Cookie Policy

2. What are cookies?

Cookies are small text files that websites place on your computer, phone, tablet or other device.

They can perform a range of functions. For example, cookies may help a website:

• send requests to the correct server;
• protect forms against malicious or unauthorised requests;
• distinguish ordinary visitors from automated bots; and
• maintain the security and reliability of the service.

Some cookies are set directly by the website you are visiting. These are commonly called first-party cookies. Others may be set through a service provider involved in delivering or protecting the website. These are commonly called third-party cookies.

3. Why we use cookies

The cookies currently used on this website support essential functions, including:

• website security;
• protection against malicious and automated traffic;
• fraud and abuse prevention;
• traffic routing and load balancing;
• protection of website forms and requests.

They are not used to build advertising profiles or follow visitors across unrelated websites.

4. Do we ask for your consent?

We do not ask for consent for the cookies listed in this policy because we consider them necessary for the secure and reliable operation of the website.

Under the Privacy and Electronic Communications Regulations 2003, consent is not required where storing or accessing information is strictly necessary to provide an online service requested by the visitor. However, a cookie must be genuinely essential. It is not enough that it is merely useful or convenient to the website operator.

The Information Commissioner’s Office recognises that security and service-delivery cookies may qualify for this exception where they are essential to providing the requested service.

We will review this position if the purpose of an existing cookie changes or if we introduce additional cookies.

5. Cookies used on this website

Cookie: __cf_bm
Cookie domain: gdprcompliancecentre.com
Technology provider: Cloudflare
Service: Cloudflare Bot Management
Purpose: Helps detect and manage automated, abusive or malicious traffic and distinguish legitimate visitors from bots.
Type: Strictly necessary — security
Duration: Expires after 30 minutes of continuous inactivity and may be refreshed during active browsing.
Consent required: No. This cookie is treated as strictly necessary to protect the security of the website.

The cookie names, domains and durations above are based on the last website cookie audit.

6. Our service providers

We use third-party infrastructure and security providers to help operate and protect the website.

These may include:

Cloudflare

Cloudflare provides security, traffic-management and bot-detection services. Its technology may process limited technical information, such as:

• IP addresses;
• browser and device information;
• request details;
• timestamps;
• security signals;
• indicators of automated or potentially malicious activity.

Durable

Durable infrastructure cookies

Our website is created, hosted and delivered using the Durable platform. Durable also provides the technical infrastructure associated with the website, including the connection and management of the website’s domain, hosting, content delivery and security services.

As part of operating this infrastructure, Durable may place or access cookies and similar technologies through Durable-controlled or Durable-related domains. These technologies are used for essential technical purposes, such as directing internet traffic to the appropriate server, balancing website traffic across servers, maintaining the security and integrity of the website, preventing misuse, and enabling the website to function reliably.

These technologies are strictly necessary to provide the website and its security, they are used without consent in accordance with the applicable cookie rules. Further details, including the names, providers, purposes and durations of individual cookies, are set out in the cookie table.

7. Personal information

Some cookie-related information may constitute personal information, particularly where it includes or can be linked to an IP address, device identifier or other online identifier.

Where personal information is processed, we must have an appropriate lawful basis under the UK GDPR and comply with the principles of lawfulness, fairness and transparency. The cookie rules under PECR must be considered separately and before deciding on the relevant UK GDPR lawful basis.

For the cookies listed in this policy, the relevant UK GDPR lawful basis is ordinarily our legitimate interests in:

• operating a secure and reliable website;
• preventing fraud and malicious activity;
• protecting visitors and our systems;
• maintaining the availability and integrity of the service.

Our Privacy Notice provides further information about how we use personal information and explains your data-protection rights.

8. Managing cookies in your browser

Although the cookies listed in this policy are necessary for the website to operate securely, you can still control or delete them through your browser settings.

Most browsers allow you to:

• view the cookies stored on your device;
• delete individual cookies;
• delete all cookies;
• block cookies from particular websites;
• block third-party cookies;
• prevent cookies from being accepted.

Please be aware that blocking necessary cookies may affect the security, availability or operation of the website. Some forms or website functions may not work correctly.

Instructions vary between browsers, so please consult the privacy or cookie settings within the browser you use.

9. Changes to our use of cookies

Our website and its technical services may change over time. For example, we may change our hosting, security provider or website functionality.

We will update this policy where:

• a new cookie is introduced;
• the purpose of an existing cookie changes;
• a cookie is removed;
• a service provider changes;
• the law or regulatory guidance changes.
• scanning has detected a new cookie placed by our hosting provider.

Where we introduce a cookie that is not covered by an applicable legal exception, we will obtain consent before placing or accessing it. The ICO confirms that visitors should be told that cookies are used and what they do, even where the cookies are strictly necessary.

10. Contact us

Please contact us with any questions about this policy or our use of cookies:

GDPR Compliance Centre
Website: gdprcompliancecentre.com
Email: [email protected]
Postal address: GDPR Compliance Centre, Commercial House, 1105 Christchurch Road, Bournemouth BH7 6BQ 

You can also raise a concern with the Information Commissioner’s Office.

We would appreciate the opportunity to consider and resolve your concern first.

Updated July 2026.