In short
- Browsing the public website uses only strictly necessary storage: a cookie that remembers your analytics choice and, where enabled, an anti-bot check on forms.
- Signing in to the client portal or staff administration sets the cookies needed to keep you signed in.
- Analytics loads only if you opt in, and stops if you withdraw consent. The contents of our forms are never sent to analytics.
- We do not use advertising or cross-site tracking cookies.
What cookies are
Cookies are small text files a website stores in your browser. Similar technologies, such as local storage, work in much the same way, and this policy covers them too. UK law (PECR) allows strictly necessary cookies without consent; anything else needs your agreement first.
Cookies we use
ash_consent
Remembers whether you accepted or rejected optional analytics, so we don't ask on every page.
- Type
- Strictly necessary
- Duration
- 6 months
- Set
- When you make a choice in the cookie banner
better-auth.session_token and related sign-in cookies
Keep you securely signed in to the client portal or staff administration.
- Type
- Strictly necessary
- Duration
- Session or until you sign out / the session expires
- Set
- Only when you sign in
Two-factor trusted-device cookie
Lets staff mark a device as trusted after completing two-factor authentication.
- Type
- Strictly necessary
- Duration
- Limited period set by the sign-in system
- Set
- Only for staff who choose to trust a device
Cloudflare Turnstile (where enabled)
Checks that a form submission comes from a person rather than an automated script. It may use cookies or similar storage for this purpose only.
- Type
- Strictly necessary (security)
- Duration
- Short-lived, set by Cloudflare
- Set
- Only on pages with a protected form
Analytics (privacy-friendly)
Aggregate usage statistics such as pages visited and referring sites.
- Type
- Analytics (optional)
- Duration
- Depends on the analytics provider; many privacy-friendly tools set no cookies at all
- Set
- Only after you opt in
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| ash_consent | Remembers whether you accepted or rejected optional analytics, so we don't ask on every page. Set: when you make a choice in the cookie banner. | Strictly necessary | 6 months |
| better-auth.session_token and related sign-in cookies | Keep you securely signed in to the client portal or staff administration. Set: only when you sign in. | Strictly necessary | Session or until you sign out / the session expires |
| Two-factor trusted-device cookie | Lets staff mark a device as trusted after completing two-factor authentication. Set: only for staff who choose to trust a device. | Strictly necessary | Limited period set by the sign-in system |
| Cloudflare Turnstile (where enabled) | Checks that a form submission comes from a person rather than an automated script. It may use cookies or similar storage for this purpose only. Set: only on pages with a protected form. | Strictly necessary (security) | Short-lived, set by Cloudflare |
| Analytics (privacy-friendly) | Aggregate usage statistics such as pages visited and referring sites. Set: only after you opt in. | Analytics (optional) | Depends on the analytics provider; many privacy-friendly tools set no cookies at all |
Analytics
If you opt in, we use a privacy-friendly, Plausible-compatible analytics tool to understand which pages are useful and where visitors come from. It is designed to work without building profiles of individuals. The script is not loaded at all until you give consent, and it is removed from the page if you withdraw it.
We never send the contents of our forms — such as your project description or contact details — to analytics.
Changing your choices
You can change or withdraw your consent at any time using the button below, or the “Cookie settings” link in the site footer. Rejecting analytics does not affect how the site works.
You can also block or delete cookies in your browser settings. If you block strictly necessary cookies, signing in to the client portal will not work, and we will not be able to remember your cookie choice.
More information
For how we handle personal data more generally, see our privacy notice. Questions about cookies can be sent through our contact form.