Cookies Policy

1. What cookies are

Cookies are small text files placed on your device (computer, tablet, phone) when you visit a website. Similar technologies — including pixels, local storage, session storage and software development kit (SDK) identifiers — work in much the same way and are covered by this policy.

In the UK, the use of cookies and similar technologies is regulated by the Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR"), as amended. Any personal data that we then process via those cookies is separately regulated by the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

The Information Commissioner's Office (ICO) publishes the UK regulator's guidance on cookies and similar technologies, available at ico.org.uk. This policy is written to be consistent with that guidance.

2. Why we use cookies

We use cookies and similar technologies to:

• Make the website work — keep you signed in, protect against fraud and cross-site request forgery, route traffic across our hosting infrastructure.
• Understand how the website is used — measure page performance, errors and aggregate visitor behaviour so we can improve it.
• Remember your preferences — such as your last-viewed cities, display preferences and locale.
• Support future advertising — if and when we run remarketing on Google Ads or Meta, cookies and pixels will be used to measure those campaigns. These are not active at the time of writing — see section 3.4.

Under PECR, only strictly necessary cookies can be set without your consent. Every other category — analytics, preferences and advertising — requires your prior opt-in via our cookie banner. Consent must be specific, granular and as easy to withdraw as it was to give.

3. Categories of cookies we use

3.1 Strictly necessary (no consent required)

Required for the site to function. Without these, you can't sign in, stay signed in, or submit forms safely. PECR Regulation 6(4) exempts these from the consent requirement.

3.2 Performance and analytics (consent required)

Help us measure traffic, performance and how visitors use the site in aggregate. Currently not active on autoza.co.uk — Google Analytics 4 is deferred until after public launch. The table below shows what will be set if and when you opt in via our cookie banner.

3.3 Preferences (consent required)

Remember choices you make so the site feels less generic on return visits. Not essential — the site works without them.

3.4 Marketing and advertising (consent required)

Used for remarketing and measuring paid campaigns. Currently not active on autoza.co.uk — Meta Pixel and Google Ads remarketing are deferred until after public launch. The table below shows what will be set if and when you opt in via our cookie banner.

4. Your choices

4.1 The on-site cookie banner

When you first visit autoza.co.uk you'll see a cookie banner that lets you accept or reject each non-essential category. You can change your mind at any time by selecting "Cookie settings" in the footer. Withdrawing consent is as easy as giving it — one click — in line with ICO guidance.

4.2 Browser controls

You can also block or delete cookies directly in your browser. Most browsers let you reject third-party cookies, clear cookies on exit, or block specific sites:

• Google Chrome — Clear, allow and manage cookies
• Mozilla Firefox — Cookies and site data
• Safari — Manage cookies and website data
• Microsoft Edge — Delete cookies

4.3 Opting out of third-party trackers

• Google (Analytics & Ads): Google Analytics Opt-out Browser Add-on and My Ad Centre.
• Meta (Facebook / Instagram): Meta Ad Preferences.
• Industry-wide: Your Online Choices (UK).

4.4 Do Not Track (DNT) and Global Privacy Control (GPC)

There is no UK legal standard requiring sites to honour the "Do Not Track" browser header, and the ICO has noted that DNT is not a reliable consent signal. We therefore do not currently treat DNT as a consent instruction. Where your browser sends a Global Privacy Control (GPC) signal we will, on a best-efforts basis, treat it as a request to reject non-essential cookies during that browsing session. Your explicit choice in our cookie banner always overrides any browser-level signal.

5. Third-party cookies and processors

Some cookies are set by third parties whose services we embed or rely on. Each of these acts as an independent controller or processor for the data their cookies collect. Their own cookie and privacy policies apply in addition to ours:

6. Changes to this policy

We may update this Cookies Policy from time to time — for example, when we add a new analytics provider, change a retention period, or respond to updated ICO guidance. The "Last updated" date and version at the top of this page will always reflect the most recent change. Material changes affecting non-essential cookies will trigger a fresh consent prompt the next time you visit.

7. Contact and complaints

Questions about this policy, your cookie choices, or how we process personal data via cookies:

• Email: info@autoza.co.uk
• Postal address: Autoza Ireland Ltd , Autoza Ireland Ltd, 2A Forest View, Swords, County Dublin, Ireland (CRO 801808 ).

If you're not happy with how we handle your cookies or personal data, you have the right to complain to the UK Information Commissioner's Office (ICO). The ICO is the supervisory authority for UK GDPR and PECR:

• Online: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
• Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom

You can raise a complaint with the ICO without going through us first, but we'd appreciate the chance to look into it for you — email info@autoza.co.uk and we'll respond within 30 days.