Cookie Policy

Last updated: 10 October 2026

This policy explains how Norbain SD uses cookies and similar technologies on the trade platform at norbain.com and its subdomains. It sits alongside our Privacy Policy, which covers personal data more broadly.

You can change your cookie choices at any time using the link in the footer of every page.

What is a cookie?

A cookie is a small text file that a website stores on your device. Cookies let the site remember your actions (such as being signed in or having items in your basket) and help us understand how the site is used. Some of what we describe below uses similar technologies such as localStorage and browser pixels; for simplicity we refer to all of them as “cookies” throughout this policy.

How we categorise cookies

We group cookies into four categories. Strictly necessary cookies are always on because the site cannot work without them. The other three only run if you grant consent.

1. Strictly necessary

Required for the site to function — signing in, keeping you signed in, protecting against cross-site request forgery, spotting sign-ins and orders that may be fraudulent, and remembering your cookie choice. Cannot be switched off.

Cookie	Purpose	Duration
authjs.session-token	Keeps you signed in to your trade account.	Session
authjs.csrf-token	Protects sign-in forms from cross-site request forgery.	Session
authjs.callback-url	Remembers the page to return to after signing in.	Session
norbain_consent	Stores your cookie choices on this site.	12 months
nb_device	Security. Recognises a browser you have used before, so we can spot sign-ins and orders that do not look like you. Set when you sign in or order; never used for analytics or marketing.	2 years
norbain_consent_id	A random reference to the record of your cookie choice, so we can show that consent was given if we’re ever asked. It is not linked to your name, account or any other cookie.	12 months

2. Analytics

Helps us understand how trade customers use the site — which products and categories are useful, where users get stuck, which search terms return nothing. We use this to prioritise improvements. We do not use analytics data for advertising.

Provider: Google Analytics 4. Data is processed by Google LLC on our behalf under the UK/EU Standard Contractual Clauses. We have disabled Google Signals (cross-device demographic tracking) and we never send personal information such as names, emails or addresses to Google.

Cookie	Purpose	Duration
_ga	Assigns a pseudonymous ID used to distinguish unique visitors.	24 months
_ga_<container-id>	Stores session information for Google Analytics 4.	24 months
nb_sid	Our own visitor reference. It links the pages and searches from a single visit together so we can improve site search and product recommendations. It holds a random value only, and is set solely if you accept analytics cookies — decline and it is never created, and any existing one is removed.	12 months

3. Preferences

Remembers non-essential choices that improve your experience. This category controls our live chat (Tawk.to), which sets its own cookies to keep a conversation going as you move between pages. Accept and the chat button appears; decline and it is never loaded.

4. Marketing

Supports advertising measurement (for example, attributing a trade-account application to a specific campaign). No marketing cookies are set today. The category is reserved so that if Norbain runs paid advertising in future, tracking only runs with your explicit consent.

Google Consent Mode

We use Google Consent Mode v2. Until you give consent, Google Analytics runs in a cookieless mode that produces aggregate counts only — no personal identifiers are stored or transmitted. Once you accept analytics cookies, full measurement begins. Rejecting analytics keeps the site in the cookieless mode.

Third-party services

Google Analytics 4 — website measurement (only after consent).
Google Tag Manager — container that loads analytics tags. Tag Manager itself does not set tracking cookies.
Tawk.to — live chat. Sets its own cookies to keep a conversation open as you move between pages and to recognise you if you return to it. Those cookies are Tawk’s rather than ours, so the widget only loads once you accept preference cookies — decline and the chat button never appears.

Your choices

Click to open the preferences panel at any time. You can also use the cog icon at the bottom-left of every page, or the “Manage cookies” link in the footer.
We keep a record of the choice you made so we can show it was given if we are ever asked. That record holds the choice and the date only — no name, account or IP address — and both it and your choice expire after 12 months, at which point you will be asked again.
You can also block or delete cookies using your browser’s settings. Note that blocking strictly necessary cookies will prevent parts of the site from working — for example you may not be able to stay signed in or complete checkout.
To object to analytics at a Google-wide level, you can install the Google Analytics Opt-out Browser Add-on.

Changes to this policy

We may update this policy when we add, remove or change cookies. The “last updated” date at the top of the page reflects the most recent revision. Material changes that affect analytics or marketing categories will prompt the cookie banner to reappear so you can review your choices.

Contact

Questions about cookies or data protection can be directed to Norbain SD via the contact page.