Cookie Policy
Last updated: 2026-08-29. Learn what cookies we use, why we use them, and how to manage or disable them in your browser.
1. About this Cookie Policy
This Cookie Policy explains how Mme Waste Ldn ("we", "us", or "our") uses cookies, pixel tags, local storage, and similar technologies (collectively, "Cookies") when you visit our website at mmewasteldn.co.uk (the "Site"). It also explains what information these technologies collect, how we use that information, and your rights to control or disable Cookies.
This policy should be read alongside our Privacy Policy and our Terms of Service. By continuing to use our Site after being presented with the Cookie Consent notice, you agree to the placement of Cookies on your device in accordance with this policy, unless you have indicated your preference to decline non-essential Cookies.
For the purposes of the UK GDPR, Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR), the data controller is:
Mme Waste Ldn Ltd, 359 Goldhawk Road, London, W6 0WZ, London, W6 0WZ.
2. What are cookies?
Cookies are small text files stored on your computer, tablet, or mobile device by a website's server. Each cookie is unique to your web browser and may contain information such as a unique identifier, the site's domain name, expiry dates, and values sent by the site.
We use the following general categories of Cookie:
- Session (temporary) cookies: Deleted automatically when you close your web browser.
- Persistent cookies: Remain on your device for a defined period or until you delete them manually.
- First-party cookies: Set directly by us when you use our Site.
- Third-party cookies: Set by trusted partners (e.g. Google, Stripe) whose services we embed on the Site.
3. Cookies we use by category
| Category | Essential? | Purpose | Retention |
|---|---|---|---|
| Strictly Necessary | Yes | Core site functionality, auth sessions, CSRF protection, cookie consent memory. | Session — 12 months (consent preference) |
| Analytics | No | Google Analytics 4 — aggregated, anonymised traffic measurement and UX improvement. | 2 years (GA4 standard) |
| Marketing | No | Conversion tracking for quote forms and Google Ads (if enabled). | 90 days |
| Payment processing | Session-essential | Stripe — fraud protection and secure payment sessions on /pay/:id. | Session-only |
4. Specific cookies list
Strictly Necessary (first-party)
cookie-consent— localStorage. Stores whether you accepted or declined non-essential cookies. Expires 12 months after last update.sb-mme-waste-ldn-session— Session cookie. Maintains authenticated state for customer portal, driver, and admin users.auth-refresh-token— HttpOnly persistent cookie. Used by Supabase Auth to keep you signed in between visits. Expires after 7 days inactivity.
Analytics (third-party)
_ga/_ga_{container-id}— Google Analytics 4. Distinguishes unique visitors and persists session state. IP addresses are masked via our GA4 "IP anonymization" setting. Expires 2 years after last page view._gid— Google Analytics 4. Distinguishes users for a single 24-hour session._gat— Throttles GA4 data-collection requests during high traffic. Expires after 1 minute.
Payment & fraud (third-party)
__stripe_mid/__stripe_sid/m— Stripe payment processing on /pay/:id routes. Used for fraud detection, duplicate-payment protection, and device fingerprinting of payment sessions. Stored for the duration of the payment flow.
5. How we use cookie data
Information collected through essential Cookies is processed solely under our "legitimate interest" legal basis (UK GDPR Article 6(1)(f)) to keep the Site secure and functional. Non-essential analytics and marketing Cookies are only set after we obtain your explicit, freely-given consent via the on-site Cookie Consent banner (PECR Regulation 6 / ePrivacy Directive Article 5(3)).
We do not sell, rent, or trade any Cookie-derived personal data. Google Analytics data is shared with Google LLC under its processor terms; the aggregated reports we use contain no PII and are retained within GA4 standard retention windows only.
6. Managing and disabling cookies
You can withdraw or reset your consent at any time by clearing the cookie-consent localStorage key in your browser's developer tools. You may also configure your browser to block Cookies entirely, delete them individually, or notify you before they are stored. Helpful links for common browsers:
For broader opt-out of Google Analytics across all websites, install the Google Analytics Opt-out Browser Add-on. Note: disabling Cookies is likely to break authenticated features (sign-in, payments, quote history) and some layout functionality on this Site.
7. Subject Access Rights (UK GDPR Chapter 3)
Regardless of consent state, you have the right to request access to, rectification of, or erasure of any personal data we hold that was collected via Cookies, as well as the right to object to processing or request data portability. To exercise any of these rights, please email our Data Protection Lead with "Subject Access Request" in the subject line. We respond to all valid requests within 1 calendar month.
8. Third-party domains hosting cookies
google-analytics.com,googletagmanager.com— Google Analytics 4 / Google Tag Manager (analytics)js.stripe.com,api.stripe.com— Stripe payments (essential at checkout)supabase.co— Supabase Auth & Realtime (essential sessions)
9. Policy updates
We review this Cookie Policy at least annually and after any material change to the Cookies we use. The "Last updated" date on this page indicates when the policy was last amended. Material changes will be re-notified to returning visitors via the Cookie Consent banner.
10. Contact
Questions, complaints, or Subject Access Requests about this Cookie Policy or our data-handling practices should be directed to our Data Protection Lead:
- Email: mmewasteldn@gmail.com (include "Privacy" in the subject)
- Phone: 07551 476652
- Post: Mme Waste Ldn Ltd, 359 Goldhawk Road, London, W6 0WZ, London, W6 0WZ
