Cookie Policy

On your first visit you will see a banner headed “Cookies on RPS Bullion” with three equally prominent options: Accept all cookies, Reject all cookies and Manage cookies.

“Manage cookies” lets you switch Analytics and Marketing on or off independently. Essential cookies cannot be switched off, because the site cannot work without them — for example, we could not keep items in your basket or process your order.

Before you choose, our tags run in a blocked state using Google Consent Mode v2. Analytics storage, advertising storage, ad personalisation and advertising user data are all set to denied by default, and advertising data redaction is switched on. Only security storage is allowed, because it protects the site against fraud and abuse.

We record your choice in a cookie called rps_consent, which lasts 180 days. We keep that record whether you accept or refuse, so that refusing does not mean being asked again on every page. After 180 days we will ask you afresh.

If you refuse, or later withdraw consent, we also actively delete the analytics and marketing cookies already stored in your browser.

These are needed for the website and shop to function. They do not track you across other websites, and they are not used for advertising. Under PECR they do not require consent.

• rps_consent — remembers your cookie choices so we do not keep asking. Set by RPS Bullion. Lasts 180 days.
• wp_woocommerce_session_* — links your basket and checkout details to your browsing session. Set by WooCommerce. Lasts up to 48 hours.
• woocommerce_cart_hash and woocommerce_items_in_cart — tell the site when the contents of your basket have changed. Set by WooCommerce. Expire when you close your browser.
• tablesome_redirect_token — used when a form submission redirects you to another page. Expires with your session.
• wordpress_logged_in_* and wp-postpass_* — only set if you sign in to an account or open a password-protected page. They keep you signed in.
• PHPSESSID — a standard server session identifier used to hold short-lived state between pages. Expires when you close your browser.

These help us understand how people find and use the site — which pages are read, where visitors struggle, and which products get attention — so we can improve it. They are switched off unless you accept them.

Providers: Google (Google Analytics 4) and Microsoft (Clarity). We also use Amplitude for product analytics. Our tags are managed through Google Tag Manager (container GTM-5JF6PJ5).

• _ga and _ga_PG6QQQQR98 — distinguish one visitor from another for Google Analytics 4 (property G-PG6QQQQR98). Last up to 2 years.
• _gid — distinguishes visitors. Lasts 24 hours.
• _gat — limits how often data is sent to Google. Lasts about 1 minute.
• _clck, _clsk and CLID — Microsoft Clarity (project hj824oghbg), which records anonymised interaction data such as clicks and scrolling so we can see where a page is confusing. Last from one session up to 1 year.
• AMP_* — Amplitude, used to understand how features of the site are used. Last up to 1 year.

These measure whether our advertising works, and let us show relevant ads to people who have visited us. They are switched off unless you accept them. If you refuse, you will still see advertising elsewhere online — it just will not be based on your visit here.

Providers: Google Ads and Google’s DoubleClick advertising services (account AW-11187339403), and Amplitude.

• _gcl_au — Google Ads conversion linker. Records that you arrived from an ad so a later purchase can be attributed to it. Lasts about 90 days.
• __gads and __gpi — used by Google’s ad services to select and measure advertising. Last up to 13 months.
• AMP_MKTG_* — Amplitude marketing attribution. Lasts up to 1 year.
• sbjs_* — Sourcebuster, used by WooCommerce Order Attribution to record how a customer first reached the site before placing an order. Lasts up to 6 months.

If we run campaigns on other platforms in future, cookies such as _fbp and _fbc (Meta) or _uet* (Microsoft Advertising) may appear in this category. They are already covered by the same consent controls and are blocked and cleared in exactly the same way.

Google, Microsoft and Amplitude are based in the United States and may process data there or in other countries. These transfers are made under the UK Extension to the EU–US Data Privacy Framework where the recipient is certified, or otherwise under the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses, together with additional safeguards.

We have IP anonymisation enabled in Google Analytics, and we do not sell your personal information.

These transfers only happen if you have consented to the relevant category.

You can change your mind at any time, and it takes no more effort than giving consent did:

• Select Cookie settings in the footer of any page to reopen the preferences panel and switch categories on or off.
• Choose Reject all cookies to withdraw consent entirely. We will stop the relevant tags and delete the analytics and marketing cookies already stored.
• Delete the rps_consent cookie in your browser to reset your choice completely — the banner will appear again on your next visit.

Withdrawing consent does not affect anything lawfully done before you withdrew it.

Your browser also lets you block or delete cookies for every website. The current instructions are maintained by each browser:

• Google Chrome
• Safari
• Mozilla Firefox
• Microsoft Edge

Blocking all cookies will stop parts of this site working — in particular you will not be able to keep items in your basket, sign in, or complete a purchase, because those depend on the essential cookies listed above.

You can also opt out of Google Analytics across all websites using Google’s browser add-on.

If you have any questions about this policy, or you want to exercise your data protection rights, contact us at [email protected], call 020 7405 8000, or write to us at 108 The Broadway, Southall UB1 1QF.

Our Privacy Policy explains more about how we handle personal data generally.

If you are not satisfied with our response, you can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.