Policy 02
Cookies & Similar Technologies
“Unnecessary tracking shouldn’t be the hidden price of visiting our site.”
Our website is here to explain our work, show what we make and make it easy to get in touch. This policy keeps cookies, scripts and embedded media transparent and lawful.
At a glance
The short version.
Nothing before you choose
Non-essential cookies and scripts are blocked until you’ve given consent.
Rejecting is as easy as accepting
Clear accept and reject choices, granular settings, and no pressure tactics.
Video, handled carefully
Embedded Vimeo and YouTube players use privacy-enhanced modes or wait for consent where required.
In practice
What we commit to.
- Categorise technologies by what they actually do
- Explain why any exemption applies, rather than trusting a platform’s label
- Record consent choices and let you change them later
- Keep a register of every cookie and similar technology
- Make sure the public cookie notice matches what the site really does
- Check consent settings before adding any new analytics, pixel, chat tool or widget
The detail
Everything else.
The key parts of the policy, in plain English. The downloadable PDF is the full, controlled version.
What it covers
Our Squarespace pages and any future platform, embedded Vimeo, YouTube and similar media, analytics, tag managers, forms, marketing integrations, pixels, scripts, local storage and device identifiers, not just traditional cookies.
The categories
Strictly necessary; functional or preference; analytics; advertising or tracking; and embedded third-party media.
Consent
Consent has to be freely given, specific, informed and a clear action. Where we rely on an exemption, we have to be able to explain why it applies.
The cookie banner
A clear first layer, meaningful accept and reject choices, granular settings where needed, recorded choices you can change, technical blocking of non-essential scripts, and no dark patterns.
The register
For every technology we record its name, provider, purpose, category, duration, whether personal data is involved, the consent or exemption basis and links to third-party privacy information.
Responsibilities
The Managing Directors approve; the Website Owner implements, scans and maintains the banner and register; marketing staff check before adding anything; everyone reports unexpected tracking introduced by platform updates.
Records and review
We keep evidence of consent settings, scans and exemption decisions. The policy is reviewed every year and whenever the ICO or PECR rules change.
Laws and guidance this policy follows
- Privacy and Electronic Communications Regulations 2003 (PECR), as amended
- ICO guidance on storage and access technologies, finalised 29 April 2026
- ICO: What are the PECR rules?
- ICO: How do we manage consent in practice?
- UK GDPR and Data Protection Act 2018 where personal data is processed
The full document
Cookies & Similar Technologies Policy
Version 1.0 · Effective October 2026 · Owner: Managing Directors / Website Owner
Questions about this policy?
Spotted a cookie or tracker you weren’t expecting? Tell us and we’ll look into it.