Privacy Policy

6. Cookies and tracking technologies

Strictly necessary (always on). We use a sign-in cookie for the ERHA Club, and browser storage to remember your cart and your cookie choice. These are needed for the site to work.

Analytics (optional, off by default). If you allow it, we use Google Analytics and Shopify's website analytics to understand how erha.uk is used: visits, pages viewed, Pocket Shots product views, cart activity, the traffic source or campaign that brought you to the site, your approximate location and your device. These services use cookies (Google Analytics sets cookies such as _ga; Shopify sets cookies such as _shopify_analytics), browser information and IP addresses. Shopify analytics events are sent directly from your browser. When you add Pocket Shots to your cart with Analytics allowed, we also create a matching Shopify cart so Shopify can connect your cart activity to your checkout. We do not send your name, email, address or other details you type into forms. Google Analytics is not loaded at all unless you allow Analytics. Allowing Analytics also gives Shopify analytics permission for our Shopify checkout. Analytics on its own does not send data to Meta or share data for advertising: Meta and Google purchase measurement on our Shopify checkout also need Marketing.

Marketing measurement & sharing with Google, Meta and TikTok (optional, off by default).If you allow it, Google may measure purchases made on our Shopify checkout so we can evaluate whether our advertising works. Shopify classes this as a “sale” or sharing of personal data, so we only allow it when you switch this option on. We do not use Google advertising personalisation, Google Signals or enhanced conversions. Google purchase measurement needs both Analytics and this option; choosing Analytics alone does not include it, and choosing this option alone does not turn on Google Analytics.

Meta Pixel (part of Marketing). If you allow Marketing, we load the Meta Pixel from Meta Platforms Ireland Limited on erha.uk. It can send Meta page views of our home, product and cart pages, Pocket Shots product views and add-to-cart, with the value in GBP, the quantity and our Pocket Shots catalogue ID; these erha.uk events need only Marketing. Checkout-start and purchase events are not sent from erha.uk. If you allow both Analytics and Marketing, and you have not opted out of data sharing in Shopify, Shopify's official Facebook & Instagram sales channel can send Meta checkout-start and purchase activity from our Shopify checkout; Marketing alone does not enable this. Where the Enhanced data-sharing level is enabled, Shopify can send Meta the order value, currency and product details, together with customer matching information such as your name, email address, phone number and location (for example city, region, postcode and country), using its Meta Pixel in your browser, advanced matching and Meta's server-to-server Conversions API. Shopify decides the exact fields, so they are not limited to values we choose. Meta uses this information for advertising measurement and to match events to Meta accounts and deliver ads. Server-side reporting follows the same choices as the browser pixel (both Analytics and Marketing, and no Shopify data-sharing opt-out), and it is not anonymous. With all of these events Meta also receives identifiers and information it collects itself, so this data is not anonymous: the full page address (we only send events from our home, product and cart pages when the address contains nothing beyond a Meta ad click ID; pages reached through campaign links send no Meta events), the referring page as reported by your browser, which we cannot filter and which may include the previous page's full address, your IP address and browser/device details. Meta sets cookies such as _fbp and, after a Meta ad click, _fbc. On erha.uk itself, Meta's automatic event setup and automatic advanced matching are off, and erha.uk does not collect or send your name, email or phone number to Meta; matching information comes only from Shopify's checkout integration described above. We do not add anything you type into forms on erha.uk, health information or payment card details to Meta events. Meta processes this data under its own privacy policy, may combine it with information it holds if you have a Meta account, may use it to measure and deliver ads, and may transfer it outside the UK. The Meta Pixel is not loaded on erha.uk, unless you allow Marketing, and no Meta checkout or purchase activity, browser or server-side, is sent from our checkout unless you allow both Analytics and Marketing.

TikTok (part of Marketing). If you allow Marketing, we may load the TikTok Pixel on erha.uk. It can send TikTok page views of our home, product and cart pages, Pocket Shots product views and add-to-cart, with the value in GBP and the quantity. On those pages TikTok's pixel also records its own landing-page and engaged-session measurement (for example, that a visit started or lasted at least 10 seconds) and technical SDK performance data. It only sends these when the page address contains nothing beyond a TikTok ad click ID (ttclid) and the referring page passes our checks; after you visit any other page, or withdraw consent, it sends nothing more until the site is next loaded. Checkout-start and purchase events are never sent to TikTok from erha.uk. Our Shopify checkout may use Shopify's TikTok app, which can send TikTok checkout-start and purchase events, including the order value, currency and product information supplied by Shopify; Shopify decides the exact fields. We pass your cookie choices to Shopify when your checkout is created, and Shopify's TikTok app collects these checkout events only if you allow both Analytics and Marketing and you have not opted out of data sharing in Shopify. TikTok page views, product views and add-to-cart on erha.uk need only Marketing. With these events TikTok also receives identifiers and information it collects itself, so this data is not anonymous: cookie identifiers such as _ttp, a TikTok ad click ID if you came from a TikTok ad, the page address and the referring page, your IP address and browser/device details. On erha.uk, TikTok automatic advanced matching and enhanced data postback are off, we do not send your name, email or phone number to TikTok, we do not use TikTok's Events API, and we do not add anything you type into forms, or health information, to TikTok events. TikTok processes this data under its own privacy policy and cookies policy, may use it to measure and deliver ads, and may transfer it outside the UK.

Checkout is provided by Shopify on its own domain. We pass your choices to Shopify when your checkout is created, and Shopify's own checkout may apply them.

You can accept all, reject optional uses, or choose each option separately in the cookie banner, and change your choice at any time from “Cookie preferences” in the footer. Withdrawing consent stops future collection and removes Google Analytics, Meta and TikTok cookies set on erha.uk; you can also clear cookies in your browser settings.