Cookies
Cookie Policy
Last updated: 11 August 2026. This Cookie Policy explains how Grendova Health Ltd, 15 St Mary Street, Cardiff, CF10 1AD ("Grendova", "we", "us"), uses cookies and similar technologies on grendova.world, and how you can control them. It should be read alongside our Privacy Policy, which explains more generally how we handle personal information.
1. Scope of this policy
This policy applies to every page of grendova.world and to any cookies or similar storage technologies, such as local storage, that are set when you visit our site. It covers cookies we set ourselves, described here as first-party cookies, and cookies set by the third-party services we use, described as third-party cookies. It does not cover cookies that may be set by other websites you reach via links from our pages, and we recommend checking the cookie policy of any external site you visit. This policy is designed to comply with the Privacy and Electronic Communications Regulations 2003 (PECR) as amended, and the UK GDPR insofar as cookies process personal information such as an IP address.
2. What a cookie is
A cookie is a small text file that a website places on your device when you visit it, allowing the site to recognise your device on return visits or to remember information about your visit, such as your preferred settings. Cookies cannot access other files on your device, run programs or deliver viruses, and most cookies do not identify you personally, although some, combined with other information, could be considered personal information under data protection law. Similar technologies, such as local storage and pixel tags, work in a comparable way and are treated the same as cookies throughout this policy for the purposes of consent and disclosure.
3. Strictly necessary cookies
Strictly necessary cookies are essential for grendova.world to work correctly and cannot be switched off in our systems, although you may be able to block them through your browser, which may affect site functionality. Our primary necessary cookie is named grendova_session, is set when you begin browsing, supports secure form submission and navigation, and is automatically deleted when you close your browser. A further necessary cookie named grendova_consent records the choices you make in our cookie banner, is retained for six months from when it is set, and ensures we do not ask you to repeat the same choice on every page. Because these cookies are essential to deliver the service you request when you visit our site, they are set on the basis of our legitimate interest in operating a functional website and do not require your consent under PECR.
4. Preference cookies
Preference cookies remember choices you make so that we can provide a more personalised experience on return visits. Our preference cookie, named grendova_prefs, may store information such as whether you have already seen a particular notice, and is retained for up to twelve months from the date it is set. These cookies are not strictly necessary for the site to function, but they help avoid repeatedly asking you the same question, and they are set only after you have given consent through our cookie banner, or, where permitted, on the basis of an implied acceptance that you can withdraw at any time as described in Section 9.
5. Analytics cookies
With your consent, we use analytics cookies to understand how visitors use grendova.world so that we can improve the site's content and performance. These cookies are set by Google Analytics 4, provided by Google Ireland Limited, and are named _ga, which is retained for up to thirteen months, and _ga_<container-id>, which is also retained for up to thirteen months, in line with current guidance from the Information Commissioner's Office on appropriate cookie lifespans. The information collected is aggregated and reported to us in a form that does not usually identify you individually, and it is used solely to understand visitor numbers, popular pages, and general site performance; it is not used to build a marketing profile of you. These cookies are placed only after you actively consent through our cookie banner, and if you decline them or later withdraw consent, they are not set or are removed on your next visit.
6. Marketing cookies
Marketing cookies would be used to make advertising more relevant to you across other websites and platforms; at present we do not run third-party advertising campaigns that place such cookies, but our cookie banner includes a marketing category so that if this changes in future, you retain full control over whether such cookies are set. If marketing cookies are activated, we will update this policy with their specific names, providers and lifespans before they are used, and they will always require your prior consent. You will never be prevented from placing an order simply because you have declined marketing cookies.
7. Legal basis for cookies
Strictly necessary cookies are used on the basis that they are required to provide the online service you request when you visit our website, consistent with the exemption available under Regulation 6(4) of PECR. All other cookies described in this policy, including preference, analytics and any future marketing cookies, are used only with your consent under Regulation 6 of PECR and, to the extent they involve personal information, Article 6(1)(a) of the UK GDPR. You are asked to make an active choice through our cookie banner the first time you visit, and you may change that choice at any time as described in Section 9.
8. Third parties involved
Some of the cookies on our site are set by external service providers rather than by Grendova directly. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, sets analytics cookies as described in Section 5 under its own privacy notice, available at policies.google.com/privacy, in addition to the arrangements described in this policy. Our website hosting provider, Amazon Web Services EMEA SARL, does not itself set cookies on your device but processes the underlying website traffic that cookies may relate to. We enter into data processing agreements with each third party that sets cookies on our site to ensure that any personal information involved is handled in line with UK data protection law.
9. How to control cookies
You can view and change your cookie choices for grendova.world at any time by selecting the Cookie Settings link found in the footer of every page, which opens a panel allowing you to switch analytics and marketing cookies on or off; strictly necessary cookies cannot be disabled through this panel because they are required for the site to function. You can also control cookies through your browser settings, which typically allow you to see what cookies are stored, delete them individually or in bulk, and block cookies from being set in future, although blocking all cookies, including necessary ones, is likely to affect your ability to submit an order request. Guidance on managing cookies is available for most browsers directly from the browser manufacturer, including Google Chrome, Apple Safari, Mozilla Firefox and Microsoft Edge.
10. Retention and review of consent
Your recorded cookie consent, stored in the grendova_consent cookie described in Section 3, is retained for six months, after which it expires and you will be asked to make your choice again the next time you visit, ensuring that your preferences remain current. Preference cookies are retained for up to twelve months as described in Section 4, and analytics cookies for up to thirteen months as described in Section 5, both consistent with published Information Commissioner's Office guidance on reasonable cookie lifespans. We review the cookies placed through grendova.world at least once every twelve months to confirm that each one remains necessary and proportionate, and to remove any cookie that is no longer in active use.
11. International transfers relating to cookies
Where a cookie is set by a provider whose parent company is established outside the United Kingdom or the European Economic Area, such as Google LLC in the United States, information collected through that cookie may be processed outside the UK. In those cases we rely on the safeguards described in our Privacy Policy, including reliance on the UK Extension to the EU-US Data Privacy Framework where applicable, or standard contractual clauses adapted for UK use, to ensure that your information continues to receive an appropriate level of protection wherever it is processed.
12. Complaints about our use of cookies
If you have a concern about how we use cookies on grendova.world, please contact us at [email protected] or by telephone on +44 29 2089 4506 during office hours of Monday to Friday, 9:00 to 17:30, and we will acknowledge your query within five working days and provide a full response within thirty calendar days. If you remain unsatisfied with our response, you may raise the matter with the Information Commissioner's Office at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, or online at ico.org.uk, as the supervisory authority responsible for enforcing PECR and UK data protection law.
13. Changes to this policy
We may update this Cookie Policy from time to time as our use of cookies changes or as guidance from regulators evolves, and the version published on grendova.world is always the current version. Where we introduce a new category of cookie, such as marketing cookies, we will update the relevant section of this policy and, where required, seek fresh consent through our cookie banner before that cookie is set.
14. Revision and change log
14 January 2025 — initial Cookie Policy published alongside the grendova.world launch, describing necessary and preference cookies only. 3 June 2025 — added the analytics cookie category following the introduction of Google Analytics 4, with initial lifespan guidance. 22 September 2025 — reviewed cookie lifespans against updated Information Commissioner's Office guidance and adjusted the retention period recorded for the consent cookie. 11 August 2026 — added named cookies with specific lifespans throughout this policy, added the marketing cookie placeholder category, and expanded the international transfers section.