Cookie Policy
What we set, why, and what you can switch off.
Version 2.1 · Effective 10 September 2026 · Last updated 10 September 2026
We keep this short because the list is short. We set no advertising cookies and we do not share cookie data with advertisers.
1. What we set
| Cookie | Purpose | Consent |
|---|---|---|
| Authentication and session cookies | Keep you signed in and protect the session | Strictly necessary — no consent required, cannot be switched off while you are signed in |
| Session key (browser storage) | Identifies this device for the concurrent-session limit and idle timeout | Strictly necessary |
| Preference storage | Remembers your site filter and similar choices | Appearance — exempt from consent under the Data (Use and Access) Act 2025, with an opt-out |
| Aggregate usage statistics | Counts of page views to find broken journeys | Statistical — exempt from consent under the Data (Use and Access) Act 2025, with an opt-out |
The Data (Use and Access) Act 2025 removed the consent requirement for cookies used solely for statistics or to adapt appearance, provided a free and simple opt-out is offered. We offer one, and we take the same view of equivalent browser storage.
In practice that exemption does very little work here, because our analytics set nothing at all. Visitor numbers are counted by our own servers using a token derived from a secret that changes daily, so there is no cookie and no browser storage to consent to or to opt out of, and no analytics company receives your visit. The Privacy Policy explains exactly how the counting works.
2. Turning them off
Use the cookie controls in the footer, or your browser settings. Blocking strictly necessary cookies will prevent sign-in — that is a consequence of how sessions work, not a choice we have made.
3. Payments
Our payment processor sets its own cookies on its checkout pages, which are hosted by them and governed by their notice. We do not receive card details.
Care Shield Compliance is a division of Africa Procurement Group Ltd, registered in England and Wales, company number 10553435. Registered office: Devonshire House, One Mayfair Place, London, England, W1J 8AJ. Questions about this document: hello@careshieldcompliance.co.uk.