Cookie policy
Draft for solicitor review. This page was drafted by Datum Forge from its own record, in plain English, for a solicitor to review before publication. It has not been reviewed by anyone legally qualified and it is not legal advice.
Last updated 18 October 2026.
What this site stores on your device, and why
This site sets very little, and nothing for any advertising network. Here is all of it.
| Name | Set when | What it does | How long |
|---|---|---|---|
klaro | You make a choice in the measurement banner | Remembers the choices you made about measurement, so you are not asked again | 180 days |
consent_ref | You answer the measurement banner, by accepting or rejecting; not when it is shown | A random reference, so there is a record of the choice you made; holds nothing about you | 1 year |
attr | You have accepted campaign measurement, and then arrive from an advert, email or link that names its campaign | Remembers the source, medium and campaign names that brought you here, so an enquiry within the next thirty days can be matched to them; nothing else | 30 days |
stats_objection | You object to site statistics, on the privacy notice or the How we measure this site page | Tells the site not to count your visits; holds nothing but that fact | 1 year |
__Host-authjs.csrf-token, __Secure-authjs.callback-url | Only when the sign-in page (/login) is opened | Security cookies for the staff sign-in system. They protect the sign-in form from forgery and carry no information about you | The browser session |
Staff session cookie | Only when one of the three founders signs in | Keeps a signed-in founder signed in | The session |
The site statistics described in the privacy notice set no cookie at all; the device identifier they use is supplied by the hosting provider, is not stored on your device, and is discarded after twenty-four hours. Detailed analytics (Umami), if you accept it, sets no cookie either.
Which need your consent, and which do not
The staff security cookies are strictly necessary and need no consent. The statistics run without consent under the UK rules that allow a website’s own usage statistics, provided you are told clearly and can object simply and for free; the objection switch is on the How we measure this site page and on the privacy notice, and the banner’s Settings says where. Detailed analytics (Umami) and campaign measurement run only if you accept them, and the banner offers Reject and Accept with equal weight. Advertising measurement is not used on this site. Reject is a single click and leaves the site working exactly as it does now; it is your answer about detailed analytics and campaign measurement and does not switch the statistics off, which have their own switch.
Changing your mind
Open the banner again from the How we measure this site page or the privacy notice, or use the switches on the privacy notice: one each for detailed analytics and campaign measurement, and one to object to the statistics. Removing the cookies above from your browser has the same effect, except that you will be asked again.
Third parties
No advertising network, no social-media pixel and no Google tag is loaded by this site. If a bot check is switched on to protect the enquiry form, it will be from Cloudflare (Turnstile), it may store items on your device under Cloudflare’s own terms, and this page will say so from that day.