GODIVA Chocolate Cookie Policy

What are cookies?

This Cookies Notice explains how Godiva UK Ltd uses cookies and similar technologies on godivachocolates.co.uk, what they do, the legal basis on which we set them, and how you can control them.

It should be read alongside our Privacy Notice, which describes how we process personal data more generally, your rights over that data, and how to contact us.

We set cookies in accordance with the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR") and, where cookies involve the processing of personal data, the UK GDPR and the Data Protection Act 2018.

What cookies and similar technologies are

Cookies are small text files placed on your device when you visit a website. They let a site recognise your device, remember your actions and preferences, keep you signed in, and understand how the site is used. We also use related technologies, such as pixels (also called web beacons or tracking pixels), software development kits, and local storage which work in a similar way. In this notice we refer to all of these collectively as "cookies".

Cookies set by us are "first-party cookies". Cookies set by another organisation whose services appear on our website (for example an analytics or advertising provider) are "third-party cookies".

How we ask for your consent

When you first visit the website, our cookie banner allows you to accept or reject non-essential cookies, or to set your preferences by category. Rejecting non-essential cookies is as easy as accepting them.

Strictly necessary cookies are set as soon as you arrive because the website cannot function without them; they do not require your consent. All other cookies (analytics, functionality, and advertising/social-media cookies) are set only after you have given your consent, and they are blocked until you do.

We record your consent choices and will ask you again periodically, and whenever our cookie use changes materially.

The categories below reflect the cookies in use on the website.

Strictly necessary cookies (no consent required)

These keep the website secure and working, for example maintaining your session, remembering the contents of your basket, enabling checkout, balancing server load, and recording your cookie-consent choice. The website is built on the Shopify platform, which sets a standard set of these cookies.

The cookies we use

Cookie	Provider	Purpose	Duration
`_secure_session_id`	Shopify (first-party)	Secure session management	24 hours
`cart`, `cart_sig`, `cart_ts`	Shopify (first-party)	Remembers basket contents	up to 2 weeks
`_shopify_y` / `_shopify_s`	Shopify (first-party)	Session and visitor continuity	session / up to 1 year `[VERIFY duration]`
`secure_customer_sig`	Shopify (first-party)	Keeps logged-in customers authenticated	up to 1 year
`keep_alive`	Shopify (first-party)	Session continuity	up to 2 weeks
Consent-state cookie	Consent tool `[VERIFY tool/name]`	Stores your cookie preferences	up to 12 months

Analytics and performance cookies (consent required)

These help us understand how visitors use the website so we can improve it — for example which pages are viewed, how visitors move through the site, and whether anything is broken.

Cookie	Provider	Purpose	Duration
`_ga`, `_ga_<id>`, `_gid`	Google Analytics (GA4)	Site-usage measurement and visitor distinction	`_ga` up to 2 years; `_gid` 24 hours `[VERIFY]`
Shopify analytics (`_landing_page`, `_orig_referrer`, `_y`, `_s`)	Shopify (first-party)	First-party traffic and conversion analytics	session to 1 year `[VERIFY]`
`[VERIFY: Klaviyo` __kla_id`]`	Klaviyo	Links on-site behaviour to email marketing	up to 2 years `[VERIFY presence]`

Advertising and social-media cookies (consent required)

These are used to measure and deliver advertising, to make ads more relevant, to limit how often you see an ad, and to let you share content via social platforms. They are typically set by third parties who may combine this with data they already hold.

Cookie / pixel	Provider	Purpose	Duration
`_fbp`, `fr` (Meta Pixel)	Meta (Facebook/Instagram)	Conversion measurement and retargeting	`_fbp` up to 3 months; `fr` up to 3 months `[VERIFY]`
Pinterest tag (`_pinterest_ct_*`)	Pinterest	Conversion measurement and retargeting	up to 1 year `[VERIFY]`
YouTube (`VISITOR_INFO1_LIVE`, `YSC`)	YouTube / Google	Embedded-video functionality and measurement	session to ~6 months `[VERIFY]`
Google Ads (`_gcl_au`, conversion tags)	Google	Ad-conversion tracking and remarketing	up to 90 days `[VERIFY presence]`
`[VERIFY: TikTok / Reddit / other pixels]`	`[VERIFY]`	Conversion measurement and retargeting	`[VERIFY]`

Verification note for the live scan. Confirm (a) the exact cookie/pixel names and durations in each table; (b) whether a consent management platform is deployed and is actually blocking categories 4.2 and 4.3 before consent; (c) whether Google Consent Mode v2 is configured; (d) the presence of any pixel not listed above (TikTok, Reddit, Snap, Microsoft/Bing, Criteo are the common additions on Shopify stores); and (e) whether Google Analytics IP handling and data-sharing settings are appropriately configured. Until (b) is confirmed, the consent mechanism described in section 3 is a target state, not a statement of fact.

International transfers

Some providers named above (for example Google and Meta) may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK 'adequacy regulations', or the International Data Transfer Agreement / UK Addendum to the EU standard contractual clauses, together with a transfer risk assessment. Our Privacy Notice explains this in more detail.

Other ways to control cookies

In addition to our cookie settings banner, you can control cookies through your browser, which can usually be set to refuse or delete cookies. If you reject cookies you can still use the website, but some features may not work as intended. Guidance is available at aboutcookies.org and ico.org.uk/for-the-public/cookies. You can opt out of many advertising cookies at youronlinechoices.com.

Changes to this notice

We may update this notice from time to time to reflect changes in the cookies we use or in the law. We will publish the updated version here and, where changes are material, ask for your consent again through the banner.

How to contact us

You can find contact details for our Data Protection Officer in our Privacy Notice.

This notice was last updated on 25 June 2026.