Draft for legal review. Text in [square brackets] must be completed before launch.
This Cookie Policy explains how [LEGAL ENTITY NAME] uses cookies and similar technologies on this website. In short: we only use what is strictly necessary to run and secure the site. We do not use analytics, advertising or tracking cookies, which is why we do not show a cookie banner.
1. What are cookies?
Cookies are small text files a website stores in your browser. Similar technologies include local storage and scripts that read information from your device.
2. Strictly necessary cookies we use
__Host-hp_csrf: a security cookie set only when you open one of our forms (signup or contact). It protects the form against cross-site request forgery. It contains a random value, cannot be read by scripts, is never used to identify you, and expires after 2 hours.
3. Bot protection
To keep spam out of our forms we use Cloudflare Turnstile, a privacy-preserving security check provided by Cloudflare, Inc. It runs only on pages with a form and processes technical signals from your browser to tell people and bots apart. It is not used for advertising or tracking. Our hosting and security provider may also set strictly necessary security cookies to protect the website against malicious traffic. See Cloudflare's privacy documentation for details.
4. Why no consent banner?
Under EU and UK rules (including the ePrivacy Directive), consent is not required for cookies that are strictly necessary for a service you request, such as securing a form you submit. We do not set any non-essential cookies. If that ever changes, we will ask for your consent first and update this policy.
5. Managing cookies
You can block or delete cookies in your browser settings. If you block the security cookie, the signup and contact forms will not work, but the rest of the site will.
6. Contact
Questions about this policy? Contact us at [PRIVACY CONTACT EMAIL].