Last updated: 7 August 2026

Cookie Policy for UNO Water

This policy explains which cookies and similar technologies we use on unowater.pl and throughout the checkout process, why we use them, on what legal basis, and how you can control them. We follow the Polish Electronic Communications Law (PKE) and the GDPR, in plain language wherever we can.

1. Who we are

The controller of your personal data is UNO WATER sp. z o.o., registered at ul. Flory 9 lok. 10, 00-586 Warsaw, Poland, entered in the Register of Entrepreneurs of the Polish National Court Register (KRS) under number 0001240293, Tax ID (NIP) 7011313315, Business Registry No. (REGON) 544716674 — referred to below as “UNO Water”, “we”, “us”.

Privacy contact: contact@unowater.pl

This policy explains which cookies and similar technologies we use on unowater.pl and throughout the checkout process, why we use them, on what legal basis, and how you can control them.

2. What cookies are

Cookies are small text files stored on your device by your browser. They let a site recognise your browser on your next visit and remember the choices you made.

Alongside cookies we use other technologies that work in a similar way:

  • localStorage and sessionStorage — browser storage where we keep, among other things, your cart identifier;
  • pixels and tags — invisible page elements that record a page view;
  • third-party SDKs and scripts.

Throughout this policy we treat all of these together and refer to them simply as “cookies”.

4. Categories of cookies we use

4.1. Strictly necessary — always on

The site and shop will not work without these. They cannot be switched off in our settings panel, though you can block them in your browser — the site will then stop working properly.

Name
Provider
Purpose
Retention
__cf_bm
Cloudflare (for Webflow)
Distinguishing human traffic from bots, attack protection
30 minutes
_cfuvid
Cloudflare
Distinguishing requests within security rate limits
Session
wf-csrf, wf-csrf.sig
Webflow
Protecting forms against CSRF attacks
Session
uno_lang
UNO Water
Remembering your chosen language (PL / EN)
12 months
uno_cart / cartId
UNO Water / Shopify
Your cart identifier; without it the cart loses its contents
Until you clear browser data
_shopify_essential
Shopify
Session and data required for the store and checkout to function
12 months
cart, cart_currency
Shopify
Cart contents and currency
14 days
localization
Shopify
Matching the cart to your delivery country
12 months
discount_code
Shopify
Preserving a discount code passed in a link
Session
_tracking_consent
Shopify
Remembering your privacy choices
12 months
_shopify_test
Shopify
Checking whether your browser supports cookies
1 minute
shopify_pay
Shopify
Shop Pay payment support
12 months
[CMP cookie name]
[CMP provider]
Remembering your cookie decision
12 months

4.2. Functional — with consent

These remember your preferences and enable extra features. Without them you can still shop, but the experience is less convenient.

Name
Provider
Purpose
Retention
__kla_id
Klaviyo, Inc.
Linking newsletter sign-up and on-site activity to your profile; abandoned-cart reminders
2 years

4.3. Analytics — with consent

These show us how many people visit, where they come from, which pages they read and where they drop off. They tell us what works on the site and what needs fixing. We analyse this data in aggregate.

Name
Provider
Purpose
Retention
_ga
Google Ireland Ltd. / Google LLC
Distinguishing users in Google Analytics 4
2 years
_ga_[ID]
Google
Maintaining session state in GA4
2 years
_shopify_y
Shopify
Store analytics — visitor identifier
12 months
_shopify_s
Shopify
Store analytics — session identifier
30 minutes
_shopify_analytics, shop_analytics
Shopify
Statistics on interaction with our offer
12 months
_landing_page
Shopify
Recording your entry page
14 days
_orig_referrer
Shopify
Recording your traffic source
14 days
_clck
Microsoft Corporation
Microsoft Clarity — user identifier, heatmaps
12 months
_clsk
Microsoft
Clarity — joining page views into one session
1 day
CLID, ANONCHK, MR, MUID, SM
Microsoft
Clarity — session recordings and device identification
1 day to 13 months

Session recordings (Microsoft Clarity). We record anonymous playback of cursor movement, scrolling and clicks so we can see where the site causes difficulty. Form field contents, email addresses and payment details are automatically masked and never appear in recordings.

4.4. Marketing — with consent

These let us measure how our advertising performs and show you more relevant content on Facebook, Instagram and across Google’s network. Without them you will still see ads — they will simply be less relevant.

Name
Provider
Purpose
Retention
_fbp
Meta Platforms Ireland Ltd.
Meta Pixel — browser identification for advertising and conversion measurement
90 days
_fbc
Meta
Recording a click on a Meta ad
90 days
fr
Meta (facebook.com domain)
Ad delivery and measurement
90 days
_shopify_marketing
Shopify
Marketing data for the cart and checkout
12 months
_gcl_au
Google
Google Ads — conversion measurement
90 days
IDE, test_cookie
Google (doubleclick.net domain)
Google ad personalisation and measurement
Up to 13 months

Meta Conversions API. In addition to the pixel, we send purchase events to Meta directly from our server. We do this only where you have consented to marketing cookies. Contact details are irreversibly hashed (SHA-256) before being sent.

5. Recipients and transfers outside the EEA

The providers listed above act as separate controllers or as processors. Some of them process data outside the European Economic Area:

Provider
Country
Transfer safeguard
Google Ireland Ltd. / Google LLC
Ireland / USA
European Commission decision of 10 July 2023 (EU–U.S. Data Privacy Framework) and Standard Contractual Clauses (SCC)
Meta Platforms Ireland Ltd. / Meta Platforms, Inc.
Ireland / USA
EU–U.S. Data Privacy Framework and SCC
Microsoft Corporation
USA
EU–U.S. Data Privacy Framework and SCC
Klaviyo, Inc.
USA
EU–U.S. Data Privacy Framework and SCC
Shopify Inc. / Shopify International Ltd.
Canada / Ireland
European Commission adequacy decision for Canada (2002/2/EC)
Webflow, Inc.
USA
EU–U.S. Data Privacy Framework and SCC
Cloudflare, Inc.
USA
EU–U.S. Data Privacy Framework and SCC

Current privacy policies for these providers are linked from our cookie settings panel.

7. Your rights

In relation to data processed through cookies, you have the right to:

  • access your data and receive a copy of it;
  • have your data corrected;
  • have your data erased (“right to be forgotten”);
  • restrict processing;
  • data portability;
  • withdraw consent at any time — without affecting the lawfulness of processing before withdrawal;
  • object to processing based on legitimate interest.

To exercise these rights, write to contact@unowater.pl.

You also have the right to lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland — uodo.gov.pl.

8. Changes to this policy

We may update this policy when we add or remove tools, or when the law changes. Every version carries a “last updated” date at the top. We will notify you of material changes by showing the consent banner again.