RollaPETor operates with a privacy-first approach. We use strictly necessary cookies to ensure secure reservation deposits, protect against malicious traffic, and preserve your privacy preferences. You maintain complete control over optional performance analytics at all times.
1. Overview & privacy principles
We believe in minimal data collection and total transparency. In accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR), this policy explains what browser storage technologies we use, why we use them, and how you can manage your preferences.
We do not sell your personal data, and we do not deploy invasive cross-site advertising trackers or third-party behavioral profiling cookies.
2. What are cookies and browser storage?
Cookies and browser storage are small text files or data records saved onto your computer, smartphone, or tablet when you visit a website. They serve several distinct functions:
- HTTP Cookies: Small data packets sent back and forth between your browser and our server to maintain state (e.g. keeping an administrative session secure or linking a returned Stripe payment to your order).
- Local Storage (localStorage): Secure in-browser key-value storage used to remember persistent user settings across browser visits without expiring when the browser is closed (such as your cookie preferences).
- Session vs. Persistent Storage: Session storage expires as soon as you close your browser tab, while persistent storage remains until its designated expiry date or until manually cleared by you.
- First-Party vs. Third-Party: First-party storage is placed directly by
rollapetor.co.uk. Third-party storage is placed by authorized essential infrastructure providers (such as Stripe for PCI-compliant payment checkout and fraud screening).
3. Cookies & storage technologies we use
Below is a complete breakdown of the cookies and browser storage technologies deployed across the RollaPETor website:
A. Strictly necessary storage (Always Active)
These records are essential for the operation of the website, security verification, and processing your £200 reservation deposit or full purchase. They cannot be turned off in our systems.
| Name / Key | Type & Provider | Purpose | Duration |
|---|---|---|---|
rollapetor_cookie_consent |
Local Storage (First-party) | Saves your cookie consent choices (essential vs. optional analytics) so you are not prompted on each return visit. | 1 year |
rollapetor_session |
HTTP Cookie (First-party) | Maintains encrypted session state, links Stripe checkout returns to your order confirmation, and secures admin access. | Session / 24 hours |
csrf_token / Header |
Security Token (First-party) | Protects form submissions (contact, newsletter, reservations) from Cross-Site Request Forgery attacks. | Session |
__stripe_mid |
HTTP Cookie (Stripe) | Machine identifier set by Stripe for fraud detection, bot mitigation, and risk evaluation. | 1 year |
__stripe_sid |
HTTP Cookie (Stripe) | Session identifier set by Stripe to securely process payment transactions and support 3D Secure verification. | 30 minutes |
B. Performance & analytics storage (Optional)
These optional records help us understand aggregate traffic trends, page load performance, and navigation journeys to improve user experience. No personal identifying information or cross-site tracking data is gathered.
| Name / Key | Type & Provider | Purpose | Duration |
|---|---|---|---|
_rpa_analytics |
Local Storage / Cookie (First-party) | Measures anonymous page views and UI interactions to diagnose speed and layout issues across different devices. | 180 days |
4. Third-party integrations & Stripe payments
When you proceed to place a reservation deposit or make a final payment, checkout is handled securely through Stripe Payments UK. Stripe is certified as a PCI-DSS Level 1 Service Provider—the highest security level in the payments industry.
Stripe uses cookies and device signals solely for payment authentication, Strong Customer Authentication (SCA / 3D Secure 2.0), and fraud prevention (Stripe Radar). Card numbers and sensitive banking credentials are entered directly on Stripe's hosted infrastructure and never touch our servers.
For additional details regarding Stripe’s data protection practices, please consult Stripe’s UK Privacy Policy.
5. Your interactive cookie choices
You have full control over your cookie preferences at all times. You can change your choice between "Accept all" (enabling performance analytics) and "Essential only" (strictly necessary cookies only) whenever you wish:
Click the button below to open the interactive preferences panel and adjust your settings:
You can also access this panel at any time from the Cookie preferences link located in the footer of every page on our website.
6. Browser-level controls & Do Not Track
In addition to our preference tool, most modern web browsers allow you to manage or clear cookies through their application settings:
- Google Chrome: Settings → Privacy and Security → Third-party cookies.
- Apple Safari (macOS & iOS): Settings → Safari → Privacy & Security → Block All Cookies / Prevent Cross-Site Tracking.
- Mozilla Firefox: Settings → Privacy & Security → Enhanced Tracking Protection & Cookies.
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies.
Please note: Disabling strictly necessary cookies in your browser settings may prevent secure checkout confirmation, contact form submissions, or administrative authentication from functioning properly.
We also honour Global Privacy Control (GPC) and standard browser "Do Not Track" signals by defaulting non-essential storage to disabled.
7. Contact us & policy updates
We review and update this Cookie Policy periodically to reflect technological changes, new features, or updated legal guidelines. Material revisions will be posted directly on this page with an updated effective date.
If you have any questions, suggestions, or data protection requests regarding our cookie practices, please contact our privacy team:
Designed in the United Kingdom · All rights reserved