COOKIE POLICY

1. Who we are

Sofa Club Limited ("Sofa Club", "we", "us" or "our") operates sofaclub.co.uk. We are a company registered in England and Wales under company number 08056877. Our registered office is at 6 Centrus, Mead Lane, Hertford, SG13 7GX. Our ICO registration number is 00013824239.

If you have questions about this Cookie Policy, contact us at customersupport@sofaclub.co.uk.

2. What this policy covers

This policy explains how we use cookies and similar technologies on sofaclub.co.uk, what they do, who provides them, how long they remain on a device and how visitors can control them. It should be read with our Privacy Policy at https://sofaclub.co.uk/pages/privacy-policy.

3. What cookies and similar technologies are

Cookies are small text files stored on a computer, phone or other device when a website is visited. We also use similar technologies, including local storage, session storage, scripts, tags, pixels and embedded content. These technologies can remember preferences, keep the basket working, protect the site, measure use and - where consent is given - support advertising and personalisation.

A session technology normally expires when the browser is closed. A persistent technology remains for a stated period or until it is deleted. A first-party technology is delivered through our domain; a third-party technology is delivered or accessed through another organisation. A first-party label does not necessarily mean that no third party receives information.

4. The categories we use

Strictly necessary. Required to provide services requested by a visitor, operate the basket and checkout, keep the site secure, remember privacy choices and manage sessions.

Functionality and preferences. Remember choices and provide features such as wishlists, customer support, localisation and embedded content.

Analytics and performance. Help us understand visits, browsing behaviour, experiments and website performance so we can improve the site.

Marketing and targeting. Measure campaigns and conversions, build audiences and support relevant advertising on this and other services.

5. Your choices and how to withdraw consent

When you first visit the site, our cookie banner allows you to Accept All, Reject All or open Preferences. Non-essential categories remain off unless you actively choose them.

You can change or withdraw your choice at any time by selecting Cookie Settings in the website footer or using the permanent consent-settings control. Withdrawing consent does not affect processing that occurred before withdrawal, but it prevents the relevant technologies from being used afterwards, subject to the time needed to apply the change.

You can also delete or block cookies through your browser settings. Browser controls may not cover every form of local storage or similar technology, and blocking strictly necessary technologies may prevent parts of the site from working properly.

6. Cookie and storage inventory

The following tables reflect technologies observed in the Pandectes scan completed on 5 August 2026. Durations are the maximum values observed by the scan or stated by the provider. Related identifiers with the same provider and purpose are grouped for readability.

6.1 Strictly necessary

Cookie / technology	Provider	Purpose	Category	Duration	Party
_shopify_essential; _shopify_essential_	Shopify	Core storefront, session, checkout and anti-tampering functions.	Necessary	1 year	First
_merchant_essential; __Host-_merchant_essential	Shopify	Essential merchant/storefront session functions.	Necessary	Session-1 year	First
_shop_app_essential	Shopify	Essential Shop and Shopify app functions.	Necessary	1 year	Third
cart; cart_currency	Shopify	Keeps the shopping basket and its currency working.	Necessary	2 weeks	First
discount_code	Shopify	Applies a discount code to the next checkout.	Necessary	Session	First
localization	Shopify	Localises the basket and storefront to the visitor's country.	Necessary	2 weeks	First
shopify_pay; login_with_shop_finalize	Shopify	Supports Shop Pay and completes login with Shop.	Necessary	5 minutes-1 year	First
storefront_digest	Shopify	Controls access to a password-protected storefront.	Necessary	1 year	First
_identity_session; __Host-_identity_session_same_site; _master_udr	Shopify	Authentication, session continuity and account security.	Necessary	Session-2 years	First
_shopify_test	Shopify	Checks whether the browser accepts cookies.	Necessary	1 minute	First / third
__verify	Shopify	Checks whether the browser accepts cookies.	Necessary	Session	First
_tracking_consent; privacy_signal	Shopify	Stores privacy choices and regional privacy signals.	Necessary	1 year	First
_pandectes_gdpr	Pandectes	Records and applies cookie-consent preferences.	Necessary	1 year	First
__cf_bm; _cfuvid	Cloudflare	Bot protection, rate limiting and website security.	Necessary	30 minutes / session	Third
visid_incap_; incap_ses_	Imperva	Website security, traffic protection and load management.	Necessary	Session-1 year	Third

6.2 Functionality and preferences

Cookie / technology	Provider	Purpose	Category	Duration	Party
shopify_override_user_locale	Shopify	Remembers the selected user locale.	Functionality	1 year	First
swym-v-ckd; swym-email	Swym	Supports wishlist state, visitor checks and wishlist email features.	Functionality	30 minutes-1 year	First
swym-session-id; swym-pid; swym-swymRegid	Swym	Maintains a wishlist session and recognises a wishlist user or device.	Functionality	30 minutes-1 year	First
__sharethis_cookie_test__	ShareThis	Tests cookie support for embedded sharing features.	Functionality	Session	First
ZD-suid; ZD-buid	Zendesk	Supports customer-service and chat functionality.	Functionality	Persistent	First
alia-*	Alia	Supports on-site offers, popup state and user-session functions.	Functionality	Session / persistent	First

6.3 Analytics and performance

Cookie / technology	Provider	Purpose	Category	Duration	Party
_orig_referrer; _landing_page	Shopify	Records the source and landing page used to enter the store.	Analytics	2 weeks	First
_shopify_s	Shopify	Identifies a browser session/store combination for analytics.	Analytics	30 minutes	First
_shopify_y; shop_analytics; _merchant_analytics; _shopify_analytics	Shopify	Supports storefront, Shop and checkout analytics.	Analytics	1 year	First
ph_phc_; pxhog_	PixieHog	Website analytics and anonymous visitor measurement.	Analytics	Session-1 year	First
_pk_id.*	PixieHog	Recognises a visitor for visit and website-use measurement.	Analytics	1 day observed	First
_heat; heatmap_; vUUID*; enHsr	PixieHog	Heatmaps and visitor-interaction measurement.	Analytics	1 day / persistent	First
ig-id; ig-location; ig-fv; ig-pv; ig-vars	Intelligems	Experiment assignment, personalisation and variant measurement.	Analytics / functionality	Session-1 year	First / third

6.4 Marketing and targeting

Cookie / technology	Provider	Purpose	Category	Duration	Party
_shopify_marketing	Shopify	Stores marketing data for storefront and checkout surfaces.	Marketing	1 year	First
_uetmsdns	Microsoft Advertising	Stores the Microsoft UET privacy and restricted-event signal.	Marketing	1 year	First
_tt_enable_cookie; _ttp; ttcsid*; tt_appInfo	TikTok	Campaign attribution, advertising measurement and TikTok application information.	Marketing	Session-3 months	First / third
__kla_id; __kla_session; __kl_key; klaviyoOnsite; kl-*	Klaviyo	Connects on-site activity with email/SMS engagement and marketing measurement.	Marketing	Session-1 year	First
azfy_*; consentHeader	Analyzify	Campaign attribution, consent state, market and basket measurement.	Analytics / marketing	Session-1 month	First
TriplePixel; TriplePixelU	Triple Whale	Marketing attribution and campaign measurement.	Marketing	Persistent	First

7. Scripts, pixels and embedded services

The scan also detected 148 scripts, 100 HTML/local or session-storage entries and one Trustpilot iframe. Shopify's Customer Events configuration contains additional app and custom pixels. A script or pixel may operate during a page visit without creating a consistently named cookie, so these services are disclosed separately below. Where a service creates an identifier observed by the scan, it is also included in section 6.

Technology / provider	Purpose	Category	Operation / storage
Shopify Customer Events and Shopify analytics	Storefront operation, checkout events, privacy signals and site measurement.	Necessary / analytics	During the visit; related cookies are listed in section 6.
Google Analytics, Google Tag Manager, Google Ads and Google & YouTube	Site analytics, tag management, advertising conversion measurement, remarketing and campaign attribution.	Analytics / marketing	During the visit; Google identifiers may persist according to the relevant tag configuration.
Analyzify	Coordinates analytics and advertising tags, including Google, Meta, TikTok and server-side measurement.	Analytics / marketing	During the visit; related storage is listed in section 6.
Meta / Facebook	Advertising conversion measurement, audience creation and remarketing.	Marketing	During the visit; identifiers may persist according to Meta's configuration.
Microsoft Advertising / Bing UET	Advertising conversion measurement, remarketing and campaign attribution.	Marketing	During the visit; related storage is listed in section 6 where observed.
TikTok	Advertising measurement, attribution, audience creation and remarketing.	Marketing	During the visit; related cookies last up to 3 months in the scan.
Pinterest	Advertising conversion measurement, campaign attribution and audience creation.	Marketing	During the visit; related identifiers may persist according to the tag configuration.
Snapchat	Advertising conversion measurement, campaign attribution and audience creation.	Marketing	During the visit; related identifiers may persist according to the tag configuration.
Klaviyo	Email/SMS engagement, on-site identification, forms and marketing measurement.	Functionality / marketing	During the visit; related cookies last from the session up to 1 year.
Triple Whale	Marketing attribution and campaign/performance measurement.	Marketing	During the visit; related storage may be persistent.
PixieHog	Website analytics, heatmaps and visitor-interaction measurement, including PostHog/Piwik-style identifiers.	Analytics	During the visit; related storage ranges from the session to persistent storage.
Plausible and Umami	Website audience and traffic measurement.	Analytics	During the visit; no separate named cookie was confirmed by the scan.
Convert Experiences and Intelligems	A/B testing, experiment assignment, personalisation and variant measurement.	Analytics / functionality	During the visit; Intelligems storage lasts from the session up to 1 year.
Zendesk	Customer-service chat and support functionality.	Functionality	During the visit; related storage may be persistent.
Alia	On-site offers, popup and user-session features.	Functionality / analytics	During the visit; related storage may be session-based or persistent.
Swym Wishlist Plus	Wishlist, device recognition and personalised wishlist features.	Functionality	During the visit; related cookies last 30 minutes to 1 year.
ShareThis	Embedded sharing features and associated service checks.	Functionality	During the visit; its observed test cookie lasts for the session.
Trustpilot	Displays embedded Trustpilot review content.	Functionality	During the visit; the embedded service may use its own storage.
Partnerize, Webgains and Shopify Collabs	Affiliate attribution, partner conversion measurement and commission reporting.	Marketing	During the visit; identifiers may persist according to each integration's configuration.
Dataships	Checkout consent and marketing-preference recording.	Necessary / functionality	During checkout; records may be retained according to the consent configuration.
Fivetran	Transfers configured customer-event data to Sofa Club's reporting systems.	Analytics	During the relevant event; no separate named cookie was confirmed by the scan.

8. Third-party services and international processing

Some providers listed above may receive information from, or place or access information on, a visitor's device. Depending on the service and the visitor's choices, this may include device identifiers, browsing events, page URLs, interactions, approximate location, campaign information and purchase or conversion events.

Some providers may process information outside the United Kingdom. Where personal data is transferred internationally, we use or require appropriate safeguards as described in our Privacy Policy. Third-party providers also process information under their own privacy and cookie notices.

9. Changes to this policy

We may update this policy when our website, providers or legal obligations change. The date at the top of the published page shows when it was last updated. We may request consent again if our use of non-essential technologies changes materially.

10. Contact us

Questions about our use of cookies and similar technologies can be sent to customersupport@sofaclub.co.uk or to Sofa Club Limited, 6 Centrus, Mead Lane, Hertford, SG13 7GX.