Cookie Policy — NextDay

Who we are and what this covers

This policy explains how Next Day uses cookies on www.nextday.com. It tells you what we use them for and how you can control them.

Next Day is run by NEXTDAYUK LTD, a company registered in England and Wales (company number 17097970), with its registered office at 18 New Hall, Liverpool, Merseyside, L10 1LD. We are the “data controller” for any personal information collected through cookies on this site.

This policy sits alongside our Privacy Policy, which explains more about how we handle your personal information generally.

What cookies are

A cookie is a small text file that a website saves on your device when you visit. It lets the site remember things between pages and between visits, such as what is in your basket or whether you are logged in.

Cookies are either first-party (set by us) or third-party (set by another company whose service we use, such as Google). They can be session cookies, which are deleted when you close your browser, or persistent cookies, which stay on your device until they expire or you delete them.

The cookies we use

We group our cookies into two types. Essential cookies are always on because the site cannot work without them. Analytics cookies are only set if you choose to accept them.

Essential cookies (always on)

These keep the site working: they hold your basket and your postcode, keep you logged in, protect forms from attack, let Stripe check payments for fraud and remember your cookie choices. We do not need your consent for these.

Cookie	Set by	Purpose	Expires
nd_cart	Next Day	Links your basket to your device so items are still there when you return	30 days
nd_cart_n	Next Day	Shows how many items are in your basket at the top of every page	30 days
nd_postcode	Next Day	Remembers the postcode you gave us, so we can show delivery dates and costs	12 months
nd_orders	Next Day	Lets you go back to orders placed on this device without an account	90 days
nd_consent	Next Day	Remembers whether you accepted or rejected analytics cookies	6 months
nextday_session	Next Day	Keeps you logged in and keeps your session secure as you shop and check out	2 hours after your last visit
XSRF-TOKEN	Next Day	Protects forms and checkout from cross-site request forgery attacks	2 hours
remember_web_…	Next Day	Keeps you logged in between visits. Only set when you log in	13 months
__stripe_mid	Stripe	Helps Stripe prevent fraud when you pay. Only set on the payment page	12 months
__stripe_sid	Stripe	Helps Stripe prevent fraud during a single payment. Only set on the payment page	30 minutes

Analytics cookies (optional)

These help us understand how people use the site: which pages are popular, where visitors come from and where they give up. We use Google Analytics for this, and only if you accept. Your IP address is anonymised before it is stored.

Cookie	Set by	Purpose	Expires
_ga	Google Analytics	Tells visitors apart by giving each one a random ID	2 years
_ga_[ID]	Google Analytics	Keeps track of your current visit (session)	2 years

Advertising cookies

We do not use advertising cookies. If that changes, we will update this policy and ask for your consent through the cookie banner first.

Cookie names and expiry periods are set by the providers and may change. We review this list regularly, but if you spot something missing please let us know using the details at the end of this policy.

Your choices

You decide whether we use analytics cookies. When you first visit the site, a banner asks you to accept or reject them. Rejecting is as easy as accepting, and the site works the same either way. Nothing optional is set until you choose.

Changing your mind. You can change your choice at any time with , here or in the footer of every page. If you withdraw consent, we stop setting those cookies and remove the Google Analytics cookies this site has set.

Browser settings. You can also block or delete cookies through your browser. Each browser is different, so check its help pages:

If you block essential cookies, parts of the site such as the basket and checkout will stop working.

Opting out of Google directly. You can stop Google Analytics tracking you on any site by installing the Google Analytics opt-out add-on.

Third parties and the law

Two other companies set cookies on our site. Stripe sets two essential cookies on the payment page to check payments for fraud. Google sets analytics cookies through Google Analytics, but only if you accept them. Google processes this data on servers that may be outside the UK, including in the United States. Google relies on the UK Extension to the EU-US Data Privacy Framework and standard contractual clauses to protect it. You can read how Google uses data from sites like ours at policies.google.com/technologies/partner-sites.

We do not sell the information collected by cookies, and we do not share it with anyone other than the providers named above.

The law we follow. Our use of cookies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR) and UK GDPR, as enforced by the Information Commissioner’s Office (ICO). Under PECR we need your consent before setting any cookie that is not strictly necessary for the site to work. Where cookies collect personal information, our legal basis is your consent for analytics cookies, and our legitimate interest in running a working, secure website for essential cookies.

Your rights. You have the right to access, correct or delete personal information we hold about you, and to complain to the ICO at ico.org.uk or on 0303 123 1113. Our Privacy Policy explains these rights in full.

Changes to this policy and how to contact us

We may update this policy when we change the cookies we use or when the law changes. The date at the top shows when it was last updated. If we make a significant change, we will ask for your consent again through the cookie banner.

If you have any questions about cookies on this site, contact us at:

Email: privacy@nextday.com
Post: NEXTDAYUK LTD, 18 New Hall, Liverpool, Merseyside, L10 1LD