Cookie Policy

This Cookie Policy explains what cookies are, how we use them, the types of cookies we use (i.e., the information we collect using cookies and how that information is used), and how to manage your cookie settings.

Cookies are small text files used to store small pieces of information. They are stored on your device when a website loads in your browser. These cookies help ensure that the website functions properly, enhance security, provide a better user experience, and analyse performance to identify what works and where improvements are needed.

Our website and application use cookies, local storage and similar technologies. Some are necessary to deliver the site securely and to remember the cookie choice you have made. Others help us understand how our services are used, remember your preferences, and — where you allow it — measure and deliver advertising. Both first-party and third-party technologies are used, and some first-party cookies do involve personal data, such as the online identifiers used for analytics and advertising.

Our legal basis. Strictly necessary cookies are used without your consent, as permitted by Regulation 6(4) of the Privacy and Electronic Communications Regulations 2003 (PECR). Every other cookie and similar technology — analytics, performance, functional and advertising — is used only if you accept it. Where this involves personal data, our lawful basis under the UK GDPR is your consent, Article 6(1)(a). You can change or withdraw that consent at any time; see "Manage cookie preferences" below.

Session recording. We use Hotjar to understand how visitors move through our website and application. Hotjar records pages viewed, clicks, scrolling and navigation, and builds a replay of the visit. It is configured so that numeric text and email addresses displayed on the page are not sent or stored, and keystrokes in input fields are suppressed. Hotjar also records an approximate location — country and city — derived from your IP address. Recordings are used only to improve our services. This happens only if you accept analytics cookies, and stops if you withdraw that consent.

Where your data is processed. Some of the providers named in this policy process data outside the United Kingdom:

1. Google — analytics and advertising, and the hosting of our server-side tagging container: United States
2. Meta — advertising and conversion measurement: United States
3. Microsoft Advertising — advertising and conversion measurement: United States
4. Reddit — advertising: United States
5. TikTok — advertising: outside the UK, including the United States
6. Hotjar — session recording and analytics: European Economic Area

Where data is transferred outside the UK we rely on the UK Extension to the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the International Data Transfer Addendum to the European Commission's standard contractual clauses, supported by a transfer risk assessment.

You can change your cookie settings at any time by clicking the "Consent Preferences" button above. This reopens the consent banner so you can update your choices or withdraw your consent immediately. We will also ask for your choice again at least every six months.

Separately, browsers offer their own ways to block and delete cookies. Below are links to guidance for the major browsers.

Chrome: https://support.google.com/accounts/answer/32050

Safari: https://support.apple.com/en-gb/guide/safari/sfri11471/mac

Firefox: https://support.mozilla.org/en-GB/kb/clear-cookies-and-site-data-firefox

Edge: https://support.microsoft.com/en-gb/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

If you use a different browser, please refer to its official support documentation.