Expires: 6 months

• csrf_token (or similar)
  Provider: shisha2go.co.uk
  Purpose: Protects forms against CSRF attacks.
  Type: Strictly necessary (1st-party)
  Expires: Session

• _fbp
  Provider: shisha2go.co.uk
  Purpose: Meta Pixel identifier to distinguish browsers for analytics/ads measurement. Loads only if you consent.
  Type: Marketing (1st-party)
  Expires: 3 months

• fr
  Provider: facebook.com
  Purpose: Set by Meta when the Pixel loads to deliver/measure ads. Loads only if you consent.
  Type: Marketing (3rd-party)
  Expires: ~3 months

Notes:

• The Meta Pixel may also interact with other Meta cookies (e.g., datr, sb) set on facebook.com/instagram.com. These are third-party to us and controlled by Meta.

• We do not use Google Analytics and we do not store Meta event data on our servers.

Local storage & pixels
We may use local storage to remember your cookie settings and UI preferences. The Meta Pixel is a page tag that sends event data to Meta only after you consent.

Legal bases

• Strictly necessary cookies: our legitimate interests in delivering a secure, functional website (PECR allows these without consent).

• Meta Pixel / marketing cookies: your consent. If you do not consent, we won’t load them.

International transfers
Meta and some infrastructure providers may process data outside the UK/EEA. Transfers are protected by standard contractual clauses or equivalent safeguards used by those providers.

How to manage or withdraw consent

• Use Cookie Settings in our footer to Accept, Reject, or Manage categories anytime.

• Browser controls: you can block or delete cookies via your browser. Doing so may affect site features.

Retention

• cookie_consent: 6 months (then we may ask again).

• Security/session cookies: for the active session only.

• _fbp / fr: typically 3 months (controlled by Meta timelines).
  We do not store Meta Pixel event data ourselves.

Updates to this policy
We may change this page to reflect changes in technology or law. The “Last updated” date shows the latest version.

Contact

For questions or to exercise privacy rights, email contact@shisha2go.co.uk.