Your current choice
When you first arrive we set only strictly necessary cookies. Analytics cookies stay switched off until you press Accept all cookies. Declining costs you nothing: every page works the same either way.
The law we follow
We comply with the Privacy and Electronic Communications Regulations (PECR) and the UK GDPR. That means we ask for your consent before setting any cookie that is not strictly necessary, we make declining as easy as accepting, we never treat silence as agreement, and we ask again after six months.
What is a cookie?
A cookie is a small text file a website stores on your device so it can remember something between page loads, such as the fact you are signed in. We also use your browser's local storage in the same way, and this policy covers both.
Strictly necessary (no consent needed)
These keep the website and client portal working and secure. They cannot be switched off from the banner, though you can block them in your browser. If you do, signing in and saving a brief will stop working.
| Name | Set by | Purpose | Expires |
|---|---|---|---|
| sb-*-auth-token | Banny Digital (Supabase) | Keeps you signed in to the client portal and protects your session. | Session, refreshed while you stay signed in |
| banny_cookie_consent_v1 | Banny Digital | Remembers the cookie choice you made on this banner. | 6 months (stored in local storage) |
| banny_intake_token / banny_ref | Banny Digital | Saves your brief so you can come back and finish it, and remembers which partner referred you. | Until you clear your browser storage |
Analytics (only with your consent)
We use Google Analytics 4 to understand how people find and use the public website: pages viewed, how far down a page people read, which buttons get clicked, and whether an enquiry form is started or finished. We use this to improve the site, not to profile you.
- IP addresses are anonymised and we do not enable Google advertising features.
- We never send Google your name, email address, phone number or enquiry content.
- Analytics is not loaded at all inside the signed in client portal or admin area.
- Google acts as our processor and may transfer data outside the UK under the UK International Data Transfer Addendum.
| Name | Set by | Purpose | Expires |
|---|---|---|---|
| _ga | Google Analytics 4 | Tells apart one visitor from another so visit counts are not double counted. | 2 years |
| _ga_7VRPYH4449 | Google Analytics 4 | Holds the current session state for this website's Analytics property. | 2 years |
Advertising cookies
We do not use advertising, remarketing or cross site tracking cookies, and we do not sell or share your data with advertising networks.
Changing or withdrawing consent
- Use the Cookie settings link in the footer, or the button above, to change your choice at any time. If you decline after previously accepting, we delete the Google Analytics cookies from your browser.
- You can also delete or block cookies in your browser settings, or install the Google Analytics opt-out add-on for every website.
Third parties that may set cookies
Beyond Analytics, cookies can be set by the providers that run the service for us: our hosting and content delivery platform, our authentication and database provider, and our email delivery provider. Each is bound by a written data processing agreement. Our Privacy Policy lists them and explains your rights, and our GDPR statement covers how we handle data as a processor for clients.
Questions
Email hello@banny.co.uk and a person, not a ticket queue, will reply.
This document is provided as a plain-English starting point. Please review with your solicitor before relying on it in a dispute.