Cookie Policy

1. About this policy

WE BUY BACK LTD operates this website and is responsible for the storage and access technologies it chooses to use. We are registered in England and Wales under company number 16713774. Our registered office is 11 The Crofts, Rotherham, England, S60 2DJ, and the current director is Zohab Khan.

Companies House registration alone is not a postage instruction. Follow only the postage route and address attached to your order. The registered office is not presented as a public walk-in or general drop-off point.

1.1 The rules that apply

The Privacy and Electronic Communications Regulations govern storing information on, or accessing information from, a visitor's phone, computer or other equipment. The Data (Use and Access) Act 2025 updated the available exceptions. UK data protection law also applies where a technology handles personal information.

1.2 Related information

Our Privacy Policy explains how personal information is used, protected and retained. Our GDPR and Data Rights page explains the rights available over personal information.

2. Cookies and similar storage

A cookie is a small piece of information that a website can place in a browser. Similar technologies include local storage, session storage, pixels, scripts, tags and other methods that store or read information on a visitor's equipment.

2.1 Why the wider definition matters

The basket on this website uses local storage rather than a traditional cookie. It is still covered by the rules because information is saved in the browser so the service can remember what the customer asked it to do.

2.2 First-party and third-party technology

First-party technology is operated for the We Buy Back website. A provider can also set security technology on the hosting domain. The inventory therefore identifies the technology type, provider and source instead of describing every row as first party. A normal link to another website does not, by itself, mean that organisation has placed technology through our page.

3. Consent and exceptions

No optional or consent-required technology is active on the website, so the cookie dialog does not open automatically. Manage cookies remains available in the footer and currently offers an essential-only choice. If optional technology is introduced, both the preference control and that service must be configured so the service checks the saved choice before starting; the dialog alone does not block or start a service.

3.1 Essential storage

Consent is not required where storage is strictly necessary to provide a function the visitor requested, such as keeping products in a basket. Other narrowly defined exceptions can apply only when all of their legal conditions are met.

3.2 Optional technology

Analytics, advertising or behavioural tracking is not treated as essential merely because it may be useful to the business. Any future optional service must be added to this inventory and configured to read and respect the saved choice before it starts where consent is required. No such service is active today.

4. Technologies used today

The table combines storage used by the website with the hosting-security cookie observed on the public website on 1 September 2026. It does not list speculative cookies that were not observed.

4.1 What is not currently in use

We have not identified Google Analytics, advertising cookies, behavioural tracking pixels, chat widgets or social-media embeds on the current website. We therefore do not list them as if they were active.

4.2 Infrastructure checks

Checks of the public Home and Terms pages on 1 September 2026 both found __cf_bm from the chatgpt.site domain with Secure, HttpOnly and SameSite=None attributes and a 30-minute expiry. Cloudflare's official cookie documentation describes encrypted bot-score information and says a session identifier is included only when Anomaly Detection is enabled. This review did not observe cf_clearance, so it is not listed as active.

Hosting behaviour can change independently of the website. The inventory needs a fresh cookie and browser-storage check after a material hosting or security-platform change.

5. Essential basket and checkout storage

The wbb_cart cookie holds a random identifier for the basket kept for this browser. The basket itself — the products, selected condition, product option, quantity and quoted amount — is held by We Buy Back rather than in the browser, so the cookie carries no product or price information of its own.

The wbb_order cookie holds a random identifier for the order just placed. It allows Order Success and the printable postage label and confirmation to be opened again without signing in. An exact retry of a submitted order returns the order already created rather than a duplicate, because the basket is consumed when the order is placed.

5.1 How long it remains

The wbb_cart cookie expires 30 days after the basket was last changed, and is removed when an order is placed. The wbb_order cookie expires 14 days after the order was placed. The wbb-order-session secure, HttpOnly cookie expires after 60 minutes and authorises private Order Success and printable order documents. All three are secure and HttpOnly, so no script in the browser can read them. Any duration change must also be reflected in this policy and table.

5.2 Removing it

Clearing the basket replaces its contents with an empty basket and rotates the checkout token while leaving both local-storage keys present. Browser controls can remove both entries, although doing so means the website can no longer remember the products previously added or recognise an exact checkout retry.

6. Optional analytics

The website is not currently using optional analytics or performance tracking. No analytics provider is named in the inventory because none has been found on the website.

6.1 If analytics is introduced

The preference control can show a future optional service and ask for a choice. That display does not itself stop the service from running. Each future optional service must be separately configured to check the saved category choice before it starts and to remain off when the choice is absent or refused.

6.2 Statistical exceptions

A narrow statistical exception can apply only when the legal conditions are genuinely satisfied. Any future claim to that exception would need to be assessed against the real service and configuration rather than assumed from the product category.

7. Preferences and third parties

7.1 Remembering a website choice

If you save a cookie preference, wbb-cookie-preferences-v1 records its preference-record format version, the time saved, its expiry and the category choices. The integer format version validates the stored record; it is not the dated version of this Cookie Policy.

7.2 Links to other services

The website may link to Royal Mail, PayPal, social networks or another external service. Those organisations operate their own websites and policies after a visitor follows the link. Some media may also be delivered by third parties, either through the hosting platform or directly to the visitor's browser. A remote media request is not described as a cookie unless storage is actually observed.

8. Manage your choices

Use Manage cookies in the footer on any page to review the current storage categories and save the essential-only choice. Because no optional technology is active, the dialog does not open automatically and currently has no optional category to accept or reject. If consent-required technology is introduced, the preference control can ask for an accept-or-reject choice, but that service must still be configured separately to respect the saved result before it starts.

8.1 Browser controls

Browsers also allow visitors to inspect and remove cookies or local storage. These controls are useful but supplement, rather than replace, the choice mechanism required for consent-based technology.

8.2 When choices change

Saving a change updates the preference record. No optional service currently reads that choice because none is active. Before optional technology is introduced, the service must be configured to stop, unload or clear its removable storage as appropriate when consent is withdrawn; the preference dialog does not provide that behaviour by itself.

9. If you reject optional storage

Rejecting optional categories does not prevent you from searching for a product, viewing a quote, using the basket, placing an order or contacting We Buy Back. Essential storage remains available because it supports the service requested.

The current consent design is intended to keep the core search, quote, basket, checkout and contact routes independent of optional categories. The effect of any future optional feature would need to be verified and described with that feature.

10. Choice records and retention

A saved cookie decision records the choice, save time, expiry and storage format so the website can validate it. It is not a record of which dated Cookie Policy was presented. The preference expires after six months, and the website removes the expired browser-storage record when it is next checked.

10.1 When we ask again

We may ask sooner if the categories, purposes, providers or policy version materially change. Clearing browser storage also removes the local preference record.

10.2 No hidden permission

The preference record does not turn browsing into consent. An optional category remains off unless its saved value records a positive choice.

11. Updates, audits and contact

This policy and the live website checks should be reviewed when website storage, providers or the law changes. A new technology should be checked and added to the inventory before it goes live.

11.1 Ask a cookie question

Use the dedicated form below to report unexpected storage, a preference-control problem or something in this policy that is unclear. Use Manage cookies in the footer when you simply want to change a choice.

11.2 Raise a wider privacy concern

Use the Privacy Policy form for a concern about personal information, the Data Rights form to exercise a formal data protection right, or Accessibility Support if the preference control is difficult to use because of an accessibility barrier.