Cookie Notice

June 2023

Costa Limited respects your data and your privacy is important to us. For more information about how your data is processed please see the Privacy Notice.

Our cookies and similar technologies will capture your IP address, your location, and record how you use the site or app to help improve it and improve your user experience, where your browser settings or permission allows for this.

What is a cookie and what do they do?

A cookie is a small text file which sits on your device or browser and assists with information flow and functionality. We use cookies to support the main and mobile websites and our app (where available). For instance, some cookies help with site security or provide information to help us improve the site, but each cookie performs a specific action. These cookies don’t usually capture your personal data and we wouldn’t be able to identify people from the information. They simply provide grouped information about site or app navigation which can give you a more personalised experience and tells us if people can find what they want.

Session and persistent cookies and how long they last

All cookies are either session cookies or persistent cookies.

Session cookies last for the length of your visit to a website and remember information from one page to another, so you don’t have to keep entering it.

They delete themselves when you close your browser.

Persistent cookies remember things for longer, from one visit to the next. They can personalise the site and remember information each time you visit. We use them to see how people engage with our site to help us change and develop the site and improve your experience of it.

These stay on your device when you close your browser and vary by cookie – please see the cookie table at the end for specific expiration times.

What are first and third party cookies?

Whether a cookie is first or third party depends on where it comes from and can be sent by different parties.

If the cookie comes from our site it is a first party cookie set by us.

If it comes from another site or organisation, such as our suppliers or business partners, it is a third-party cookie, specifically chosen by us to provide a service, such as a more personalised visit. For example, instance, you may be on a website that has ‘Like’ and ‘Share’ buttons for social network sites. If you click one, the social network site will put a ‘third party’ cookie on your device. That cookie may then collect data about you and send it to them too. You will need to set your privacy choices on their site, to tell them how they can use your data.

What different types of cookies does the site use and what are they each for?

Different types of cookies do different things. We use the following cookies on our sites and apps.

Strictly Necessary Cookies - these are required for the operation, security and integrity of our website and app and are essential when you move around them and use their features. For example, they remember your details when you login and allow you to access your account (where option available). Without such cookies such services cannot be provided.

Functional Cookies remember you when you return to the site or app and choices you have made on previous visits, such as searches and which country you’re from. These cookies will remain on your device but they do eventually expire.

Analytical/Performance Cookies – these allow us to anonymously count the number of visitors to our website or app and see how they move around and use them. This helps us improve how they work, to find things easily and improve site navigation. The data is aggregated and anonymised, which means we cannot identify you as an individual. Some of the Analytical Cookies we use include (but not limited to) Google Analytics and Adobe Digital Analytics.

Marketing / Targeting cookies These cookies will collect information about your browsing habits and help website owners to understand the performance of their marketing activities and improve the relevance of the adverts that you see. They are set by the website owner or by carefully selected third parties who may use that information to show you adverts that they think you will be most interested in when you visit other websites They may also use that information to see how well their adverts are performing and that information may also be shared with other parties such as advertisers. If you do not allow these cookies, you may see more content and adverts that do not match your interests.

What are similar technologies?

Tagging works in a similar way to cookies and is also called a pixel. A pixel is an image that once imbedded in an email connects to a file stored on a web server and allows providers to determine customer interest in their marketing emails and promotions. They may use this information to send offers which appear to be more relevant to you. Tags can also be known as beacons.

Do I Have to Accept Cookies?

You may reject cookies, however, site and app functions will be affected. Cookies help our sites and app to work properly and personalise your experience. You’ll be able to browse the sites and app without cookies but some standard functionality, preferences and certain features will not work.

By accepting cookies, you allow us to improve your experience and remember information about you, which can personalise your experience.

To withdraw consent, you can reject or delete cookies. Please see the Managing Your Cookies section below on how you can adjust your browser settings.

Consent

By browsing or using our site or app you agree that we and the selected third parties in this notice can use (as described in this notice) data collected by the cookies you allow. If you do not agree, you can withdraw your consent by setting your browser to reject cookies, see below.

Managing Your Cookies

There are several ways to manage cookies. You can:

Set your browser to prevent cookies from being accepted. More information should be in your browser’s “help” menu. How to adjust your browser will depend on which browser you’re using.

Set some browsers to send you an alert when a website is trying to place a cookie on your browser.

Block cookies by activating the setting on your browser to refuse all or some cookies. However, if you use your browser settings to block all cookies including strictly necessary cookies, site access and features can be limited or not available.

Delete cookies stored in your browser by “clearing cookies”. This will only delete cookies already stored. It won’t prevent new ones being accepted unless you change the acceptance settings. Also, clearing your cookies on one browser of one device does not automatically clear them on another. You need to clear all browsers on all devices, independently.

By declining cookies in the banner that appears when you visit our site.

More information about cookies is available on external websites such as www.aboutcookies.org. For help with how to manage and delete cookies, visit www.aboutcookies.org. Further information about advertising cookies, and how to manage them, can be found at youronlinechoices.eu (EU based), or aboutads.info (US based).

We are not responsible for the content or cookies from external websites. If you follow a link from our site to a third-party site, they will have their own privacy and cookie notices.

Please bear in mind that if you restrict or disable cookies it can limit functionality and prevent sites from working properly at all.

Keep in mind

Multiple users

If more than one person uses your device, the choices set up by other people will apply to you as well unless you change them. For example, if you share a computer with your family, you may see ads based on sites they have visited as well as sites you have visited.

Cookies that are already on your device

Turning off one or more types of cookies will not delete any that have been downloaded in the past.

Contact us

Our address is Costa Limited, Costa House, 6 Porz Avenue, Houghton Hall Business Park, Houghton Regis, Dunstable, Beds, LU5 5YG, United Kingdom.

If you have any queries in relation to data privacy, please email us at costadpo@costacoffee.com.

Cookies and similar technology used by us are listed below.

General website

Cookie

Cloudflare cfduid

Type

Strictly necessary - Third party cookie

Expires

After 1 month.

Purpose

Cloudflare is a web security service. It remembers which users are considered safe and helps to protect the site from hackers. It does not collect any personal information. More info is available at:

https://www.cloudflare.com/security-policy/and https://support.cloudflare.com/hc/en-us/articles/200170156-What-does-the-CloudFlare-cfduid-cookie-do-

Cookie

costacookieconsent

Type

Strictly necessary - First party cookie

Expires

After 1 year

Purpose

Remembers that the customer has accepted the cookie consent banner. It’s stored in the user's browser for one year and means you don’t see the banner again. We don’t receive any information from it.

Cookie

Adobe scc

Type

Strictly necessary - Third party cookie

Expiry

At the end of the session

Purpose

This cookie is used by Adobe Analytics to determine if cookies are enabled.

https://marketing.adobe.com/resources/help/enUS/whitepapers/cookies/cookiesanalytics.html

Cookie

Adobe Experience Cloud Identity Service

Type

Analytical - Third party cookie

Expiry

After 24 months

Purpose

Allows site visitors to be linked (anonymously) across different Adobe Experience Cloud solutions.

https://experienceleague.adobe.com/docs/core-services/interface/administration/ec-cookies/cookies-privacy.html?lang=en

Cookie

Akamai Bot Manager – akbmsc / bmsv / bmm / akwfSession / bmmi

Type

Strictly necessary – Third party cookie

Expiry

After 2 hours

Purpose

Collects information about your activity on the site to help protect against malicious website attacks.

Cookie

Akamai Bot Manager – bmsz

Type

Strictly necessary – Third party cookie

Expiry

After 4 hours

Purpose

Collects information about your activity on the site to help protect against malicious website attacks

Cookie

Akamai Bot Manager – abck

Type

Strictly necessary – Third party cookie

Expiry

After 12 months

Purpose

Collects information about your activity on the site to help protect against malicious website attacks

Cookie

Google Analytics - gat / gatgtagUA1044804416

Type

Analytical – Third party cookie

Expires

Within 1 minute

Purpose

This cookie is used to throttle request rate.

Google third party cookies collect anonymous information about how visitors use our site. This grouped data helps us improve the site and app. It may provide benchmarked data and broader market information as well. The cookie also sends certain information to Google. This includes, for example, the web address of the page you're visiting and your IP address, which will be assigned a code, to make it anonymous but distinguished by the code. Google may also set cookies on your browser or read cookies that are already there. Google may use the information to maintain and protect the Analytics service.

More info is available at: https://policies.google.com/privacy/partners?hl=en-GB&gl=uk You may opt-out of Google analytics directly by using a plug-in from Google: https://tools.google.com/dlpage/gaoptout Using this plug in will opt you out of all of the Google cookies below

Cookie

Google Analytics - gid

Type

Analytical – Third party cookie

Expires

1 day

Purpose

This cookie is used to distinguish users

Cookie

Google Analytics - ga

Type

Analytical – Third party cookie

Expires

2 years

Purpose

This cookie is used to distinguish users

Cookie

Adobe sfid

Type

Analytical - Third party cookie

Expiry

After 2 years

Purpose

This cookie is used by Adobe Analytics to identify a unique visitor.

https://marketing.adobe.com/resources/help/enUS/whitepapers/cookies/cookiesanalytics.html

Cookie

Adobe ssq

Type

Analytical - Third party cookie

Expiry

At the end of the session

Purpose

This Adobe analytics contains information about the previous link on this site that was clicked on by the user, so the page shows relevant content.

https://marketing.adobe.com/resources/help/enUS/whitepapers/cookies/cookiesanalytics.html

Cookie

Adobe AMCVS

Type

Analytical - Third party cookie

Expiry

At the end of the session

Purpose

This Adobe analytics cookie serves as a flag indicating that the session has been initialized.

https://marketing.adobe.com/resources/help/enUS/whitepapers/cookies/cookiesanalytics.html

Cookie and purpose

ASP.Net session cookie
ASP.NETSessionId

This first party cookie identifies you for the duration of your visit. Information is remembered from page to page. This enables the site and Gift Card site to function properly and means you don’t have to keep entering the same information. It assists with a smooth site experience.

More info is available at: https://msdn.microsoft.com/en-us/library/ms178194.aspx

This is a strictly necessary cookie. It only lasts for your visit.

AWS Elastic Load Balancer Cookie
AWSELB

This third party cookie set by AWS, helps the site run smoothly and more quickly by remembering context, such as how you used the site before. It enables content to load more rapidly and expires after 24 hours. It is also known as a load balancer and it does not collect any personal information.

More information is available at: http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-sticky-sessions.html

This is a strictly necessary cookie. It expires after 24 hours.

Cloudflare cfduid Cookie
cfduid

Cloudflare is a third party cookie web security service. This cookie is strictly necessary and lasts for one year. It remembers which users are considered safe and helps to protect the site from hackers. It does not collect any personal information. More info is available at: https://www.cloudflare.com/security-policy/

and: https://support.cloudflare.com/hc/en-us/articles/200170156-What-does-the-CloudFlare-cfduid-cookie-do-

This is a strictly necessary cookie. It expires after 1 year.