Cookie Policy (UK)

Cookie Policy (UK GDPR & PECR) — Updated 24 July 2026 · Extended WordPress & Plugin Information Updated 29 July 2026

1. Additional Legal Basis (UK GDPR + PECR)

Under the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, cookies fall under two legal categories:

  • Essential cookies — strictly necessary for website operation. These do not require consent.

  • Non‑essential cookies — analytics, marketing, tracking, third‑party. These require explicit consent.

Consent is obtained through the cookie banner and can be withdrawn at any time.

 

2. WordPress Core Cookies (Essential)

These cookies ensure the website functions correctly.

  • wordpress_logged_in_* — maintains login session

  • wordpress_sec_* — security and authentication

  • wp-settings-* — stores admin/user preferences

  • wp-settings-time-* — timestamp for settings

  • wpnonce — anti‑CSRF security token

  • wp-autosave-* — autosave functionality

  • wp_heartbeat — keeps session active

These cookies are strictly necessary and do not require consent.

 

3. OceanWP Theme Cookies (Essential)

OceanWP may set cookies for:

  • responsive layout behaviour

  • mobile menu state

  • accessibility preferences

These cookies are functional and essential.

 

4. Elementor Cookies (Functional + Statistics)

Elementor uses cookies to:

  • maintain editor preferences

  • store page builder session

  • collect anonymous statistics for performance

These cookies may be essential or statistical depending on usage.

 

5. WooCommerce Cookies (Essential)

WooCommerce sets cookies required for e‑commerce functionality:

  • woocommerce_cart_hash — cart integrity

  • woocommerce_items_in_cart — number of items

  • wp_woocommerce_session_* — session ID for cart

  • store_notice — dismissible store notice

These cookies are essential for shopping cart functionality.

 

6. Polylang Cookies (Essential)

Polylang sets:

  • pll_language — stores language preference

This cookie is essential for multilingual functionality.

 

7. Automattic / Jetpack Cookies (Statistics)

Automattic may set cookies for:

  • anonymous usage statistics

  • performance optimisation

  • security monitoring

These require consent unless strictly necessary.

 

8. Sourcebuster Cookies (Tracking)

Sourcebuster JS sets cookies to:

  • track traffic sources

  • attribute marketing campaigns

  • analyse visitor behaviour

These cookies require explicit consent.

 

9. Google Fonts Cookies (Marketing / Tracking)

Google Fonts may collect:

  • IP address

  • browser details

  • device information

This constitutes tracking, and therefore requires consent.

 

10. Third‑Party Cookies Responsibility

Third‑party cookies are governed by the privacy policies of their respective providers:

  • Google

  • Automattic

  • WooCommerce

  • Elementor

  • Polylang

  • Sourcebuster

We do not control these cookies directly.

 

11. International Transfers

Some third‑party cookies may involve data transfers outside the UK. These transfers comply with:

  • UK GDPR Adequacy Regulations

  • Standard Contractual Clauses (SCCs)

  • Provider‑specific safeguards

 

12. Security of Cookie‑Related Data

We implement appropriate technical and organisational measures to protect cookie‑related data, including:

  • encryption

  • secure server configuration

  • access control

  • regular audits

  • anti‑CSRF tokens

  • secure session handling

These measures comply with UK GDPR Article 32.

 

13. Withdrawing Consent

You may withdraw cookie consent at any time by:

  • reopening the cookie banner

  • adjusting browser settings

  • clearing cookies manually

Withdrawal does not affect the lawfulness of prior processing.

 

14. Behaviour of the Cookie Banner

Our cookie banner:

  • blocks non‑essential cookies until consent

  • allows “Accept All”, “Reject All”, and “Customise”

  • stores consent preferences

  • respects PECR requirements

  • reloads scripts only after consent

 

15. Additional Rights (UK GDPR)

Under UK GDPR, you have the right to:

  • Access your data

  • Request correction

  • Request deletion

  • Restrict processing

  • Object to processing

  • Data portability

  • Withdraw consent

  • File a complaint with the ICO: https://ico.org.uk

 

16. Contact for Cookie‑Related Matters

I Care and Clean – Data Protection Officer (DPO) Email: privacy@icareandclean.co.uk Website: icareandclean.co.uk