1. What cookies are
A cookie is a small text file placed on your device when you visit a website. Cookies let a site remember things between pages and between visits — that you have added an item to your basket, that you are signed in, or that you have already answered the cookie banner.
We also use closely related technologies, such as local storage in your browser and small pixel images in email. Where those work like cookies, they are covered by this policy too.
Cookies set by gallerytech.org are called first-party cookies. Cookies set by another organisation whose service appears on our pages are third-party cookies.
2. Consent and the law
Under the Privacy and Electronic Communications Regulations 2003 and the UK GDPR, we may set strictly necessary cookies without asking, because the service you requested cannot work without them. Every other category — analytics, preferences, marketing — requires your consent before it is set.
When you first visit the site, you will see a banner allowing you to accept or reject non-essential cookies. Rejecting them is as easy as accepting them, and the site remains fully usable either way. You can change your mind at any time using the controls described in section 6, and your choice is recorded so that we do not keep asking.
3. Categories we use
3.1 Strictly necessary (always on)
Required for the website to operate: keeping your basket contents, maintaining a signed-in session, protecting forms and checkout against cross-site request forgery, balancing traffic across servers and remembering your cookie choice. These cannot be switched off through our banner, though you can block them in your browser — the shop will then not work properly.
3.2 Analytics (consent required)
Help us understand which pages are read, where visitors arrive from and where journeys break down, so we can improve the site. We configure analytics to minimise the data collected — including IP truncation where the provider supports it — and we do not use it to identify individuals.
3.3 Preferences (consent required)
Remember choices you make, such as a display setting or a recently viewed list, so the site behaves the way you left it.
3.4 Marketing (consent required)
Used to measure whether an advertisement led to a visit or a purchase, and to avoid showing you the same message repeatedly. We use these sparingly and only with consent; if you reject them, no marketing cookies are set.
4. Cookies in detail
The table below lists the cookies we may set. Names and durations can change as we update our tools; we review this list regularly and republish it when it changes.
| Name | Category | Purpose | Duration |
|---|---|---|---|
tg_session | Strictly necessary | Maintains your browsing session and basket across pages | Session |
tg_cart | Strictly necessary | Remembers basket contents if you leave and come back | 30 days |
tg_csrf | Strictly necessary | Security token protecting forms and checkout from cross-site request forgery | Session |
tg_auth | Strictly necessary | Keeps you signed in to your account | 30 days |
tg_consent | Strictly necessary | Stores your cookie preferences so the banner is not shown again | 12 months |
tg_prefs | Preferences | Remembers display settings and recently viewed products | 6 months |
_ga | Analytics | Distinguishes visitors for aggregate usage statistics | Up to 24 months |
_ga_<id> | Analytics | Maintains analytics session state | Up to 24 months |
tg_attr | Marketing | Records which campaign a visit came from, to measure advertising | 90 days |
5. Third-party cookies
Some services we rely on may set their own cookies when you use them — for example a payment provider during checkout, an embedded video player, or an analytics platform. Those organisations act as separate controllers for the data they collect through their own cookies, and their own privacy and cookie notices apply.
Payment provider cookies used to complete a transaction and prevent fraud are treated as strictly necessary for the checkout you asked us to perform. Embedded third-party content that is not essential is loaded only after you consent.
6. Managing cookies
6.1 On this site
Use the cookie preferences control available from the banner or the link in our footer to accept or reject each optional category. Changes take effect immediately, and withdrawing consent stops any further use of that category.
6.2 In your browser
Every major browser lets you block or delete cookies, and most offer a private browsing mode that discards them when you close the window:
- Chrome — Settings › Privacy and security › Third-party cookies
- Safari — Settings › Privacy › Manage Website Data
- Edge — Settings › Cookies and site permissions
- Firefox — Settings › Privacy & Security › Cookies and Site Data
Blocking all cookies will stop the basket, sign-in and checkout from working. Deleting cookies also deletes your saved cookie preference, so the banner will appear again on your next visit.
7. Do Not Track and Global Privacy Control
There is no agreed industry standard for responding to browser “Do Not Track” signals, so we do not rely on them. Where your browser sends a recognised Global Privacy Control signal, we treat it as an objection to non-essential cookies and do not set them.
8. Changes to this policy
We update this policy whenever the cookies we use change. The date at the top of the page shows the most recent revision. Material changes to non-essential cookies will be reflected in the consent banner, and we will ask for your consent again where the law requires it.
9. Contact
Questions about cookies? Email info@gallerytech.org, or write to Data Protection, TECH GALLERY LIMITED, 137 Grosvenor Road, London, England, SW1V 3JY. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.