Cookies and storage

What we use

On ordinary information pages, this initial build does not intentionally set cookies or browser storage. When you use the enquiry form, the server creates a short-lived, strictly necessary session cookie for CSRF security. The cookie does not contain your form message. Its session configuration is HttpOnly and SameSite=Lax, with Secure enabled over HTTPS.

The Gemini AI chat also uses the same strictly necessary PHP session for its security token and to retain limited conversation context temporarily. Chat is only contacted when you send a message; there are no third-party advertising cookies in the chatbot.

What we do not currently use

No Google Analytics, ad pixels, third-party marketing scripts, heatmaps, session replay or non-essential cookie banners are included in this build. The hero website field transfers its value to the enquiry page using a temporary URL query parameter rather than persistent browser storage.

Future changes

If we add analytics, advertising, embedded services or other storage later, this notice must be revised and an appropriate consent and preference mechanism introduced where required. Hosting and CDN behaviour must also be checked on the real service. See privacy for data handling.

Review status

Initial technical position prepared November 2026. [VERIFY LIVE HOST, PROVIDERS AND ANY SERVER-SET COOKIES BEFORE LAUNCH].