Cookie Policy

1. What Cookies and Similar Technologies Are

Cookies are small text files stored by a browser when someone visits a website. They usually hold a short identifier that lets the site recognise the same browser on a later visit.

Several other technologies do much the same job, and this policy treats them together. Where it refers to cookies, it means all of the following:

• Cookies set either by Ordit (first party) or by another company whose service runs on an Ordit page (third party).
• Pixels and tags , small pieces of code in pages or emails that report back when something is opened or viewed.
• Software development kits (SDKs) , which perform a similar function inside the Ordit mobile apps.
• Local storage , files the browser keeps on a device. These are not cookies, but they hold information in a comparable way and are covered here for that reason.

2. Which Ordit Services This Covers

This policy applies to every Ordit service that runs in a browser or on a phone:

• The Ordit website at ordit.co.uk, including the marketing and information pages.
• The ordering app at app.ordit.co.uk, where accounts, budgets and orders are managed.
• The company admin portal , used by client administrators.
• The Ordit mobile apps for iOS and Android.

The technologies in use are not identical across all four. The tables below say which service each one applies to.

3. The Categories Ordit Uses

Cookies on Ordit services fall into four categories:

• Strictly necessary. Required for the service to work. They handle signing in, keeping a session open, holding a basket together and keeping the service secure. Turning them off would stop Ordit working, so they cannot be switched off.
• Functional. Remember choices a user has made, such as the display theme, so the service behaves consistently on the next visit.
• Analytics. Count visits and show how pages and features are used, so Ordit can measure and improve the service. This includes a session recording and heatmap tool on the ordering app.
• Advertising. Build a picture of someone's interests in order to show them targeted adverts.

Ordit uses cookies in all four categories, including advertising. Many of the measurement and advertising tags are loaded through a Google Tag Manager container, whose contents are managed outside the application code, so this policy describes the categories and providers in use rather than guaranteeing an unchanging list.

Important: analytics, session recording and advertising technologies load when someone first opens an Ordit service, whatever cookie choice has been recorded. Ordit is changing this so that non-essential cookies are set only once a choice has been made, and so that refusing is as easy as accepting. Until that is in place, the options in section 7 are the ways to limit them.

6. How Long They Last

Cookies are either:

• Session cookies , which are removed automatically when the browser is closed.
• Persistent cookies , which remain for a set period or until they are deleted.

The lifetime of each cookie Ordit sets is listed in section 4. Cookies set by third parties follow the retention periods in their own notices. Any cookie can be deleted at any time through browser settings.

7. How to Control Them

The following controls are available today.

Browser settings

Every major browser can block or delete cookies, including those already stored. Blocking strictly necessary cookies will stop parts of Ordit working, in particular signing in and placing orders.

• Google Chrome cookie settings guide
• Safari cookie settings guide
• Microsoft Edge cookie settings guide
• Firefox cookie settings guide
• Opera cookie settings guide

Opting out of specific tools

• Google Analytics across all websites: install the Google Analytics opt-out add-on.
• Session recording by Hotjar: enable Do Not Track in the browser, which Hotjar honours. See Hotjar's opt-out guidance.
• Advertising from Meta, Google, Microsoft and LinkedIn: use each platform's own advert settings, or the industry opt-out tools at Your Online Choices.

Mobile devices

Both iOS and Android provide device-level settings that limit app tracking and reset or remove the advertising identifier. Push notifications can be turned off for the Ordit app in the device's notification settings.

8. Changes, Contact and Complaints

Ordit may update this policy as the services change. The date at the top of the page shows when it was last revised.

Ordit International Ltd is the company behind ordit.co.uk, registered in England under company number 12020646, at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. Ordit is not required to appoint a Data Protection Officer and has instead designated a contact person for data protection matters, reachable at [email protected].

How the resulting personal data is used is described in the Privacy Policy.

Anyone unhappy with how Ordit handles personal data can complain to the Information Commissioner's Office, the UK supervisory authority, at ico.org.uk.