Cookie Policy

Cookie Policy 

Find out what cookies are and how they are used on our Shopify payment portal.  

Like many websites, the Shopify payment portal (the Service) use small files called cookies to help provide the best possible online experience for you. 

Below, we explain what cookies are, what they do, how we use them, and how you can view or change your cookie preferences. 

Who are we? 

The Shopify payment portal is managed by Historic Environment Scotland, the lead public body established to investigate, care for and promote Scotland’s historic environment. We’re a non-departmental public body (NDPB) with charitable status. 

We are committed to protecting your personal data and your privacy. Find out more about how we handle personal data in ourprivacy notice. 

What are cookies? 

Cookies are small pieces of text sent by your web browser on a website you visit. A cookie file is stored in your web browser and allows the Service or a third-party to recognise you.  

Cookies can be either "persistent" or "session" based. 

  • Persistent cookies continue to exist after you finish your website visit. They are eventually deleted, often after 6 months or longer. They are used to help the Service recognise when you return to the site; these cookies will remember key information about you, such as your site preferences. 

  • Session cookies are deleted automatically soon after you finish your website visit, usually within 30 minutes. They are used to help the Service remember the status of your current visit, for example, a session ID might be stored to ensure you remain logged in. 

You can remove cookies from your device at any time, and your device will automatically delete expired cookies. 

First-party cookies entail a small text file that is stored on your computer when you visit a specific domain (website) and which cannot be shared with others. These cookies are set directly by the Service and only the Service can read them. 

Cookies that do not originate from the Service are called ‘Third Party’ cookies. 

Such cookies are set by other digital services and are accessible by those services only. For example, if a webpage contains an embedded YouTube video, YouTube will set its own cookies to enable the video to work properly. 

Some cookies are set by services for advertising purposes. For example, an advertising platform may set a cookie that recognises the online journey a user has taken across different websites. The advertising partner may set or read the cookies on other websites/services and link the users’ activity on this Service. Third-party cookies are not set by the Service itself. 

How we use cookies 

We categorise cookies based on how they are used; this section will help you make broad choices about which cookies you set. 

Essential cookies 
 

These cookies let you use all the different yet essential parts of the Service. Without them, the Service cannot be providedTherefore, they are sometimes called “strictly necessary” cookies. 

For example, we use essential cookies to: 

  • remember your preferences (for example, whether you have given your consent for cookies to be set) 

  • remember security settings that affect access to certain content, for example, whether you are logged in, or for enabling consistent access to our web servers. 

  • enable certain essential services you need, such as a shopping cart 

 

The cookies we set 

 

Essential cookies 

 

 

Name 

Data stored 

Purpose 

Expires 

_landing_page 

 

URL of first page user visits; referrer URL, session ID and duration; Timestamp of arrival to site 

This cookie captures the landing page of visitor when they arrive from other websites. 

 

After 30 days 

_orig_referrer 

 

Referrer URL, session ID and duration; Timestamp of arrival to site 

 

This cookie allows the merchant to identify which websites or search engines users are arriving from.  

 

After 30 days 

_shopify_essential 

 

Session ID; User preferences 

 

This cookie contains essential information for the correct functionality of the payment portal. 

 

After 365 days 

_shopify_s 

 

Unique identifier; Timestamp; User activity during session; Card information 

 

This cookie is used to identify browser sessions and shop combination.  

 

After 1 day 

_shopify_sa_p 

 

User activity; Session ID and duration; Marketing data; Behavioural data 

 

This cookie tracks the landing page of users when they come from other websites. 

 

After 1 day 

_shopify_sa_t 

 

Conversion data; Session ID and duration; User activity; Marketing data 

 

This cookie tracks the landing page of users when they come from other websites. 

 

After 1 day 

_shopify_y 

 

Unique user identifier; Session ID and duration; User activity 

 

This cookie enables Shopify analytics to help us better under user behaviour and performance.  

 

After 365 days 

_tracking_consent 

 

Consent status; Timestamp; Consent preferences; Unique User ID 

 

This cookie is used to store a user's preferences. This is important if a merchant has set up privacy rules in the visitor's region. 

 

After 365 days 

cart_currency 

 

Currency code; Timestamp; Session ID and durations 

 

This cookie is used after a checkout process has been completed. It initialises a new empty cart with the same currency as the one just used. 

 

After 30 days 

checkout_session_lookup 

 

Session ID; Timestamp; Card information; User preferences; Security data 

 

This cookie us used in connection with the checkout process.  

 

After 30 days 

checkout_session_token__do <id> 

Session ID; Timestamp; Card information; User preferences; Security data 

 

This cookie us used when a checkout session is triggered on the server. 

 

After 30 days 

keep_alive 

 

Session ID; Timestamp; User activity; Security data 

 

This cookie is used when international domain redirects is enabled. This helps to determine if a user request is the first one of a session. 

 

After session 

localization 

 

Language code; Region code; Timestamp; User preferences 

 

This cookie us used to localise the cart to the correct country. 

 

After 365 days 

secure_customer_sig 

 

Customer signature; Session Information; Security data 

 

This cookie is used to identify a user after they sign into a shop as a customer. This ensures they do not need to log in again. 

 

After 365 days 

skip_shop_pay 

 

Preference status; Timestamp; Session ID and duration 

 

This cookie is used to manage user preferences related to the Shop Pay feature. 

 

After 365 days 

 

Managing your cookie settings 

On the Shopify payment portal, we only use Essential cookies.  

We aren’t responsible for the information or the setting of cookies on these external websites.