Cookies Policy
Last updated: 20 August 2026
We use a small amount of browser storage to keep the website secure and remember your privacy choice. Our CookieYes consent banner keeps optional analytics and marketing storage disabled until you choose it.
You can open Cookie preferences from the footer at any time to bring back the CookieYes preference centre and change or withdraw your optional choices. Withdrawing consent sends an updated signal to Google, stops consent-based optional storage, and removes optional first-party cookies that this website can remove. Cookies held on a third party’s domain must be managed with that provider or your browser.
Storage we use
The inventory below covers the public site and the secure administrator area. A name ending in * is a documented pattern: the exact suffix varies by the configuration supplied by the provider.
CookieYes audit table
CookieYes publishes the current scanned cookie list below. The manually documented inventory remains available as a readable fallback if the CookieYes table is unavailable.
| Name or pattern | Provider | Category | Retention | Purpose and control |
|---|---|---|---|---|
cky-consent (CookieYes consent record) | CookieYes | Strictly necessary | Up to 12 months | Records your consent choices and supports CookieYes’s proof-of-consent record. It is required to remember your privacy choice and cannot be disabled in the preference centre. |
bs.session_token / __Secure-bs.session_token | Brandspeak / Better Auth | Strictly necessary (administrator only) | 8 hours | Secures an authenticated CMS administrator session. This is not set for ordinary public visitors. |
dataLayer (in-memory JavaScript object) | Google Tag Manager | Strictly necessary | Page session only | Passes consent settings and measurement events to Google Tag Manager. It is created with denied consent by default so analytics and advertising storage remain disabled until you allow the relevant category. |
_ga and _ga_* | Google Analytics 4 | Analytics | Up to 2 years | Distinguishes visitors and maintains measurement state. Controlled by the Analytics choice. |
_gid | Google Analytics 4 | Analytics | 24 hours | Distinguishes visitors for daily analytics reporting. Controlled by the Analytics choice. |
_gat* | Google Analytics 4 | Analytics | Up to 1 minute | Throttles analytics request rates. Controlled by the Analytics choice. |
hubspotutk | HubSpot | Marketing | Up to 6 months | Identifies a browser for HubSpot visitor tracking. Controlled by the Marketing choice. |
__hstc | HubSpot | Marketing | Up to 13 months | Stores HubSpot visitor, session and campaign timestamps. Controlled by the Marketing choice. |
__hssc | HubSpot | Marketing | 30 minutes | Tracks HubSpot session information. Controlled by the Marketing choice. |
__hssrc | HubSpot | Marketing | Session | Checks whether a new HubSpot browser session has started. Controlled by the Marketing choice. |
messagesUtk | HubSpot | Marketing | Up to 6 months | May support HubSpot message/visitor recognition when that provider feature is enabled. Controlled by the Marketing choice. |
_GRECAPTCHA and related Google reCAPTCHA storage | Google reCAPTCHA | Strictly necessary for protected forms | Provider-controlled; commonly up to 6 months | Helps distinguish people from automated abuse. It is loaded only after you submit a contact or service enquiry; without it, the protected form cannot be submitted. |
Your choices
- Essential storage is required for CookieYes to remember your privacy choice, to protect enquiry forms when submitted, and to secure the administrator area. It cannot be turned off here.
- Analytics enables analytics storage and Google Analytics 4 measurement configured through Google Tag Manager.
- Marketing / Advertisement enables advertising storage and allows HubSpot visitor tracking to load. This is separate from the optional marketing-communications checkbox on an enquiry form.
Choosing Reject all in CookieYes keeps Analytics and Marketing / Advertisement storage disabled. Choosing Accept all allows both optional categories. You can also choose each category separately in Cookie preferences.
Form protection
Our contact and service enquiry forms use Google reCAPTCHA v3 to help prevent spam and abuse. The reCAPTCHA script is not loaded while you browse a form; it is requested when you submit it. Google may process technical information and set the storage described above for this protection. The form explains this at the point of submission.
Browser controls
You can also clear or block cookies and local storage in your browser settings. Blocking essential storage may affect secure administration or protected form submission. For more information about how we process personal data, see our Privacy Policy.