Cookie Policy

A complete, honest inventory of what this website stores on your device — four entries, all of them functional, none of them for advertising or analytics — and how to control them.

Last updated 16 August 2026

Draft — needs a solicitor's review before launch

This page was drafted from how the website and database actually work. It is a working draft, not settled legal advice, and it has not been checked by a qualified adviser. Every [highlighted placeholder] below must be filled in, and the whole document reviewed by a solicitor, before this site is treated as compliant.

Section 1

The short version

This site does not use advertising cookies, analytics cookies, tracking pixels or session-recording tools. There is no Google Analytics tag, no Meta pixel, no advertising remarketing tag and no consent-management platform selling your preferences on to anyone.

What we do use is a very short list of strictly necessary and functional storage that keeps you signed in and remembers a couple of interface choices. It is all listed in full in section 3 — that table is the complete inventory, not a sample.

If you only read the public pages and never sign in, none of the entries below are populated with information about you. Everything in the list is created by the customer dashboard after you log in.

Section 2

What cookies and similar technologies are

A cookie is a small text file a website asks your browser to store and send back on later requests. Local storage is a similar browser feature that holds data on your device but is only read by code running on the page, and is never automatically attached to network requests.

UK law treats both the same way. Regulation 6 of the Privacy and Electronic Communications Regulations 2003 says we must tell you about anything we store on or read from your device and get your consent first — unless it is strictly necessary to provide the service you have asked for. Keeping you signed in to an account you deliberately signed in to is the textbook example of strictly necessary. Counting your visits for our own analytics is not, which is why we do not do it.

Section 3

Everything this site stores on your device

Name	Type	Purpose	Expires
`sb-…-auth-token`	First-party local storage	Holds your sign-in session and refresh token so you stay logged in as you move between dashboard pages and after closing the tab. Without it you would be signed out on every page load.	When you sign out, or when you clear site data
`sidebar_state`	First-party cookie	Remembers whether you collapsed or expanded the dashboard sidebar, so the layout is the one you chose next time.	7 days
`tbd_onboarded_v1`	First-party local storage	Records that you have completed or dismissed the dashboard welcome wizard, so it does not reappear every time you sign in.	Until you clear site data
`tbd_tour_v1`	First-party local storage	Records that you have finished or dismissed the guided feature tour, for the same reason.	Until you clear site data

None of these contain an advertising identifier, and none can be read by another website. The three “remember what I did” entries hold a single value each — a true/false flag or the word true — and cannot be used to build a profile of you.

Owner action: this table is only true while the site stays free of analytics and advertising. The moment a tag manager, analytics script, heatmap tool, live-chat widget or advertising pixel is added, a compliant consent banner — one that blocks those scripts until consent is given, and makes refusing as easy as accepting — becomes a legal requirement, and this table must be updated first.

Section 4

Why you do not see a cookie banner

A consent banner exists to get permission for storage that is not strictly necessary. Everything in section 3 falls into one of two categories:

Strictly necessary — the sign-in session. You cannot have an authenticated dashboard without it, so PECR regulation 6(4) exempts it from consent.
Functional, and created by your own action — the sidebar preference and the two “I have seen this” flags. They are only written after you, while signed in, collapse a panel or dismiss a wizard, they store nothing but that choice, and they are used for nothing else.

Because we set nothing for analytics, advertising or profiling, there is no consent to ask for, and a banner would give you a choice that has no consequence. We would rather tell you plainly what is stored, which is what this page does.

For legal review: the ICO's position on “functional” storage that the user did not explicitly request is stricter than on strictly necessary storage. A reviewer should confirm they are comfortable that the two wizard-dismissal flags sit within the exemption, or advise moving them server-side onto the user's own account record, which removes the question entirely.

Section 5

Content loaded from other websites

Some parts of the site fetch content directly from other organisations. We do not set cookies through them and we receive nothing back from them, but the request itself reveals your IP address and browser to whoever serves it, and those providers may set their own cookies under their own policies.

CARTO and OpenStreetMap (basemaps.cartocdn.com) — the background map tiles on the coverage map. Loaded only when you scroll to or interact with the map.
OpenStreetMap Nominatim (nominatim.openstreetmap.org) — converts the postcode you type in the coverage search into map coordinates. Only called when you press search.
Simple Icons (cdn.simpleicons.org) — the brand logos shown next to the platforms we list businesses on.
Google (google.com/s2/favicons, gstatic.com) — small site icons for partner platforms, and the Google logo on the Google Guaranteed page. These are images only; no Google Analytics, Google Ads or Google Fonts script runs on this site.
Fena (pay.fena.co) — only if an invoice we send you includes an instant bank-payment link and you choose to follow it. From that point you are on Fena's site under Fena's policies.

Links to Trustpilot, WhatsApp and the directory platforms we work with are ordinary outbound links — nothing loads from them until you click.

Owner action: these third-party requests can be removed by hosting the map tiles and icons on this server. That would make the cookie and transfer position simpler, and is worth doing before launch if the effort is small.

Section 6

How to control what is stored

In your browser

Every major browser lets you view, block and delete cookies and site data. Look for “Cookies and site data” or “Privacy and security” in your browser settings, or clear data for this site specifically from the padlock icon in the address bar.

Clearing site data for this domain signs you out immediately and resets the dashboard welcome wizard and guided tour. Blocking all cookies and local storage will stop you signing in at all — the sign-in session has nowhere to live.

By signing out

Signing out removes the session entry straight away. The sidebar preference cookie expires on its own after seven days.

Do Not Track and Global Privacy Control

Some browsers send a “Do Not Track” or Global Privacy Control signal. We do not need to act on either, because we do not track visitors, share browsing data or sell personal information in the first place. If we ever introduce anything that would make those signals meaningful, we will honour them and say so here.

Section 7

More information and complaints

What happens to the personal data behind your account — not just what is stored on your device — is set out in our Privacy Notice. The commercial terms for our services are in our Terms & Conditions.

Questions about this policy go to [PLACEHOLDER — contact email address] or +44 1494 265219. The regulator for cookies and electronic marketing in the UK is the Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF — helpline 0303 123 1113, or ico.org.uk/make-a-complaint. You can complain to them at any time, whether or not you have raised it with us first.

This policy is reviewed whenever the site's storage changes and at least once a year. The date at the top of this page shows the current version.

Questions about this page?

Get in touch and we'll answer within one working day.

[PLACEHOLDER — contact email address]
+44 1494 265219
[PLACEHOLDER — registered office address]

Privacy Notice

What we collect, why, and your rights under UK GDPR.

Terms & Conditions

The contract terms for every service we sell.