Cookie Notice
Contents
1. What cookies are
Cookies are small text files that a website stores on your device. On your next visit the website reads the cookie and can recognise your device, remember your settings or measure how you use the site.
Alongside cookies we use other similar technologies: browser local storage, tracking pixels in emails and the software interfaces of advertising platforms. In this notice we call all of them cookies.
The controller is Nutrisslim d.o.o., Obrtniška ulica 4, 1292 Ig, Slovenia. Please send questions about cookies to [email protected]. Because we have no establishment in the United Kingdom, we have appointed a UK representative under Article 27 UK GDPR, whose name and UK address are published on the website; you may contact the representative instead of us.
2. How you manage your consent
The rule that applies in the United Kingdom is regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR). It says that we may not store information on your device, or read information already stored there, unless you have given consent after being given clear and comprehensive information — with a narrow set of exceptions. This is a UK rule enforced by the Information Commissioner's Office; the EU ePrivacy Directive and national instruments such as the German TDDDG do not apply to naturesfinest.co.uk.
The exceptions. Consent is not needed where the cookie is used only to carry a communication, or where it is strictly necessary for a service you have explicitly asked for — for example keeping your basket or letting you log in and pay. The Data (Use and Access) Act 2025 added a small number of further exceptions from 5 February 2026, covering cookies used only to collect statistical information in order to make improvements to the service, only to adapt the appearance or functioning of the site to your preferences, only to keep the service secure or to install a security update, and only to help emergency assistance reach someone. Those exceptions apply only where we give you clear information and a simple, free way to opt out.
What we actually do. We take a cautious line and continue to ask for your consent to analytics cookies, even though a narrow statistical exception now exists. That is because our analytics providers may also use the data for their own purposes, which takes those cookies outside the exception. We never set marketing or advertising cookies without consent — no exception could cover them.
On your first visit we show you a cookie banner. Cookies that are not strictly necessary are set only after you consent. Refusing is exactly as easy as accepting — the "Accept all" and "Reject all" buttons carry equal weight. No box is pre-ticked. Continuing to browse or scrolling the page is not consent.
You can change or withdraw your consent completely at any time using the "Cookie settings" button, which is permanently available in the footer of every page. Withdrawal does not affect the lawfulness of processing before it. We ask again after 13 months at the latest.
If you do not accept cookies, the website still works. Some convenience features, such as remembering your basket between sessions or showing tailored recommendations, may not be available.
3. Strictly necessary cookies — no consent required — no consent required
Without these the website cannot work. They make login, the basket, language and currency selection, payment and security possible. We set them whatever you decide, because they are strictly necessary for a service you have explicitly requested — the exception in regulation 6(4) PECR.
Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
wp-wpml_current_language | naturesfinest.co.uk | Sets the language shown to the visitor | Session |
wcml_client_currency | naturesfinest.co.uk | Stores the currency you have chosen to pay in | 2 days |
wcml_client_currency_language | naturesfinest.co.uk | Links the chosen currency to the chosen language | 2 days |
wp_woocommerce_session_* | naturesfinest.co.uk | Maintains your session while you shop | 2 days |
wc_cart_hash_# | naturesfinest.co.uk | Remembers the contents of your basket | Session |
wc_fragments_# | naturesfinest.co.uk | Refreshes the basket display without reloading the page | Session |
page_location_cookie_php | naturesfinest.co.uk | Stores your cookie choice | 1 day |
gtag_consent_set | naturesfinest.co.uk | Records that you have already made a cookie choice | 1 year |
cjConsent | naturesfinest.co.uk | Stores your consent preferences | 13 months |
__stripe_mid | Stripe | Fraud prevention at payment; no card details are stored | 1 year |
__stripe_sid | Stripe | Links the payment session to your order | 30 minutes |
_ab, _mf, id | m.stripe.network | Secure operation of the payment form | Session |
m | m.stripe.com | Adapts the payment form to your device | 400 days |
4. Functional cookies — consent required — consent required
These improve convenience: they remember your settings and recently viewed products and make the referral programme work.
Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
lastSeen_cookie | naturesfinest.co.uk | Records when you last visited the website | 1 day |
mm_id | Mention Me | Identifies a participant in the referral programme | 6 months |
mm_allocation | Mention Me | Allocates an offer within the referral programme | 6 months |
mm_offer_frequency | Mention Me | Records how often you have seen a particular offer | 30 days |
mm_overlay_suppressed | Mention Me | Remembers that you closed a pop-up | 1 hour |
mm_conversion_message_suppressed | Mention Me | Remembers that you closed a reward message | 1 hour |
5. Analytics cookies — consent required — consent required
These help us understand how visitors use the website: which pages they visit, where they stop and how long they stay. We use the data to make improvements. Where possible the data is aggregated and pseudonymised. As explained in section 2, we ask for your consent to these cookies rather than relying on the statistical exception added by the Data (Use and Access) Act 2025.
Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Ireland Ltd. | Distinguishes visitors in Google Analytics | 2 years |
_ga_* | Google Ireland Ltd. | Maintains session state in Google Analytics 4 | 2 years |
_gid | Google Ireland Ltd. | Distinguishes visitors within a single day | 24 hours |
_clck | Microsoft Ireland Operations Ltd. | Links visits from the same device in Microsoft Clarity | 1 year |
_clsk | Microsoft Ireland Operations Ltd. | Groups page views into a single session | 1 day |
Sentry service cookies | Functional Software, Inc. | Detects and helps fix technical errors on the website | Session |
6. Marketing and advertising cookies — consent required — consent required
These are used to show advertisements that are more likely to be relevant to you, to measure how advertisements perform and to limit how often you see the same one. Some of them allow your behaviour to be linked across different websites.
Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
__kla_id | Klaviyo, Inc. | Links a visit to a newsletter recipient and personalises messages | 2 years |
__kla_viewed | Klaviyo, Inc. | Records viewed products for personalised messages | 2 years |
klaviyoOnsite | Klaviyo, Inc. | Manages newsletter sign-up on the website | 2 years |
_fbp | Meta Platforms Ireland Ltd. | Measures and targets advertising on Facebook and Instagram | 3 months |
fr | Meta Platforms Ireland Ltd. | Delivers advertising and measures its performance | 3 months |
_gcl_au | Google Ireland Ltd. | Measures conversions in Google Ads | 3 months |
IDE | Google Ireland Ltd. | Targeted advertising and measurement of advertising performance | 1 year |
test_cookie | Google Ireland Ltd. | Checks whether your browser supports cookies | 15 minutes |
MUID | Microsoft Ireland Operations Ltd. | Recognises a browser for advertising and measurement | 13 months |
_uetsid, _uetvid | Microsoft Ireland Operations Ltd. | Measures conversions in Microsoft Advertising | 1 day / 13 months |
We use Google Tag Manager to load and manage the tags above. Google Tag Manager does not itself store personal data; it triggers the other services listed in this notice, and only after you have consented.
7. Third-party cookies and data transfers
Some cookies are set by the third parties named in the tables above. Depending on the service, those parties act as our processors or as controllers in their own right.
Where those parties transfer data outside the United Kingdom, the transfer is made under Chapter V of the UK GDPR. For the United States we rely on the UK Extension to the EU–US Data Privacy Framework (the UK–US data bridge, in force since 12 October 2023) where the recipient is certified for the UK Extension specifically, and otherwise on the International Data Transfer Agreement or the International Data Transfer Addendum to the EU Standard Contractual Clauses, both issued by the Information Commissioner under section 119A of the Data Protection Act 2018, together with a transfer risk assessment. For Ireland and the rest of the European Economic Area we rely on the UK adequacy regulations. The European Commission's Implementing Decisions (EU) 2021/914 and (EU) 2023/1795 are the equivalent EU-side instruments and are not the mechanism for UK data.
More about the lawful bases, retention periods and your rights is in the Privacy Notice.
8. Tracking technologies in emails
Our emails contain tracking pixels that tell us whether a message was opened and which links were clicked. We use this to measure how our messages perform and to tailor their content. Storing or reading this information on your device also requires your consent under regulation 6 PECR, and we obtain it when you subscribe. You can stop the tracking by turning off automatic image loading in your email client, or by unsubscribing.
9. Managing cookies in your browser
As well as using our banner, you can manage cookies in your browser settings, where you can refuse or delete them. Instructions are in the help section of every browser. You can delete cookies already stored on your device at any time.
Browser settings are not by themselves valid consent, so we do not treat them as a substitute for our banner. The Information Commissioner's Office has confirmed this in its guidance on the use of cookies and similar technologies.
10. Changes to this notice
We update this notice whenever the set of cookies or providers changes. We review the cookies in use at least once a year. The current version and the date it comes into force are shown at the top of the document.
Nutrisslim d.o.o., Obrtniška ulica 4, 1292 Ig, Slovenia · Cookie Notice, version 2.0 · in force from 12 August 2026 · questions: [email protected]
