Legal
Cookies
What cookies BeautyZilla actually sets on this site, why, and how to change your mind at any time.
Cookiesv1.0effective
How BeautyZilla asks
When you first visit, a banner offers three equally weighted choices: "Accept all", "Reject non-essential" and "Manage", which opens a preference centre with one switch per category below. Nothing beyond the strictly necessary cookies runs until you allow its category. Your choice is recorded against the version of this policy you saw; if the policy changes materially we ask again.
We also signal your choice to Google's tag system using Consent Mode v2: before any tag loads, every non-essential storage type is set to "denied", and your decision updates those signals without a reload.
The cookies we actually set
Strictly necessary
Always on — the site can't function without these, so no consent choice applies to them (UK PECR regulation 6(4) exempts strictly necessary cookies from the consent requirement).
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
| bz_session | Keeps a salon owner or staff member signed in to the salon console. | Session, up to 30 days | First party |
| bz_consumer_session | Keeps a marketplace customer signed in to their account. | Session, up to 30 days | First party |
| bz_consent | Remembers which cookie categories you allowed, and which version of this policy you saw. | 180 days | First party |
| __stripe_mid | Stripe fraud prevention — set by Stripe.js on pages that take a card (deposits, gift cards). | 1 year | Stripe |
| __stripe_sid | Stripe fraud prevention — session-scoped companion to __stripe_mid. | 30 minutes | Stripe |
| bz_theme | Remembers the salon console's light/dark theme choice. | 1 year | First party |
| bz_nav_collapsed | Remembers whether the salon console's navigation rail is collapsed. | 1 year | First party |
| bz_operator_nav_collapsed | Remembers whether the operator cockpit's navigation rail is collapsed. | 1 year | First party |
| bz_active_tenant | Remembers which salon a signed-in owner with several salons is working in. | Session / 1 year | First party |
| bz_active_location | Remembers which branch a signed-in staff member is working in. | 1 year | First party |
Analytics
Only set once you allow the analytics category, and only for the vendors we have actually configured on this site at the time — you may see a subset of this list.
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
| _ga | Google Analytics 4 — distinguishes visitors so page views can be counted as sessions. | 2 years | |
| _ga_* | Google Analytics 4 — keeps session state for one GA4 property. | 2 years |
Marketing
Only set once you allow the marketing category, and only for the vendors we have actually configured on this site at the time — you may see a subset of this list.
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
| _fbp | Meta Pixel — measures and targets our own advertising on Facebook and Instagram. | 90 days | Meta |
| _ttp | TikTok Pixel — measures and targets our own advertising on TikTok. | 13 months | TikTok |
Third-party cookies
The analytics and marketing cookies above are set by third parties (Google, Meta, TikTok) once you allow their category — each vendor's own privacy policy governs how they use the resulting data beyond what we ask them to measure for us. We don't control those vendors' cookies directly, only whether their script loads on this site at all. The vendors, and what each processes, are also listed at /legal/subprocessors.
Your controls
You can control cookies in several ways, on top of our own banner:
- Use "Cookie preferences" in the footer of any page to change your choice per category at any time.
- Enable Global Privacy Control (GPC) in a supporting browser or extension — we honour it as an opt-out signal for analytics and marketing cookies, in line with US state privacy laws that require it.
- Block or delete cookies directly in your browser settings — note this may affect strictly necessary cookies too, which could sign you out or break booking flows.
Changes to this policy
If the cookies we set change — a new analytics tool, for example — we update the registry this table is generated from, bump the version shown at the top of this page, and ask for your choice again.
Version history
- Version 1.0Table generated from the cookie registry; three consent categories.