Cookies
Cookie policy.
Last updated: 25 May 2026
This policy explains how Kovalabs (operated by Floww Group Ltd, the data controller) uses cookies and similar technologies such as browser local storage on this website. It sits alongside our Privacy Policy, which describes how we handle your personal data more broadly. We follow the UK Privacy and Electronic Communications Regulations (PECR) and the UK GDPR.
What cookies are
A cookie is a small text file a website stores on your device so it can recognise your browser. We also use related technologies, such as local storage, that work in a similar way. Throughout this policy we use the word “cookies” to cover both.
Cookies do a range of jobs: some are essential to make the site work (keeping your basket, keeping you signed in), while others are optional and help us understand how the site is used or support our marketing.
How we ask for your consent
When you first visit, we set only the strictly necessary cookies the site needs to function. Under PECR these do not require your consent, so they are always on.
Optional cookies (analytics and marketing) stay switched off until you choose Accept on our cookie banner. Until then our analytics run in a cookieless mode, which sets no cookie and keeps no cross-visit identity, under our legitimate interest in understanding anonymous, single-visit usage. Nothing in the analytics or marketing categories below is set unless you opt in.
We record your choice for 365 days so we do not ask on every visit. Refusing is exactly as easy as accepting, and you can change your mind at any time.
Strictly necessary cookies
These are required for the site to work and cannot be switched off. They do not track you for advertising. All are set by Kovalabs (first-party).
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| _medusa_cart_id | Kovalabs | Remembers the items in your basket between pages and visits. | 30 days |
| _medusa_cart_summary | Kovalabs | Lets the basket count appear instantly when a page loads, before the full basket is fetched. Holds only an item count and total, never personal details. | 30 days |
| _medusa_jwt | Kovalabs | Keeps you signed in to your account as you move between pages. | 7 days |
| _medusa_cache_id | Kovalabs | Makes sure cached pages show your own basket and account state rather than another visitor's. | 30 days |
| kova_analytics_consent | Kovalabs | Records your cookie choice so we do not ask you again. | 365 days |
| kovalabs_age_gate_accepted_v1 | Kovalabs | Remembers that you confirmed you are 18 or over, so the age check is not shown on every visit. Stored in your browser's local storage. | Until you clear your browser storage |
Analytics cookies (optional)
These help us understand how visitors use the site so we can improve it. They are set only if you accept. Our analytics provider is PostHog, whose servers are hosted in the EU. See PostHog's own privacy notice for how they process data on our behalf.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| kova_ph | PostHog | Recognises your browser between visits so we can measure how the site is used over time and improve it. Set only after you accept analytics cookies; before that, analytics run with no cookie at all. | Up to 365 days |
Marketing cookies (optional)
These support our email marketing and let us measure whether it is useful. They are set only if you accept. Our marketing provider is Klaviyo. See Klaviyo's own privacy notice for how they process data on our behalf.
As we add advertising tools in future (for example a Meta or Google advertising pixel), the cookies they set will appear in this table before they go live, and they will be governed by the same Accept choice.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
| __kla_id | Klaviyo | Identifies your browser to our email platform so on-site activity can inform the emails we send you and let us measure whether they are useful. Set only after you accept marketing cookies. | Up to 2 years |
Changing or withdrawing your choice
You can review or change your choice at any time using the button below, or the Cookie settings link in the site footer. Withdrawing consent is as straightforward as giving it.
You can also block or delete cookies through your browser settings. Most browsers let you refuse or remove cookies, but if you block the strictly necessary ones, parts of the site (such as your basket and sign-in) may stop working.
Changes to this policy
We may update this policy as our site and the tools we use change. The “last updated” date at the top shows when it was last revised. Any new cookie categories will be reflected here and, where required, gated behind your consent.
Contact
Questions about cookies or your data? Email hello@kovalabs.co.uk and we will respond within 30 days.