Cookie Policy

Website publication version | Version 1.1 | Effective date: 8 August 2026

ZARA9 LTD | Company No. 13663186 | www.zara9.com

This Cookie Policy explains how ZARA9 LTD uses cookies and similar storage or access technologies on www.zara9.com. It should be read together with our Privacy Policy.

1. What cookies and similar technologies are

Cookies are small data files stored on or read from your device. Similar technologies can include local storage, pixels, tags, scripts, device identifiers and other technologies that store information on, or access information from, a user’s device. In this policy, “cookies” includes these technologies where the same legal rules apply.

2. Website platform and our current approach

The Website is built using Hostinger Website Builder. Hostinger states that Website Builder sites do not use cookies by default; the cookies and tracking technologies used depend on the features and integrations enabled by the site owner.

ZARA9’s policy is that optional analytics and marketing technologies must not load before a valid visitor choice where consent is required. Hostinger’s current consent tool supports “Accept all”, “Reject all” and granular category choices, and conditionally loads supported analytics and marketing integrations according to the visitor’s selection.

At the effective date, ZARA9 has not intentionally enabled behavioural advertising or marketing-pixel integrations on the current pre-launch Website. This statement must be rechecked whenever the Website configuration changes.

3. Categories of cookies and similar technologies

3.1 Strictly necessary technologies

These technologies are required to deliver, secure or administer the Website, remember privacy choices, prevent abuse or enable a function specifically requested by the user. Where the law provides an exception, consent is not required, but we still provide information about the technology.

3.2 Preference and appearance technologies

These technologies remember choices such as language, display or accessibility preferences. We use any legal exception only where its conditions are met and otherwise request the required choice or consent.

3.3 Analytics and statistics technologies

These technologies help us understand Website usage and improve content or performance. We will normally request consent before using analytics unless a specific statutory exception clearly applies and all conditions for that exception are implemented.

3.4 Marketing technologies

These technologies may measure campaigns, build audiences or support personalised advertising. Where consent is required, they remain blocked unless you actively consent. Rejecting marketing technologies does not prevent access to the Website.

3.5 Embedded content

Third-party maps, videos, social-media content or other embedded services may store or access information on your device or receive technical information. Where required, embedded content that uses optional technologies will be blocked until you consent or choose to activate it.

4. Technologies that may be used on the current Website

The exact technology names, providers and durations depend on the live Website configuration. Subject to the deployment verification described above, the current Website may use the following types of technology:

4.1 Consent-preference technology

Provider: ZARA9 and/or Hostinger Website Builder. Purpose: remembers whether and how you responded to the cookie banner so that the Website can respect your choice. Duration: determined by the live consent configuration, generally for a limited period such as up to 12 months.

4.2 Hosting and security logs or storage

Provider: Hostinger and infrastructure providers. Purpose: delivers the Website, supports reliability, prevents misuse and records security events. Some functions may use server-side identifiers or logs rather than browser cookies. Duration: depends on the security and hosting function and is managed under applicable retention settings.

4.3 Cloudflare or comparable security technology, if activated

Provider: Cloudflare or another network-security provider used by the hosting environment. Purpose: content delivery, bot detection, security challenges and abuse prevention. Cookie names and durations depend on the specific security features enabled and must be confirmed from the live Website.

4.4 Form and anti-spam technology, if activated

Provider: Hostinger or another selected anti-abuse provider. Purpose: processes newsletter or enquiry submissions and helps prevent automated abuse. The live Website configuration determines whether a browser cookie is used and, if so, its duration.

4.5 Optional integrations

If ZARA9 later enables analytics, Hotjar, Google Analytics, Meta Pixel, advertising tags, social-media pixels, embedded media, booking, payment, investor data-room or other optional integrations, the consent platform and this policy must be updated before those technologies are activated where required.

5. Consent and your choices

Where consent is required, the Website should provide a genuine and freely given choice. “Accept all” and “Reject all” should be equally easy to find and use, optional categories should be off by default, and consent should be granular where appropriate. Closing or ignoring the banner is not treated as consent.

You can withdraw consent or change your choices at any time through the persistent “Cookie Settings” control in the Website footer. Withdrawal does not affect processing that was lawful before withdrawal, but the relevant optional technologies will be disabled for future use, subject to reasonable technical processing time.

6. Browser controls

Most browsers allow you to delete or block cookies and manage other Website data. Blocking all cookies may affect Website functionality and may not block every similar technology. Browser controls do not replace our obligation to obtain consent where the law requires it.

7. Third-party providers

Third-party providers may process information under their own privacy information as well as under contracts with us. We select and configure providers with data-minimisation, security and consent requirements in mind. A third-party integration must not be treated as approved for deployment merely because it is technically available in the Website Builder.

8. Changes to this Cookie Policy

We may update this Cookie Policy when technologies, providers, law, regulatory guidance or Website functionality changes. The effective date at the top shows the current version. We will re-check the Website configuration after any material integration or custom-code change and update this policy where necessary.

9. Contact

Questions about cookies or consent choices may be sent to pc@zara9.com with the subject line “Cookies”. You may also write to ZARA9 LTD, 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.