Cookie Policy
Last updated: 15 June 2026
This Cookie Policy explains how Cansford Laboratories (“we”, “us”, “our”) uses cookies and similar technologies on our website. It should be read alongside our Privacy Policy.
This policy is provided in accordance with the Privacy and Electronic Communications Regulations 2003 (PECR), the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Data (Use and Access) Act 2025.
1. What are cookies?
Cookies are small text files placed on your device (computer, tablet or mobile) when you visit a website. They are widely used to make websites work, to improve efficiency, and to provide information to site owners. “Similar technologies” — such as pixels, tags, software development kits (SDKs), device fingerprinting and browser local storage — perform comparable functions and are treated the same way under UK law.
Cookies may be “first-party” (set by this website) or “third-party” (set by another organisation, such as an analytics or marketing provider). They may be “session” cookies (deleted when you close your browser) or “persistent” cookies (which remain for a set period).
2. How we use cookies and your consent
Under PECR and the UK GDPR, we will only place non-essential cookies on your device with your prior consent. When you first visit our website, you are shown a cookie banner that lets you accept or reject non-essential cookies, and to set granular preferences by category.
Strictly necessary cookies do not require consent because they are essential for the website to function. All other cookies — including analytics and marketing cookies — are not set until you have given your consent. You can withdraw or change your consent at any time (see section 7).
- Consent is requested before any non-essential cookie is set.
- Accepting and rejecting cookies is equally easy.
- There are no pre-ticked boxes, and continued browsing is not treated as consent.
3. Categories of cookies we use
3.1 Strictly necessary cookies
These cookies are required for the website to operate and for features you have requested (such as logging in, security and remembering your cookie choices). They cannot be switched off in our systems and do not require your consent.
| Cookie name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
__cf_bm |
Cloudflare (via kinsta.cloud) | Bot management and security; distinguishes humans from automated traffic to protect the website. | Third-party | 30 minutes |
__cf_bm |
Cloudflare (via hsforms.net) | Bot management for the embedded HubSpot forms; distinguishes humans from automated traffic. | Third-party | 30 minutes |
wordpress_*, wordpress_logged_in_* |
Cansford Labs (WordPress) | Authenticates logged-in users and maintains the session. Only set for registered/admin users. | First-party | Session |
PHPSESSID |
Cansford Labs | Maintains the server-side session state. Typically set when interacting with forms. | First-party | Session |
Consent cookie (e.g. cookie consent ID) |
Consent banner | Records the visitor’s cookie consent choices so the banner is not shown again. | First-party | Up to 1 year |
3.2 Analytics / performance cookies
These cookies help us understand how visitors use our website by collecting information on an aggregated basis. They are only set with your consent.
| Cookie name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
_ga |
Google Analytics 4 | Distinguishes unique users by assigning a randomly generated client ID. | Third-party | 2 years |
_ga_PWT4TJP7TT |
Google Analytics 4 | Persists the GA4 session state for this property. | Third-party | 2 years |
3.3 Marketing / tracking cookies
These cookies are used to make advertising more relevant to you and to measure the effectiveness of marketing campaigns. They are only set with your consent.
| Cookie name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
_gcl_au |
Google Ads (Conversion Linker) | Stores ad-click information so conversions can be attributed to Google Ads campaigns. | Third-party | 90 days |
test_cookie |
Google / DoubleClick | Checks whether the browser supports advertising cookies, used for ad delivery. | Third-party | 15 minutes |
The cookies listed above are based on an inspection of the live website. HubSpot forms and WordPress login/session cookies (e.g. PHPSESSID, hubspotutk, __hstc) may also be set on pages containing an embedded form or for logged-in users. This list should be reviewed periodically and re-scanned when integrations or plugins change.
4. Third-party cookies
Some cookies are set by third parties that provide services on our behalf. These providers may process your data outside the UK; where they do, appropriate safeguards (such as the UK International Data Transfer Agreement or Addendum) are in place. The third parties used may include:
- Google (Google Analytics 4, Google Ads and DoubleClick) — see Google’s privacy policy.
- HubSpot — our CRM and forms provider; see HubSpot’s privacy policy.
- Cloudflare — security and bot protection; see Cloudflare’s privacy policy.
We do not control the setting of third-party cookies, so we recommend reviewing the relevant third party’s own cookie and privacy policies.
5. Legal basis
Under PECR, your consent is the basis on which we place all non-essential cookies. Where the use of cookies involves the processing of personal data, the relevant lawful basis under the UK GDPR is your consent (Article 6(1)(a)), except for strictly necessary cookies where we rely on our legitimate interests (Article 6(1)(f)) in operating a secure and functional website.
6. How long cookies last
The duration each cookie remains on your device is set out in the tables above. Session cookies expire when you close your browser; persistent cookies remain until they expire or you delete them.
7. Managing and withdrawing consent
You can change or withdraw your consent at any time using the cookie preferences link on our website (usually found in the footer or via the cookie banner). Withdrawing consent will not affect cookies that have already been set, but you can also delete these through your browser.
Most browsers also let you block or delete cookies through their settings. Please note that blocking strictly necessary cookies may affect how the website functions. Guidance for common browsers is available from their respective help pages, and general information about cookies is available at www.aboutcookies.org.
8. Changes to this policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use or for legal or operational reasons. The “Last updated” date at the top shows when it was last revised. We recommend reviewing it periodically.
9. Contact us and complaints
If you have any questions about this Cookie Policy or how we use cookies, please contact us:
Cansford Laboratories Ltd
1A Pentwyn Business Centre
Wharfedale Road
Cardiff CF23 7HB
Email: info@cansfordlabs.co.uk
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.