Cookie statement

Category

Tool / technology

Processing purpose

Data

GDPR basis

Recipients

Retention

Necessary

Cloudflare security cookies

Protect the website and supporting services against malicious traffic, bots and abuse. Also supports rate limiting and security controls.

IP address, request and network information, browser/device information, security signals and pseudonymous/session identifiers.

Legitimate interest / strictly necessary for website and service security.

Cloudflare and, where Cloudflare is used as an infrastructure layer, the relevant service provider such as HubSpot.

_cfuvid: session. __cf_bm: approximately 30 minutes.

Necessary

HubSpot consent preference cookies

Store and enforce the visitor’s cookie preferences and prevent tracking where consent has not been provided.

Consent category choices and preference / do-not-track values.

Legitimate interest / strictly necessary to record and respect privacy choices.

Cloud Nine Digital and HubSpot.

__hs_cookie_cat_pref: 180 days. __hs_do_not_track: 180 days.

Necessary

Cookie functionality / technical session cookies

Support basic website functionality and verify that cookies can be stored in the browser.

Technical browser/session information and a basic test value.

Legitimate interest / strictly necessary for technical website functionality.

Cloud Nine Digital and relevant website infrastructure providers.

cookietest: session.

Analytics

Google Analytics 4

Measure website usage and performance, including visits, users, sessions and interactions, to understand how the website is used and improve it.

Pseudonymous client/device identifiers, page URL and title, referrer, event and interaction data, browser/device information and approximate geographic information.

Consent.

Google and Cloud Nine Digital.

Observed _ga and _ga_Z2RZ65LLR1 cookies: approximately 1.1 years. GA4 server-side data retention is configured separately.

Analytics

HubSpot analytics / visitor tracking

Measure website activity, distinguish visitors and sessions, analyse page views and associate website activity with a contact where applicable.

Pseudonymous visitor ID, domain, timestamps, session information, page views and browsing activity.

Consent.

HubSpot and Cloud Nine Digital.

hubspotutk and __hstc: 180 days. __hssc: 30 minutes. __hssrc: session.

Analytics

HubSpot forms

Process contact requests and allow Cloud Nine Digital to respond to enquiries. Where analytics consent exists, form submissions may also be associated with previous website activity.

Information entered in the form, such as name, email address and message, plus form submission metadata. Where analytics tracking is active, a pseudonymous visitor ID may also be included.

Legitimate interest and/or pre-contractual steps, depending on the purpose of the form. Separate analytics tracking remains based on consent.

Cloud Nine Digital and HubSpot.

hs_login_email and hs_login_metadata (180 days), hs-user-theme 2 months

Advertising

LinkedIn Insight Tag / conversion tracking

Measure advertising conversions and campaign performance, and potentially support retargeting and audience creation. A form submission can be registered as a conversion.

According to LinkedIn documentation, this may include URL, referrer, IP address, browser/device characteristics, timestamp and conversion or interaction information. Additional identifiers may be processed depending on the configuration.

Consent.

LinkedIn / Microsoft and Cloud Nine Digital.

LinkedIn states that direct identifiers are removed within 7 days and remaining pseudonymised Insight Tag data is deleted within 180 days. Individual LinkedIn cookies may have shorter retention periods.