Cookie Policy
1. Why this policy exists
When you visit burgerboi.co.uk or use the Burger Boi app, small files and similar technologies are stored on or read from your device. Some of them are essential. Others help us understand how the site is used, or show you our adverts elsewhere on the internet.
UK law says we have to tell you clearly what those technologies do, and — for most of them — ask your permission before we use them. This policy is how we do that.
It should be read alongside our Privacy Policy, which explains what we do with the personal information these technologies generate, and our Terms & Conditions.
2. Who we are
Burger Boi is a trading name of Burger Boi Franchise Limited, a company registered in England and Wales (company number 13801940), registered office 1 George Street, Wolverhampton, England, WV2 4DG.
For anything about cookies or your preferences, contact privacy@burgerboi.co.uk.
3. What cookies and similar technologies are
A cookie is a small text file that a website asks your browser to store. When you come back, the site can read it and remember something — that you are signed in, that you dismissed a banner, that you have visited before.
Cookies are described by who sets them:
- First-party cookies are set by burgerboi.co.uk itself.
- Third-party cookies are set by another company whose code runs on our pages.
And by how long they last:
- Session cookies are deleted the moment you close your browser.
- Persistent cookies stay on your device for a set period, which we list in the tables below.
We also use technologies that are not strictly cookies but do a similar job, and which the law treats the same way:
| Technology | What it is |
|---|---|
| Tracking pixels and web beacons | A tiny invisible image or script that tells a third party that a page was loaded or an action taken |
| Local storage and session storage | Browser storage that holds more data than a cookie and is not sent with every request; used by our forms and page scripts |
| Software development kits (SDKs) | Third-party code inside our mobile app that reports app events and crashes |
| Mobile advertising identifiers | A resettable ID on your phone — Apple’s IDFA or the Google Advertising ID — that can be used for advert measurement |
| Embedded content | Iframes and scripts from other services, such as our sign-up forms, which can set their own cookies |
Throughout this policy, “cookies” means all of the above.
4. The law we follow
Cookies in the UK are governed by two overlapping sets of rules:
- the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), which control the act of storing or reading information on your device; and
- the UK GDPR and Data Protection Act 2018, which control what we then do with any personal data involved.
Both were amended by the Data (Use and Access) Act 2025, whose main provisions came into force on 5 February 2026. Two changes matter here.
New consent exemptions, set out in Schedule A1 to PECR. Consent is no longer needed for three additional purposes:
- statistical cookies — collecting information about how the site is used with a view to making improvements to it, where that information is not shared with anyone else except to help us make those improvements;
- appearance and functionality cookies — adapting how the site looks or works to your preferences; and
- emergency assistance cookies — for example passing location data when emergency assistance is requested.
For the first two we must still tell you clearly what we are doing and give you a free and simple means of objecting.
Much larger penalties. The maximum PECR fine rose from £500,000 to, for the most serious contraventions including the cookie rules in regulation 6, £17,500,000 or 4% of total annual worldwide turnover in the preceding financial year, whichever is higher, matching UK GDPR levels. Other PECR contraventions carry a standard maximum of £8,700,000 or 2%.
What has not changed: cookies used for advertising, retargeting, advert measurement or profiling, or where information is shared with a third party for that third party’s own purposes, still require your prior, freely given, specific, informed and unambiguous consent.
The statistical exemption is narrower than “analytics” in general — it covers using the data to improve the site, and it does not permit sharing the data with a provider for that provider’s own purposes. Because most analytics platforms involve the provider using data to some degree for itself, we take the cautious route and ask for your consent for analytics cookies as well. If you would rather not give it, the site still works.
5. How we ask for your consent
The first time you visit burgerboi.co.uk you will see a cookie banner. From it you can:
- accept all non-essential cookies;
- reject all non-essential cookies — this is as easy and as prominent as accepting, because the ICO requires it to be; or
- manage your preferences and switch individual categories on or off.
We follow these principles:
- Nothing non-essential fires before you choose. Advertising and analytics scripts are blocked until you consent.
- No pre-ticked boxes. Non-essential categories default to off.
- No cookie walls. You can browse the whole site, read the menu and find a restaurant without accepting anything.
- No nagging. We remember your choice and will not re-ask for at least six months, unless we add a new purpose or you clear your cookies.
- Withdrawal is as easy as consent. Use the Cookie settings link in the footer at any time.
- We keep a record of what you consented to and when, because PECR requires us to be able to demonstrate consent.
The Cookie settings panel always shows the current, live list of cookies in use on the site, with their names and durations. The tables below describe them by category, and the panel is the definitive list at any given moment.
6. Strictly necessary cookies — no consent needed
These are required for the site to work and to stay secure. They are exempt from consent under PECR because you cannot have the service without them. You cannot switch these off through our banner, though your browser settings will let you block them, at the cost of parts of the site breaking.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| PHPSESSID | burgerboi.co.uk | Maintains your session state across pages | Session |
| wordpress_test_cookie | burgerboi.co.uk | Checks whether your browser accepts cookies | Session |
| wordpress_logged_in_* | burgerboi.co.uk | Identifies a signed-in site administrator; set only for our own team | Session, or 14 days with “Remember Me” |
| wp-settings-*, wp-settings-time-* | burgerboi.co.uk | Remembers administrator interface preferences; our team only | 1 year |
| Consent preference cookie | Our consent management platform | Stores your cookie choices so that we can honour them and demonstrate consent | 1 year |
| Security and anti-abuse cookies | Our web host and firewall | Rate limiting, bot filtering and fraud prevention | Session to 1 year |
| Load balancing cookies | Our hosting provider | Routes your request to a working server | Session |
The Data (Use and Access) Act 2025 expressly confirms that cookies for authentication, fault detection and fraud prevention fall within the strictly necessary exemption.
7. Statistical and analytics cookies
These tell us how many people visit, which pages and menu items get attention, which locations people search for, how visitors arrive, and where the site is slow or broken. It is how we decide what to fix and what to promote.
They are not used to identify you personally, and we do not use analytics data to make decisions about individuals.
Our analytics provider sets cookies such as the following:
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes one visitor from another | 2 years |
| _ga_* | Maintains session state for the analytics property | 2 years |
| _gid | Distinguishes visitors within a 24-hour window | 24 hours |
| _gat | Throttles the rate of requests | 1 minute |
We configure analytics conservatively: IP addresses are anonymised, advertising and cross-device features are switched off, and data retention is set to the shortest practical period. Our analytics provider acts as our processor and may transfer data outside the UK under the safeguards described in our Privacy Policy.
Your control. Switch this category off in our Cookie settings panel. Turning analytics off does not affect anything you can see or do on the site.
8. Advertising and marketing cookies — consent always required
These are used to show you Burger Boi adverts on other platforms, to avoid showing you the same advert repeatedly, and to measure whether an advert actually led to a visit or an order. They involve sharing information with third parties for their own advertising purposes, which means we need your consent and no exemption applies.
| Cookie or technology | Set by | Purpose | Duration |
|---|---|---|---|
| Meta Pixel (_fbp) | Meta Platforms Ireland Ltd | Records that you visited our site so that we can show you Burger Boi adverts on Facebook and Instagram, build similar audiences, and measure advert performance | 3 months |
| fr | Meta / facebook.com | Delivers and measures adverts on Meta platforms | 3 months |
| _fbc | burgerboi.co.uk | Stores the click ID from a Facebook advert so that a visit can be attributed to it | 3 months |
| Social platform pixels | Meta, TikTok and similar platforms where we run campaigns | Measures advert performance and builds audiences on that platform | Up to 13 months |
| Social embed cookies | Facebook, Instagram, TikTok | Set when a social feed, video or share button loads on our pages | Varies by platform |
About the Meta Pixel. Our site carries a Meta Pixel, which reports page views and certain other events to Meta. Meta uses that information both for us and for its own purposes, which means Meta is a joint controller with us for parts of that processing. Meta’s own Cookies Policy and Privacy Policy explain what it does with the data.
Your control.
- Switch the marketing category off in our Cookie settings panel, and these technologies will not fire.
- Adjust what Meta shows you in Facebook Settings → Ads → Ad preferences and Instagram Settings → Ads.
- Opt out of interest-based advertising from many companies at once at youronlinechoices.com/uk and optout.aboutads.info.
Opting out means you will still see adverts. They will just be less relevant to you.
9. Appearance and functionality cookies
These remember choices you make so that the site behaves the way you expect.
| Purpose | Set by | What it remembers | Duration |
|---|---|---|---|
| Restaurant preference | burgerboi.co.uk | The location you last viewed, so that we can show its menu and opening hours first | Up to 6 months |
| Notice dismissal | burgerboi.co.uk | That you closed a promotional or informational banner, so that it does not reappear | Up to 30 days |
| Display and accessibility preferences | burgerboi.co.uk | Text size, contrast or reduced-motion settings, if you choose them | Up to 12 months |
Under Schedule A1 to PECR, as inserted by the Data (Use and Access) Act 2025, cookies that adapt the appearance or functionality of a service to your preferences no longer require consent, provided we tell you about them clearly — which is what this section does — and give you a free and simple means of objecting. You can object through the Cookie settings link in our footer, or by blocking cookies in your browser. If you do, the site will still work; it will simply forget your choices between visits.
10. Third-party embedded content and forms
Our sign-up and franchise enquiry forms are hosted by HighLevel (api.leadconnectorhq.com) and embedded in our pages. When one of those forms loads, HighLevel may set cookies or use local storage to make the form work, prevent spam submissions, and attribute the submission to the page you came from. Data you submit is handled as described in our Privacy Policy.
Other embedded content. If we embed a video, map, social feed or review widget, that provider can set its own cookies as though you had visited its site directly. We block non-essential embeds until you consent where we can, but we do not control what these providers do once loaded, and we recommend reading their own cookie notices.
Links to Uber Eats and the app stores. Following a link to Uber Eats, the Apple App Store or Google Play takes you onto their platforms, where their cookie and privacy practices apply, not ours.
11. Cookies and identifiers in the Burger Boi app
Mobile apps do not use browser cookies, but they use equivalent technologies. The Burger Boi app is built on the Food2Go platform, operated for us by Arkitec Software Ltd.
The app may use:
- local storage, to keep you signed in, hold your basket and cache the menu so that it loads quickly;
- a device identifier, to link your device to your account, deliver push notifications and prevent fraudulent use of promotions;
- crash and performance diagnostics, so that we can fix bugs;
- your device’s advertising identifier (Apple IDFA or Google Advertising ID), only where you have allowed tracking; and
- location data, only where you have granted the permission, to find your nearest restaurant and calculate delivery.
Your control in the app.
- iOS: Settings → Privacy & Security → Tracking, and Settings → Privacy & Security → Location Services.
- Android: Settings → Privacy → Ads → Delete advertising ID, and Settings → Apps → Burger Boi → Permissions.
- Push notifications can be turned off in your device notification settings or in the app.
- Deleting the app removes locally stored data. To delete your account and the data held on our systems, use the in-app option or email privacy@burgerboi.co.uk.
12. Managing cookies in your browser
Your cookie choices with us are the quickest route, but you can also control cookies at browser level — including blocking all cookies, blocking third-party cookies only, deleting existing cookies, and browsing in private mode.
| Browser | Where to look |
|---|---|
| Google Chrome | Settings → Privacy and security → Third-party cookies |
| Safari (macOS) | Safari → Settings → Privacy |
| Safari (iOS and iPadOS) | Settings → Apps → Safari → Privacy & Security |
| Microsoft Edge | Settings → Cookies and site permissions |
| Mozilla Firefox | Settings → Privacy & Security → Cookies and Site Data |
| Opera | Settings → Privacy & security |
| Samsung Internet | Settings → Sites and downloads → Manage cookies |
Two things worth knowing:
- Blocking all cookies will break parts of most websites, including ours — the restaurant finder and our forms in particular.
- Deleting cookies also deletes your opt-outs, because an opt-out is itself stored in a cookie. You will see our banner again and will need to set your preferences afresh.
Many browsers can also send a “Do Not Track” or Global Privacy Control signal. There is no agreed UK standard requiring websites to honour Do Not Track, and we do not rely on it. Your choices in our Cookie settings panel are what we act on.
13. What happens if you say no
Nothing punitive. To be explicit:
| If you reject | You can still | You will lose |
|---|---|---|
| Analytics cookies | Do everything on the site | Nothing you can see. We simply see less about how the site is used. |
| Marketing cookies | Do everything on the site | The relevance of any Burger Boi adverts you happen to see elsewhere |
| Appearance cookies | Do everything on the site | Remembered preferences, such as your usual restaurant |
| Strictly necessary cookies, via your browser | Read static pages | Our forms, the restaurant finder and other session-dependent features will fail |
We do not restrict content, degrade the experience, or charge you for refusing consent.
14. Changes to this policy
Cookies change whenever we add a tool, update the website or update the app, so we review this policy at least every six months and after any significant change to the site.
The “Last updated” date at the top shows the current version. If we introduce a new purpose for which we need your consent, we will ask you again through the banner rather than relying on a permission you gave for something else.
15. Contact and complaints
For anything about cookies, tracking or your preferences, email privacy@burgerboi.co.uk or write to Data Protection Enquiries, Burger Boi Franchise Limited, 1 George Street, Wolverhampton, WV2 4DG.
If you are not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO), which regulates both PECR and the UK GDPR:
- ico.org.uk/make-a-complaint
- Helpline: 0303 123 1113
- Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF