Cookie Policy

ROSE ALOTAIBI LTD

COOKIE POLICY

Effective Date: November 2026

Last Updated: October 2026

This Cookie Policy explains how Rose Alotaibi Ltd (“Rose Alotaibi”, “we”, “us” or “our”) uses cookies and similar technologies on the official Rose Alotaibi website.

This Cookie Policy should be read together with our Privacy Policy, Terms and Conditions of Sale, Returns & Refunds Policy, Delivery & Shipping Policy and any other applicable website terms.

Our use of cookies and similar technologies is governed, where applicable, by relevant privacy and electronic communications laws, including the Privacy and Electronic Communications Regulations 2003 (“PECR”), the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Data (Use and Access) Act 2025 and, where applicable, the EU General Data Protection Regulation (“EU GDPR”) and relevant national ePrivacy legislation.

Nothing in this Policy excludes, restricts or limits any privacy or data-protection right which cannot lawfully be excluded, restricted or limited.

1. SCOPE OF THIS POLICY

1.1 This Policy applies to cookies and other technologies which store information on, or access information from, a user’s computer, mobile phone, tablet or other terminal equipment.

1.2 This Policy applies whether such technologies are operated directly by Rose Alotaibi Ltd or through third-party providers integrated into the Website.

1.3 Technologies covered by this Policy may include cookies, tracking pixels, web beacons, tags, scripts, local storage, session storage, software development kits, device identifiers, browser identifiers and other comparable storage or access technologies.

1.4 The rules applicable to such technologies may vary depending upon their purpose, functionality, whether personal data is processed and whether an applicable statutory exemption is available.

2. WHAT ARE COOKIES?

2.1 Cookies are small files or data elements which may be stored on a user’s device when the user accesses a website.

2.2 Cookies can enable a website to recognise a device, remember preferences, maintain sessions, provide shopping-cart functionality, support security, measure performance and, where applicable, facilitate analytics or marketing.

2.3 Cookies may be session cookies, which generally expire when a browser session ends, or persistent cookies, which remain on a device for a defined period or until deleted.

2.4 Cookies may also be first-party cookies, placed or controlled by the website being visited, or third-party cookies, placed or accessed by another organisation whose service is integrated into the Website.

3. STORAGE AND ACCESS TECHNOLOGIES

3.1 The rules applying to cookies may also apply to other technologies which store information on, or access information from, a user’s terminal equipment.

3.2 Such technologies may include tracking pixels, local storage, device identifiers, browser identifiers, embedded scripts, advertising identifiers, software development kits and similar mechanisms.

3.3 Rose Alotaibi Ltd will assess such technologies according to their purpose, necessity, privacy impact and applicable legal requirements.

3.4 References to “cookies” in this Policy may, where appropriate, include comparable storage and access technologies.

4. CATEGORIES OF TECHNOLOGIES WE MAY USE

4.1 Rose Alotaibi Ltd may use strictly necessary technologies.

4.2 Rose Alotaibi Ltd may use functional or preference technologies.

4.3 Rose Alotaibi Ltd may use analytics and performance technologies.

4.4 Rose Alotaibi Ltd may use advertising or marketing technologies where legally permitted.

4.5 Rose Alotaibi Ltd may use fraud-prevention, security and authentication technologies.

4.6 Rose Alotaibi Ltd may use technologies necessary for shopping-cart, checkout, payment or transaction functionality.

4.7 The categories actually in use may change as Website functionality changes.

5. STRICTLY NECESSARY COOKIES

5.1 Strictly necessary cookies are technologies essential to provide a service expressly requested by the user or otherwise falling within an applicable legal exemption.

5.2 Such technologies may support security, authentication, fraud prevention, network management, shopping-cart functionality, checkout functionality, load balancing, session management or other essential Website functions.

5.3 Where an applicable statutory exemption applies, such technologies may be used without prior consent.

5.4 A technology will not be treated as strictly necessary merely because it is commercially useful, convenient or beneficial to Rose Alotaibi Ltd.

5.5 Disabling strictly necessary technologies may prevent the Website or certain requested services from functioning correctly.

6. FUNCTIONAL AND PREFERENCE COOKIES

6.1 Functional technologies may enable enhanced Website functionality or remember selections made by a user.

6.2 Such technologies may remember language, region, display, accessibility or other user preferences.

6.3 Where consent is required by applicable law, functional technologies will not be activated before valid consent has been obtained.

6.4 Refusal of non-essential functional technologies may affect certain optional features without preventing access to core Website functionality.

7. ANALYTICS AND PERFORMANCE COOKIES

7.1 Analytics technologies may be used to understand how visitors interact with the Website.

7.2 Such technologies may collect information about page visits, navigation paths, session duration, browser or device characteristics, technical performance and error events.

7.3 Analytics information may be used to measure performance, identify problems and improve Website functionality and customer experience.

7.4 Where consent is legally required, analytics technologies will not be activated before the user has provided valid consent.

7.5 Analytics information may be aggregated, pseudonymised or otherwise processed in a privacy-conscious manner where appropriate.

8. ADVERTISING AND MARKETING COOKIES

8.1 Advertising or marketing technologies may be used, where legally permitted, to measure advertising effectiveness, understand campaign performance, manage advertising frequency or support targeted or personalised advertising.

8.2 Such technologies may involve third-party advertising, social-media or analytics providers.

8.3 Where prior consent is required, Rose Alotaibi Ltd will not activate relevant advertising or marketing technologies before valid consent has been obtained.

8.4 Users must be able to refuse non-essential marketing technologies without being denied access to core Website functionality where those technologies are not necessary.

8.5 Marketing and advertising technologies will not be used in a manner which unlawfully overrides a user’s consent choices.

9. CONSENT REQUIREMENTS

9.1 Where consent is required by PECR or other applicable law, consent must be obtained before the relevant non-exempt technology is used.

9.2 Consent must be freely given, specific, informed and unambiguous.

9.3 Consent must be indicated by a clear affirmative action where applicable law requires such action.

9.4 Merely continuing to browse the Website will not, by itself, be treated as valid consent where an affirmative choice is legally required.

9.5 Pre-ticked boxes or equivalent mechanisms will not be used to obtain consent where such methods would fail applicable consent requirements.

9.6 Users should be provided with sufficient information to understand the material purposes of relevant technologies before making a consent choice.

10. COOKIE CONSENT BANNER

10.1 Where required, Rose Alotaibi Ltd will provide a cookie consent mechanism when a user visits the Website.

10.2 The consent mechanism may provide options including “Accept All”, “Reject Non-Essential” and “Manage Preferences”.

10.3 The consent mechanism will aim to provide users with a genuine and balanced choice.

10.4 Non-essential technologies requiring consent will remain disabled until the user makes a valid affirmative choice.

10.5 Refusal of non-essential technologies will not prevent the user from accessing core Website services unless the relevant technology is genuinely necessary for the requested service.

10.6 The design of the consent mechanism will not intentionally mislead, pressure or manipulate users into accepting optional technologies.

11. MANAGING COOKIE PREFERENCES

11.1 Where a preference-management tool is available, users may use it to choose which categories of non-essential technologies are permitted.

11.2 Users may be able to accept all optional technologies, reject all non-essential technologies or make category-specific selections.

11.3 Users may revisit and change their choices through the Website’s preference-management mechanism where available.

11.4 The availability of specific controls may depend upon Website functionality and the consent-management system in use.

12. WITHDRAWAL OF CONSENT

12.1 A user may withdraw consent to non-essential technologies at any time where processing is based upon consent.

12.2 Withdrawing consent will not affect the lawfulness of activity carried out before withdrawal.

12.3 Following withdrawal, relevant non-essential technologies will no longer be activated or accessed to the extent required by applicable law.

12.4 Technologies already stored on a device may remain until deleted or expire, but their further use will be governed by the user’s updated preferences and applicable law.

12.5 Users may also delete cookies manually through their browser or device settings.

13. CONSENT RECORDS

13.1 Rose Alotaibi Ltd may retain records demonstrating the consent choice made by a user.

13.2 Such records may include the date and time of the choice, consent categories selected, consent-management version, device or browser information and other information reasonably necessary to demonstrate compliance.

13.3 Consent records will be retained only for an appropriate period having regard to legal, compliance and evidential requirements.

13.4 Consent records will not be used for unrelated purposes unless another lawful basis applies.

14. FRESH CONSENT

14.1 Rose Alotaibi Ltd may request consent again where reasonably necessary or legally required.

14.2 Fresh consent may be sought where the purposes of technologies materially change, new privacy-intrusive technologies are introduced, previous consent no longer adequately covers current processing or applicable law requires renewed consent.

14.3 Users may also be asked to review preferences periodically where appropriate.

15. COOKIE AUDITING

15.1 Rose Alotaibi Ltd may conduct periodic audits of cookies and other storage or access technologies used by the Website.

15.2 Such audits may identify the technology name, provider, purpose, category, information processed, duration, first-party or third-party status and applicable consent or exemption basis.

15.3 Technologies which are unnecessary, obsolete or no longer justified may be removed or disabled.

15.4 Rose Alotaibi Ltd may review the appropriateness of cookie durations and the operation of third-party technologies.

15.5 Rose Alotaibi Ltd may update consent settings where an audit identifies a material change in technology use or legal requirements.

16. SPECIFIC COOKIE INFORMATION

16.1 Where technically available, Rose Alotaibi Ltd will provide information identifying individual technologies used on the Website.

16.2 Such information may include the cookie or technology name, provider, purpose, category, first-party or third-party status, duration or expiry period, whether consent is required and relevant information regarding third-party processing.

16.3 Such information may be provided through the cookie preference centre, this Policy or another appropriate transparency mechanism.

16.4 The absence of a particular cookie name from a general policy does not permit the use of that technology contrary to applicable law.

17. THIRD-PARTY PROVIDERS

17.1 Rose Alotaibi Ltd may integrate services supplied by third-party technology providers.

17.2 Such providers may include hosting providers, analytics providers, payment processors, fraud-prevention services, social-media platforms, advertising networks, communications providers or other technology providers.

17.3 Third parties may place or access technologies through the Website where technically and legally permitted.

17.4 Rose Alotaibi Ltd will take reasonable steps to understand the role and purposes of third-party technologies integrated into the Website.

17.5 Appropriate contractual, technical or organisational arrangements may be implemented where required by applicable law.

17.6 Third-party providers may separately process information under their own privacy and cookie policies where they act as independent controllers.

18. FIRST-PARTY AND THIRD-PARTY TECHNOLOGIES

18.1 First-party technologies are set or controlled through the Rose Alotaibi Website domain or by Rose Alotaibi Ltd.

18.2 Third-party technologies may be set, accessed or controlled by another organisation whose services are integrated into the Website.

18.3 The distinction between first-party and third-party status does not by itself determine whether consent is required.

18.4 The purpose, function and legal status of the relevant technology must also be considered.

19. PERSONAL DATA AND COOKIES

19.1 Some storage and access technologies may process information which constitutes personal data.

19.2 Such information may include IP addresses, online identifiers, device identifiers, browser information, activity data, account information or other data capable of relating to an identifiable individual.

19.3 Where personal data is processed, Rose Alotaibi Ltd will comply with applicable data-protection requirements in addition to PECR or equivalent storage-and-access rules.

19.4 Further information concerning personal-data processing is contained in our Privacy Policy.

20. LAWFUL BASIS FOR RELATED PERSONAL-DATA PROCESSING

20.1 Where personal data is processed in connection with cookies or similar technologies, Rose Alotaibi Ltd will identify an appropriate lawful basis where required.

20.2 Where valid consent is required for the technology and associated processing, Rose Alotaibi Ltd may rely upon consent where appropriate.

20.3 Strictly necessary technologies may involve other lawful bases depending upon the circumstances, including contractual necessity, legal obligation or legitimate interests where permitted.

20.4 The appropriate lawful basis will depend upon the specific processing activity.

20.5 Reliance upon a lawful basis under data-protection law does not remove a separate requirement to obtain consent for storage or access technologies where PECR or another applicable law requires consent.

21. DEVICE AND BROWSER INFORMATION

21.1 Technologies may process information concerning a user’s device or browser.

21.2 Such information may include device type, operating system, browser type, approximate technical location, IP address, screen characteristics, network information or technical identifiers.

21.3 Such information will only be processed for legitimate and legally permitted purposes.

21.4 Where consent is required for the relevant technology, such processing will remain subject to the user’s consent choices.

22. SOCIAL-MEDIA TECHNOLOGIES

22.1 Where social-media functionality is integrated into the Website, relevant providers may use storage or access technologies.

22.2 Such technologies may enable content sharing, measurement, advertising or other social-media functionality.

22.3 Where consent is required, relevant technologies will not be activated before the required consent is obtained.

22.4 Social-media providers may separately process information under their own privacy policies.

22.5 Users should review the privacy and cookie information provided by relevant social-media platforms where applicable.

23. EMBEDDED CONTENT

23.1 The Website may contain embedded content supplied by third-party services.

23.2 Embedded content may, depending upon its configuration, involve storage or access technologies or the transmission of device information to the third-party provider.

23.3 Where consent is required, Rose Alotaibi Ltd will seek to prevent non-essential technologies from activating until appropriate consent has been obtained.

23.4 Embedded content which cannot lawfully operate before consent may remain unavailable until the user makes the relevant choice.

24. PAYMENT AND CHECKOUT TECHNOLOGIES

24.1 Payment and checkout providers may use technologies required to authenticate transactions, prevent fraud, maintain transaction security or complete a payment requested by the Customer.

24.2 Certain technologies may qualify as strictly necessary where they are essential for the requested payment or checkout service.

24.3 Independent payment providers may separately process information under their own privacy terms.

24.4 Rose Alotaibi Ltd will not intentionally classify unrelated advertising or analytics technologies as necessary merely because they are operated by a payment provider.

25. FRAUD-PREVENTION AND SECURITY TECHNOLOGIES

25.1 Rose Alotaibi Ltd and its service providers may use technologies necessary to detect, prevent or investigate fraud, abuse, cybersecurity incidents or unauthorised access.

25.2 Where such technology qualifies for a statutory exemption, prior consent may not be required.

25.3 Any related personal-data processing will remain subject to applicable data-protection requirements.

25.4 Security technologies may be used to protect customer accounts, transactions, payment processes, Website infrastructure and Rose Alotaibi Ltd’s legitimate legal interests.

26. COOKIE DURATION

26.1 Rose Alotaibi Ltd will consider whether the duration of each technology is appropriate for its stated purpose.

26.2 Technologies will not be retained for longer than reasonably necessary for the relevant purpose.

26.3 Session technologies may expire automatically when the relevant browser session ends.

26.4 Persistent technologies may remain for a specified period unless deleted earlier.

26.5 Specific durations may be disclosed through the Website’s cookie preference tool or cookie register where technically available.

26.6 Rose Alotaibi Ltd may review persistent cookie durations periodically and shorten or remove them where appropriate.

27. INTERNATIONAL DATA TRANSFERS

27.1 Third-party providers involved in cookie or tracking technologies may process information outside the United Kingdom, European Economic Area or the jurisdiction in which the user is located.

27.2 Where personal data is transferred internationally and an applicable restricted-transfer regime applies, Rose Alotaibi Ltd will use or rely upon an appropriate lawful transfer mechanism where required.

27.3 Such mechanisms may include applicable adequacy arrangements, approved contractual safeguards or other legally recognised transfer mechanisms.

27.4 Further information is contained in our Privacy Policy.

28. AUTOMATED PROFILING AND ADVERTISING

28.1 Certain marketing technologies may be capable of contributing to advertising profiles, audience segmentation or personalised advertising.

28.2 Where such technologies are used, Rose Alotaibi Ltd will comply with applicable consent, transparency and data-protection requirements.

28.3 Rose Alotaibi Ltd will not intentionally use such technologies in a manner which unlawfully produces solely automated decisions having legal or similarly significant effects.

28.4 Where profiling materially affects individuals and additional rights apply, those rights will be respected.

29. CHILDREN’S PRIVACY

29.1 Rose Alotaibi Ltd does not intentionally use non-essential tracking technologies to unlawfully profile or target children.

29.2 Where the Website processes data relating to children and specific legal protections apply, Rose Alotaibi Ltd will take reasonable steps to comply with those requirements.

29. 3 Where legally required, additional age-appropriate transparency, consent or safeguarding measures may be implemented.

30. BROWSER AND DEVICE SETTINGS

30.1 Users may be able to block, delete or restrict cookies through browser or device settings.

30.2 Browser controls operate independently of Rose Alotaibi Ltd’s consent-management tool.

30.3 Blocking strictly necessary technologies may impair Website functionality.

30.4 Browser-level deletion of cookies may cause the Website to request consent again because previous preference records may no longer be available.

30.5 Instructions for managing cookies vary between browsers and devices and users should consult the relevant provider’s settings or help documentation.

31. GLOBAL PRIVACY OR BROWSER SIGNALS

31.1 Where legally required or technically appropriate, Rose Alotaibi Ltd may recognise supported browser-based privacy preference signals.

31.2 The legal effect of such signals may vary by jurisdiction and technology.

31.3 Nothing in this Policy represents that every browser signal is currently supported unless the Website technically recognises it.

32. COOKIE WALLS AND ACCESS

32.1 Rose Alotaibi Ltd will not condition access to core Website functionality on consent to non-essential tracking technologies where doing so would result in consent not being freely given under applicable law.

32.2 Certain optional features may depend upon technologies genuinely necessary for those specific features.

32.3 Where a technology is genuinely necessary for an optional feature requested by the user, the feature may be unavailable if the user declines the necessary technology.

33. SECURITY OF COOKIE-RELATED INFORMATION

33.1 Rose Alotaibi Ltd will use appropriate technical and organisational measures designed to protect personal data processed through cookies and similar technologies.

33.2 No internet-based technology can be guaranteed to be entirely secure.

33.3 Rose Alotaibi Ltd will review relevant security arrangements where appropriate.

33.4 Third-party service providers may also be subject to contractual or legal security obligations where applicable.

34. DATA MINIMISATION

34.1 Rose Alotaibi Ltd aims to use technologies proportionate to the relevant business and Website purpose.

34.2 We will seek to avoid collecting or retaining unnecessary information through storage or access technologies.

34.3 Where reasonably practicable, privacy-protective configurations may be used to reduce unnecessary tracking or data collection.

34.4 Rose Alotaibi Ltd may disable technologies which no longer serve a legitimate and proportionate purpose.

35. PURPOSE LIMITATION

35.1 Technologies will be used for defined and legitimate purposes.

35.2 Information obtained through a technology will not be repurposed in a materially incompatible way unless such further processing is permitted under applicable law.

35.3 Where a new purpose requires fresh transparency or consent, Rose Alotaibi Ltd will take appropriate steps before implementing that purpose.

36. THIRD-PARTY POLICY CHANGES

36.1 Third-party providers may update their technologies, cookie names or processing practices from time to time.

36.2 Rose Alotaibi Ltd may periodically review such changes and update its consent-management settings or this Policy where appropriate.

36.3 The continued integration of a third-party service does not remove that provider’s independent obligations under applicable law.

37. TECHNOLOGY CHANGES

37.1 Rose Alotaibi Ltd may introduce, remove or replace Website technologies over time.

37.2 Where a change materially affects consent, privacy or the purposes for which information is accessed or stored, Rose Alotaibi Ltd will take appropriate steps to update its transparency information.

37.3 Fresh consent will be obtained where required.

38. COMPLIANCE REVIEW

38.1 Rose Alotaibi Ltd may periodically review compliance with this Policy and applicable storage-and-access rules.

38.2 Reviews may consider technologies in use, categories, consent status, third-party providers, retention periods, international transfers and privacy risks.

38.3 Appropriate changes may be implemented where gaps, changes or risks are identified.

39. COMPLAINTS AND QUESTIONS

39.1 Questions or concerns relating to cookies, tracking technologies or consent may be directed to:

clientservices@rosealotaibi.com

39.2 Where applicable, individuals may also have the right to complain to a competent data-protection or privacy supervisory authority.

39.3 For UK matters, this may include the Information Commissioner’s Office.

39.4 Where EU GDPR applies, users may also have rights to complain to the competent supervisory authority in the relevant EU or EEA Member State.

40. CHANGES TO THIS COOKIE POLICY

40.1 Rose Alotaibi Ltd may update this Cookie Policy to reflect changes in law, technology, Website functionality, business practices or third-party services.

40.2 The current version will be made available on the Website together with the applicable effective or revision date.

40.3 Material changes affecting consent will be handled in accordance with applicable law.

40.4 Where fresh consent is legally required, Rose Alotaibi Ltd will seek that consent before using the relevant technology for the new or materially changed purpose.

41. RELATIONSHIP WITH THE PRIVACY POLICY

41.1 This Cookie Policy should be read together with the Rose Alotaibi Ltd Privacy Policy.

41.2 Where cookies or similar technologies process personal data, both policies may apply.

41.3 The Privacy Policy contains additional information regarding lawful bases, individual rights, international transfers, security, retention, and complaints.

42. CONTACT INFORMATION

Questions concerning this Cookie Policy, cookie preferences or the use of cookies and similar technologies may be directed to:

Rose Alotaibi Ltd

24–28 St. Leonard’s Road

Windsor

England

SL4 3BB

Email: clientservices@rosealotaibi.com

Website: rosealotaibi.com

Company Number: 16060510

© 2026 Rose Alotaibi Ltd. All Rights Reserved.