Cookies Notice
How Kintro Ltd uses cookies and similar technologies.
00Version history
| Version | Date | Author | Changes |
|---|---|---|---|
| 1.0 | 14 May 2026 | Munene Njogu (CTO) | Initial Kintro Cookies Notice. Anchored on PECR Regulation 6, UK GDPR Article 7 consent standard and ICO guidance on cookies and similar technologies. |
01About this Notice
Kintro Ltd ("Kintro", "we", "us") uses cookies and similar technologies on our website (kintro.money), in our mobile and web apps, and in the emails we send. This Notice explains what those technologies are, why we use them, and how you can control them.
This Notice supplements our Privacy Policy (KIN-DPA-002), which describes how we process personal data in general.
02What are cookies and similar technologies?
A cookie is a small text file stored on your device when you visit a website. Similar technologies include software development kits (SDKs) and pixels in mobile apps, browser local storage, and tracking pixels in emails. We refer to all of these as "cookies" in the rest of this Notice.
Cookies can be:
- First-party cookies — set by Kintro.
- Third-party cookies — set by another organisation we have chosen to work with.
- Session cookies — deleted when you close your browser or app.
- Persistent cookies — kept until they expire or you delete them.
03The categories of cookies we use
We group cookies into four categories. The table below describes what each category does and the lawful basis we rely on.
| Category | What it does | Lawful basis |
|---|---|---|
| Strictly necessary | Essential to deliver the Service — keeping you signed in, holding the contents of your basket, remembering your security session, and protecting against fraud and abuse. | Necessary for the service you have requested (Regulation 6(4)(b) PECR — exempt from consent) |
| Functional | Remembers preferences you have set — language, region, accessibility settings, last-used screen. | Your consent (Regulation 6(1) PECR; Article 6(1)(a) UK GDPR) |
| Analytics | Helps us understand how the Service is used, so we can improve it — page views, feature use, where customers drop off in a flow. | Your consent |
| Marketing | Helps us measure marketing campaigns and, where you have agreed, show you relevant content on other websites and apps. | Your consent |
04How we obtain your consent
The first time you visit our website, a cookie banner asks you to choose whether to accept functional, analytics and marketing cookies. You can:
- Accept all categories.
- Reject all categories that need your consent (strictly necessary cookies will still be set because they are essential).
- Make granular choices by category.
Your choices are recorded and applied across our website. You can change them at any time at kintro.money/legal/cookies or in the in-app Settings → Privacy menu. Rejecting is as easy as accepting and your choice is honoured immediately.
Inside the Kintro mobile and web apps, we ask separately for any optional cookie or SDK whose lawful basis is consent. Strictly necessary technologies needed to run the app may operate without consent under PECR Regulation 6(4)(b).
05The specific cookies we use
The table below lists the cookies and similar technologies currently in use. We review it regularly and the latest version is always at kintro.money/legal/cookies.
| Name | Provider | Category | Purpose | Lifetime |
|---|---|---|---|---|
| kintro_session | Kintro (first party) | Strictly necessary | Maintains your signed-in session | Session |
| kintro_csrf | Kintro (first party) | Strictly necessary | Protects against cross-site request forgery | Session |
| kintro_consent | Kintro (first party) | Strictly necessary | Records your cookie preferences | 12 months |
| kintro_locale | Kintro (first party) | Functional | Remembers your language and region setting | 12 months |
| kintro_a11y | Kintro (first party) | Functional | Remembers your accessibility preferences (e.g. larger text) | 12 months |
| _ga / _ga_* | Google Analytics 4 | Analytics | Measures aggregate use of our website and apps | Up to 24 months |
| _fbp | Meta (Facebook) | Marketing | Measures the effectiveness of advertising on Meta platforms (only set if you accept) | Up to 3 months |
| __Host-* (anti-fraud) | Kintro and fraud-prevention partner | Strictly necessary | Detects automated and abusive use | Session to 90 days |
We will update this list when we add, change or remove a cookie. The Document code, Version and Date on the title page indicate the current version.
06International transfers
Some of our analytics and marketing providers process data outside the UK. Where they do, we use one of the safeguards described in our Privacy Policy (KIN-DPA-002) Section 14 — for example UK adequacy, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
07Browser and device controls
You can also control cookies through your browser or device settings — for example by blocking all cookies, blocking third-party cookies, or deleting cookies. Doing so may stop parts of the Service from working as intended. Helpful links:
- Chrome: support.google.com/chrome/answer/95647
- Safari: support.apple.com (search for 'cookies')
- Firefox: support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Edge: support.microsoft.com (search for 'cookies')
You can also opt out of advertising tracking on most operating systems by enabling 'Limit Ad Tracking' (iOS) or 'Opt out of Ads Personalisation' (Android).
08Changes to this Notice
We may update this Notice. When we do, we will update the Date on the title page and, where the change is material, surface a fresh consent banner so you can review your preferences.
09Contact and Complaints
If you have questions, contact privacy@kintro.money. If you are not happy with how we handle cookies, you also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.
Document Control
| Field | Value |
|---|---|
| Document code | KIN-LEG-005 |
| Title | Cookies Notice |
| Version | 1.0 |
| Status | Draft for Review |
| Classification | Public |
| Owner | Munene Njogu (CTO, acting Data Protection Lead) |
| Review cycle | Annually, or on any material change to the business, the Principal arrangement, applicable law or supervisory guidance |
| Related documents | KIN-DPA-002 Privacy Policy; KIN-DPA-001 Data Protection Policy; KIN-LEG-001 Terms and Conditions |