Hendler Wholesale Ltd
www.hendler.co.uk
Cookies Policy
This Cookies Policy explains how Hendler Wholesale Ltd ("we", "us", "our") uses cookies and similar technologies on our website.
This policy is intended to comply with the UK GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
1. What Cookies Are
Cookies are small text files stored on your device when you visit a website. Some are required for core functionality, while others are optional and need your consent.
2. How We Use Cookies
We currently use cookies for:
secure sign-in and session management;
security and bot protection;
storing your cookie preference choices.
We do not currently use analytics or advertising cookies in this website application.
3. Legal Basis
Strictly necessary cookies are used under PECR's "strictly necessary" exemption and, where personal data is processed, under UK GDPR Article 6(1)(f) (legitimate interests) and/or Article 6(1)(b) (contract, where applicable).
Non-essential cookies (if introduced in future) will only be set after consent under PECR and UK GDPR Article 6(1)(a).
4. Cookie List (Current)
| Cookie Name | Provider | Type | Purpose | Duration |
|---|---|---|---|---|
| hendler_cookie_consent | Hendler Wholesale Ltd (first-party) | Strictly necessary | Stores your cookie consent preference (for example, essential-only or all). | 1 year |
| hendler_session | Hendler Wholesale Ltd (first-party) | Strictly necessary | Customer authentication session cookie used to keep signed-in users authenticated. | Configured session duration (typically hours; max-age set server-side) |
| hendler_session_expires_at | Hendler Wholesale Ltd (first-party) | Strictly necessary | Stores customer session expiry timestamp so the site can handle timed sign-out correctly. | Session duration plus 10 minutes |
| hendler_session_duration_hours | Hendler Wholesale Ltd (first-party) | Strictly necessary | Stores customer session length metadata used by session expiry handling. | Session duration plus 10 minutes |
| hendler_admin_session | Hendler Wholesale Ltd (first-party) | Strictly necessary | Admin authentication session cookie for secure staff/admin access. | 10 hours |
| hendler_admin_session_expires_at | Hendler Wholesale Ltd (first-party) | Strictly necessary | Stores admin session expiry timestamp for session timeout handling. | 10 hours plus 10 minutes |
| hendler_admin_session_duration_hours | Hendler Wholesale Ltd (first-party) | Strictly necessary | Stores admin session length metadata used by session expiry handling. | 10 hours plus 10 minutes |
| admin_auth_state | Hendler Wholesale Ltd (first-party) | Strictly necessary | Short-lived OAuth login state/PKCE cookie used during secure admin sign-in to prevent CSRF and complete login flow. | 10 minutes (deleted after callback) |
| hendler_hv | Hendler Wholesale Ltd (first-party) | Strictly necessary | Short-lived human-verification cookie used for abuse prevention on search/part-finder flows after successful challenge. | 30 minutes |
| _GRECAPTCHA | Google (third-party) | Strictly necessary security (when reCAPTCHA is enabled) | Used by Google reCAPTCHA to help distinguish human users from bots on protected forms. | Set by Google; duration determined by Google |
| Cloudflare Turnstile cookies (name may vary, for example provider-managed challenge cookies) | Cloudflare (third-party) | Strictly necessary security (when Turnstile is enabled) | Used by Cloudflare Turnstile challenge/verification to prevent automated abuse. | Set by Cloudflare; duration determined by Cloudflare |
5. Cookie Attributes And Security
Where supported, our authentication/security cookies are set with appropriate safeguards such as HttpOnly, Secure (in production), SameSite, and path restrictions.
6. Analytics And Advertising
We do not currently deploy analytics or advertising cookie technologies in this website application. If that changes, we will update this policy and request consent before setting non-essential cookies.
7. Managing Cookies
You can manage non-essential cookie preferences using our cookie controls where shown.
You can also block or delete cookies through your browser settings. Please note that blocking strictly necessary cookies may prevent parts of the website from functioning correctly.
8. Third-Party Processing And International Transfers
Security providers such as Google and Cloudflare may process data (including device and network information) under their own privacy notices and may process data outside the UK. Where required, appropriate transfer safeguards are used in line with UK data protection law.
9. Contact
If you have any questions about this Cookies Policy, please contact sales@hendler.co.uk or use our contact form.
10. Updates
We may update this policy from time to time. The latest version will always be published on this page.
This policy was last updated on 08/07/2026.