Cookie Policy
Every piece of storage this website uses, what it does, and how long it lasts. Named individually, because "we use cookies to improve your experience" tells you nothing.
Last updated: 11 August 2026
Where we stand today
We use optional cookies for the purposes listed in section 3. None of them are set until you accept them — they are blocked, not merely ignored, until you choose. You can change or withdraw your choice at any time using the button below.
1. What cookies and local storage are
A cookie is a small text file a website asks your browser to store, and which is sent back to that site on later visits. Local storage does a similar job but stays on your device and is never attached to a request — which is why we prefer it for your basket.
The law that governs this is the Privacy and Electronic Communications Regulations 2003 (PECR). It draws one line that matters: storage that is strictly necessary to provide the service you asked for needs no permission, and everything else needs your consent before it is set. Where a cookie also involves personal data, UK GDPR applies too — see our Privacy Policy.
2. Strictly necessary — always active
These cannot be turned off, because the site cannot do what you have asked of it without them. None of them are used to track you, build a profile, or tell anyone anything about you for advertising.
| Name | Type | What it does | How long | Set by |
|---|---|---|---|---|
roc-cart | Local storage (not a cookie) | Remembers what you have put in your basket so it survives moving between pages and closing the tab. Without it the basket empties on every page you open. | Until you clear it or empty your basket | Us |
roc-consent | Local storage (not a cookie) | Records the cookie choice you made here, and when. This exists solely to honour your preference — it is why you are not asked again on every page. | Stored until you clear it or change your choices | Us |
__stripe_mid, __stripe_sid | Cookie, set on Stripe’s checkout domain | Fraud prevention on the payment page. Set by Stripe when you pay, not by this website, and necessary to process a payment securely. | Session, and up to 1 year for the fraud-detection identifier | Stripe |
nf_ab | Cookie | Set by our host, Netlify, to keep you on a consistent version of the site and to filter automated form spam. | Up to 1 year | Netlify |
3. Analytics
We use two analytics tools, and they are deliberately different from one another.
Plausible Analytics — always on, no cookies. It tells us how many people visit and which pages they read. We chose it deliberately: it sets no cookies, writes nothing to your device, does not use a persistent identifier, and does not track you between sites or sessions. It reports totals, not people. Because nothing is stored on or read from your device, PECR consent does not apply, and no personal data about you is created. Plausible processes data within the European Union.
Microsoft Clarity — only if you accept analytics cookies. This one does set cookies and is listed in the table in section 4 below. It records an anonymised replay of a visit so we can see where the site confuses people. Anything you type is masked in your browser before it is sent, so we never receive your name, email or address from a recording. Microsoft processes this data in the United States — see our Privacy Policy for the safeguards that apply.
If you refuse analytics cookies, Clarity is not loaded at all. It is blocked, not merely told to ignore you.
4. Optional cookies
The following are set only if you accept the matching category. They involve sharing data with the provider named, which uses it for its own purposes too — so please read their policy if you want the full picture.
| Provider | Category | Cookies | What it does | How long |
|---|---|---|---|---|
| Microsoft Clarity (session replay & heatmaps) | analytics | _clck, _clsk — first-party cookies set on this website, not on a Microsoft domain | Records an anonymised replay of your visit — where you scrolled, what you clicked, where you hesitated — so we can find the parts of the site that are confusing and fix them. What you type into any form is masked before it leaves your browser, and we never see your name, email or address in a recording. | _clck up to 1 year, _clsk 1 day |
5. How to control cookies
On this site
Use the link — available here and in the footer of every page — to accept, refuse, or change individual categories at any time. Withdrawing consent is as easy as giving it, and refusing has no effect on your ability to browse or buy.
One practical caveat we would rather be honest about: because a script that has already loaded cannot be recalled, withdrawing consent stops any further collection from the next page load onwards. It does not retrospectively delete what a provider already received — for that, use the deletion rights in our Privacy Policy.
In your browser
You can block or delete cookies through your browser settings, and set it to warn you before accepting them. Blocking all cookies will break the payment page, because Stripe needs its fraud-prevention cookies to take a payment securely. Instructions: Chrome · Safari · Firefox · Edge.
You can also opt out of interest-based advertising across many providers at Your Online Choices, and browsers increasingly honour "Do Not Track" and Global Privacy Control signals. We do not currently rely on either signal, because we are not setting anything that would need to respond to them.
6. Questions and complaints
Email hello@ashvane.co.uk and we will answer. If you are not satisfied, you can complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/ or on 0303 123 1113.
See also: Privacy Policy · Terms & Conditions