Cookie Policy (UK & EU) — Using Google Analytics 4 (GA4)
Last updated: 23rd March 2026
This Cookie Policy explains how Korto Restaurant (“we”, “us”, “our”) uses cookies and similar technologies on https://korto.co.uk/ (the “Website”). It applies to users in the United Kingdom and the European Economic Area (EEA) and is intended to comply with UK and EU cookie laws (including UK PECR and the ePrivacy rules) and data protection laws (the UK GDPR and EU GDPR).
This Cookie Policy should be read together with our Privacy Policy.
1) What cookies are
Cookies are small text files placed on your device (computer, phone, tablet) when you visit a website. Cookies help websites function, remember preferences, and collect information about how visitors use the site.
We also use similar technologies (e.g., local storage, pixels, SDKs). For simplicity, we refer to all of these as “cookies”.
2) Types of cookies we use
UK/EU law distinguishes between strictly necessary cookies (which do not require consent) and non-essential cookies (which generally require opt-in consent, including analytics cookies).
A) Strictly necessary cookies (always on)
These cookies are required for the Website to function and cannot be switched off in our systems. They are usually set in response to actions you take such as setting privacy preferences, logging in (if applicable), filling in forms, or load balancing/security.
Lawful basis: Necessary for providing the service you request; processed under our legitimate interests/contract as applicable, and exempt from cookie consent under PECR/ePrivacy where strictly necessary.
Examples:
- Security and fraud prevention cookies
- Load balancing cookies
- Cookie consent preference cookie (to remember your choice)
B) Analytics cookies (GA4) (optional)
These cookies help us understand how visitors use the Website (e.g., which pages are visited, how long people spend on pages, navigation patterns, approximate location). This helps us improve the Website.
We only set analytics cookies if you consent via our cookie banner/settings.
Analytics provider: Google (Google Analytics 4 / GA4)
Lawful basis: Consent (for setting/reading analytics cookies) + processing of personal data under consent/legitimate interests as applicable.
3) Google Analytics 4 (GA4) details
When enabled, GA4 may collect information such as:
- pages visited and interactions (e.g., scrolls, outbound clicks, site search if configured)
- device and browser information
- approximate location (derived from IP address)
- identifiers associated with cookies and/or your device
Important notes (customise as needed):
- GA4 is provided by Google Ireland Limited (EEA/UK), and data may be processed by Google LLC and other Google entities outside the UK/EEA.
- We configure GA4 to align with UK/EU requirements where possible (e.g., consent-based firing; retention controls in GA4; limiting data sharing options).
Learn more about Google’s practices:
- Google Privacy Policy: https://policies.google.com/privacy
- How Google uses information from sites/apps that use its services: https://policies.google.com/technologies/partner-sites
- Google Analytics: https://policies.google.com/technologies/partner-sites
4) Your choices and how to manage cookies
A) Cookie banner / settings
On your first visit (and periodically thereafter), you will see a cookie banner giving you the option to:
- Accept all cookies
- Reject non-essential cookies
- Manage preferences (enable/disable categories)
You can update your choices at any time via [Cookie Settings link].
B) Browser controls
Most browsers let you control cookies through settings, including deleting existing cookies. Blocking all cookies may affect Website functionality.
C) Google Analytics opt-out (optional)
You can also opt out of Google Analytics by installing Google’s browser add-on:
https://tools.google.com/dlpage/gaoptout
5) Cookies we use (list)
Below is a typical cookie list.
Strictly necessary cookies
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
| [cookie_consent] | [Website] | Stores your cookie preferences | [e.g., 6 months/1 year] |
| [security_cookie] | [Website/CDN] | Security / abuse prevention | [session/xx days] |
Analytics cookies (GA4) (set only with consent)
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Distinguishes users for analytics | Typically up to 2 years | |
_ga_<container-id> |
Persists session state for GA4 property | Typically up to 2 years |
Note: GA4 may also use additional cookies/identifiers depending on configuration and integration (e.g., Google Tag Manager).
6) International transfers
Where cookie-related data is transferred outside the UK/EEA (e.g., to the United States), we rely on appropriate safeguards such as:
- EU Standard Contractual Clauses (SCCs) and/or
- UK International Data Transfer Agreement (IDTA) / UK Addendum, and/or
- adequacy decisions where applicable
More information is available on request (see Section 8).
7) Updates to this Cookie Policy
We may update this Cookie Policy from time to time. Changes will be posted on this page and the “Last updated” date will be revised.
8) Contact us
If you have any questions about our use of cookies, contact:
Korto
Address: 126 Alexandra Park Road, Muswell Hill, London, N10 2AH
Tel: 0208 292 5841