Cookie Policy
We only use cookies that are strictly necessary to run this site and protect the quote form. We do not use advertising or analytics cookies.
Last updated: 29 August 2026
This Cookie Policy sits with our Privacy Policy. Where a cookie involves personal data, UK GDPR and the Data Protection Act 2018 also apply. Technical measures are in the Security Policy.
1. What cookies and similar technologies are
Cookies are small text files stored on your device when you visit a website. Similar tools include session storage and other identifiers. In this policy, “cookies” includes those similar technologies where relevant.
2. The UK rules
In the UK, cookies are regulated by the Privacy and Electronic Communications Regulations 2003 (PECR), as amended, and by the ICO’s guidance on cookies.
PECR says you need consent before setting a cookie, unless the cookie is strictly necessary to provide a service the user has asked for. Strictly necessary cookies still have to be explained, which is what this page does. We do not run a consent banner because we do not set non-essential cookies.
3. How we use cookies
We only use strictly necessary cookies. We do not use advertising, marketing, social media or analytics cookies, and we do not use cookies to track you across other websites.
The session cookie is created when you load the homepage containing the quote form, or the quotation acceptance page. It holds a security token (CSRF), supports a submission cooldown on the quote form, and can remember what you typed if validation fails. Static service, legal and error pages do not start this session on their own. This site is served through Cloudflare, which may set the strictly necessary __cf_bm cookie to help distinguish real visitors from automated traffic. Cloudflare Turnstile, which checks you are not a bot, may set its own strictly necessary cookies when that check loads. Without these, the form and some security features will not work reliably.
4. Cookie table
| Name | Purpose | Duration | Type and lawful basis |
|---|---|---|---|
__Host-Session |
Created on the homepage so we can validate the quote form, enforce a submission cooldown, protect against cross-site request forgery, and restore form fields after an error. Also used on the quotation acceptance page to protect that form. | Session (removed when you close the browser) | Strictly necessary. PECR exemption for essential operation. Where personal data is involved: legitimate interests and, for the form, steps at your request before a contract. |
__cf_bm |
Set by Cloudflare on pages served through their network. Helps distinguish real visitors from bots and supports abuse protection at the edge. | About 30 minutes (renewed while you browse) | Strictly necessary for site security. PECR exemption for essential operation. See Cloudflare’s own notices for their processing. |
| Cloudflare Turnstile cookies | Helps confirm a real person is submitting the form and reduces automated abuse. Set by Cloudflare when the security check loads. | As set by Cloudflare (typically short-lived or session) | Strictly necessary for the security check you use when sending an enquiry. See Cloudflare’s own notices for their processing. |
The session cookie is set with Secure, HttpOnly and SameSite attributes, and the __Host- prefix, to reduce the risk of interception or misuse.
5. Your choices
You cannot switch off strictly necessary cookies on this site and still use the form as intended. That is why we do not offer an opt-out for them.
You can still block or delete cookies in your browser. Most browsers let you refuse cookies or clear them when you close the window. See your browser help or aboutcookies.org. Blocking all cookies may stop the form working here and on other sites.
Questions about personal data processed via cookies can be sent through the contact page. Your wider rights are in the Privacy Policy and GDPR Policy.
6. Changes to this policy
If we add cookies or change how they are used, we will update this page and the date above. If we ever introduce non-essential cookies, we will ask for consent first, in line with PECR and ICO guidance. Use of the site generally is covered by the Terms of Service.