| Cookie / Tool | Type | Category | Purpose |
| woocommerce_cart_hash / woocommerce_items_in_cart / wp_woocommerce_session_* | First party, session | Strictly Necessary | Enables the Box Shop cart and checkout process. |
| PayPal cookies (set on redirect during checkout) | Third party, session | Strictly Necessary | Required to complete payment when checking out via PayPal. |
| Ninja Forms session/nonce cookie | First party, session | Functional | Enables secure submission of the Quote, Meeting Room, Office, and Desk enquiry forms. |
| RapidStor (R6 Storable) — embedded via script for “View Price Online” | Third party, unconfirmed | Functional | Powers the online pricing tool. Exact cookies not yet confirmed — needs technical review of the embedded script. |
| Google Analytics (_ga, _ga_<container-id> if GA4; _utma/_utmb/_utmc/_utmz if legacy UA) | First party, persistent | Analytics | Visitor behaviour tracking. Version (GA4 vs. legacy Universal Analytics) needs confirmation. |
| Meta/Facebook Pixel (_fbp, fr) | Third party, persistent | Advertising | Tracks conversions from Facebook/Instagram ads and enables retargeting. |
| Google Ads / Tag Manager (_gcl_au, _gac_*) | Third party, persistent | Advertising | Tracks conversions from Google Ads and enables remarketing. |
| YouTube (VISITOR_INFO1_LIVE, YSC, PREF) | Third party, persistent/session | Third-Party Embedded Content | Set when embedded videos are viewed on the site. |
| Google Maps (NID and similar) | Third party, persistent | Third-Party Embedded Content | Set when location-page maps are embedded. |
| Social share/follow buttons (Facebook, Instagram, LinkedIn) | Third party, varies | Third-Party Embedded Content | May set cookies if you are logged into the relevant social platform while browsing. |