1. Who's responsible
This site is operated by TicketWave HQ Ltd, trading as UK Web Marketing — registered in England and Wales, company number 17143167, registered office Radley House, Richardshaw Road, Pudsey, LS28 6LE. Cookie questions: hello@ukwebmarketing.com.
2. What cookies are (in plain English)
Cookies are small text files a website (or one of its embedded providers) asks your browser to store on your device. Some are essential — they make a page load, keep you logged in, or stop someone hijacking your form submission. Others profile what you do online so an advertiser can show you a specific ad. UK law (the Privacy and Electronic Communications Regulations — "PECR" — read alongside UK GDPR) treats those two categories very differently.
Strictly-necessary cookies don't need your consent. Everything else (analytics, advertising, personalisation, cross-site tracking) does — and the consent has to be active, specific, and as easy to refuse as it is to accept.
3. What we set on this website
As of the last-updated date above, this website sets no cookies of its own. Not for analytics. Not for advertising. Not for personalisation. The site is statically rendered on Vercel London (region lhr1); Vercel Analytics and Speed Insights run on first-party endpoints (/_vercel/insights and /_vercel/speed-insights), are cookieless, and don't profile you.
If a future page genuinely needs a strictly-necessary cookie (for example, a session token to remember a multi-step form), we'll list it in the table below before it ships.
4. Cookies set by embedded providers
When you take a specific action that hands you off to another company's domain, that company sets its own cookies under its own privacy policy. The two we currently route to:
| Cookie | Provider | Purpose | Lifetime | Category |
|---|---|---|---|---|
__stripe_mid, __stripe_sid, plus Stripe Checkout session cookies | Stripe (Stripe Payments Europe Ltd, Ireland) | Fraud prevention + maintaining your Checkout session while you pay. Set only on checkout.stripe.com, not on ukwebmarketing.com. | 30 minutes (session) to 1 year (machine ID) | Strictly necessary (fraud + payment) |
| WhatsApp / Meta cookies | WhatsApp / Meta Platforms Ireland Ltd | If you click the WhatsApp link and start a conversation, Meta will set cookies on wa.me / web.whatsapp.com under their own policy. Nothing is set on our domain. | Per Meta's policy | Out of scope (third-party domain) |
Both Stripe and WhatsApp are listed in our sub-processor disclosure; both have their own DPAs in place with us.
5. Why we don't run Google Analytics, Meta Pixel, or similar
For three reasons. First, the regulated UK verticals we work with (clinics, solicitors, schools, accountants) regularly need to demonstrate that visitor data isn't being shared with US ad-tech platforms. Second, the ICO's 2022–2024 enforcement focus has been on exactly this kind of unconsented profiling. Third, we don't need it — Vercel's first-party, cookieless analytics covers our operational needs.
If a client commissions paid advertising, we may install consented analytics (e.g. Plausible, EU-resident, cookieless by default; or Google Analytics 4 behind a consent banner) on their site — never on this one.
6. How to control cookies
You can block or delete cookies in your browser settings at any time. aboutcookies.org has step-by-step guides for every major browser. Blocking strictly-necessary cookies on Stripe Checkout will stop the payment flow working; everything else on this site continues to work without cookies.
You can also ask your browser to send a Global Privacy Control signal — we honour it as a "no" to anything beyond strictly-necessary, on every page.
7. Changes to this policy
If we ever add a cookie to this site, the table in section 4 changes before the cookie ships, and the "last updated" date above is bumped. Material changes (e.g. a new analytics cookie) will trigger a consent banner — we won't quietly add tracking. The changelog at the bottom of this page logs every revision.
8. Related policies
Privacy Policy · Sub-processors · Data Processing Agreement · All legal documents
9. Changelog
- v1.0 — 2026-06-03 — split out from the Privacy Policy into a standalone document. Added per-cookie table, GPC honour, and the rationale for not running Google Analytics / Meta Pixel.