Cookie Policy

Strictly necessary (always on)

Required for the site to function and for what you ask us to do. These do not require consent:

1. wf_client and wf_admin: keep you signed in to your account, or our team to the admin area (7 days).
2. wf_consent (with a copy in your browser storage): remembers your cookie choice (180 days).
3. wf_seen: in a company application, remembers which updates from our team you have already seen (until you close the browser).
4. wf_draft_ entries in your browser storage: a company application you have started, until you submit it.
5. wf_auth, wf_assistant_chat_v1 and wf_assistant_open_v1 in your browser storage: your sign-in state and your chat with our website assistant, for the open tab only (after 2 hours without a message the chat is not restored).
6. weform_onboarded_v3, wf_copilot_collapsed and wf_ai_hint_dismissed in your browser storage: display settings such as tips you have closed.
7. wf_nostats: set when you choose Reject all, so we know not to count or record your visits from then on (1 year).
8. wf_internal: set only for our team, through a link, so their own visits are left out of our statistics (1 year).

Visit statistics (on unless you object)

We count visits to our website in totals: how many visits came from each channel, source and campaign, from which country, region and city, on which type of device, browser and operating system, and which page people arrived on. These totals name no one. We count every visitor this way, in the UK as everywhere else, until you choose Reject all, which is how you object. We also count visits from automated programs (bots) by the reason we spotted them, and delete those counts after 13 months.

Our server also keeps a record of each time you arrive on our website from outside it: your IP address, approximate location (city level) and network provider, your device, browser and operating system, the page you arrived on, the website that sent you (the site, not the page), any campaign tags in the link and which kind of ad you clicked (not the click identifier). It recognises a return visit the same day by a code made from your IP address, browser details and the date with a secret key, so the code changes every day: nothing is stored in your browser for this and no cookie is set. In the European Economic Area (EU outermost regions included), the UK, Jersey, Guernsey, the Isle of Man and Gibraltar, Quebec (and Canada when we cannot tell the province), Brazil, Turkey, the United Arab Emirates, Colombia, Peru, Argentina and Chile, and wherever we cannot tell where you are, the record is anonymous until you accept analytics: only your country, not your IP address, city or network provider (only whether it is a data centre), and no such code. This record holds only the page you arrive on: the pages you view after it and the session replay are described under Analytics below. The record is deleted 13 months after that day, and the IP address stored with it 90 days after we collect it. When you create an account and your browser did not send how you found us, we take it from that day's record, unless you chose Reject all or you are in one of the places above.

We do this from your first arrival, without asking for consent (in the places above, only the anonymous record until you accept), as our legitimate interest in knowing how our website is used and who our marketing brings to it, and you can object at any time. Choose Reject all, on the banner or in Cookie settings (or save your settings with Analytics off): we then set wf_nostats and stop counting and recording your visits. What we recorded before that is kept and deleted as described above.

Analytics (consent required, or on unless you object: see section 1)

Help us understand how the site is used, improve it and help you when you contact us. Where section 1 says so, these run from your first arrival until you choose Reject all, on the same basis as Visit statistics above. Everywhere else they run only after you accept: until you answer, the pages you view and a masked recording of your visit stay in your browser and are not sent to us. Accept sends what is less than an hour old; Reject all, or closing or reloading the page, discards it. They set wf_vid, a first-party visitor identifier kept in your browser for up to one year. We link it to your visits, your IP address, approximate location (city level) and network provider, your device and browser, and, if you sign in or contact us, to your account, enquiry or order. A browser where you have signed in stays linked to your account. We may also match a visit to an account or enquiry that used the same IP address. For the open tab they also keep the page you arrived on, the site that sent you and any campaign tags in the link (wf_attrib), and send them with an enquiry so we know how you found us. The record our server kept of your arrival (see Visit statistics) becomes part of your visitor record. When you pay for an order, a short code made from its reference is kept in your browser storage for the open tab (wf_purchase_sent), so we count the payment only once.

We also record visits to our own site as session replays: what the page shows, clicks, scrolling, browser errors, and your device, browser and country. Text you type into forms and chats is masked in your browser before it is sent to us (replaced with asterisks), and so are names, numbers and other personal details shown in your account. A replay still shows the page layout and standard labels, such as the status of an order or application, and options you tick or pick may still be recorded. Pages where you sign a document or take an ID check are not recorded. Our team uses replays to fix problems, improve the site and help you with your enquiry or order.

Page views and events are deleted after 13 months, and the IP address stored with them 90 days after we collect it. Replays are deleted after 30 days. A replay we mark to look into a problem is kept up to 20 more days, never more than 50 days after the visit. Our record of a visitor not seen for 13 months is deleted, unless it is linked to an enquiry or order. If you send an enquiry or start an order, we keep a summary of your visit (source, location and device) with it for as long as we keep that enquiry or order. If you choose Reject all, recording stops from then on, Visit statistics included, and the visitor identifier and wf_attrib are deleted from your browser. What we recorded before is kept and deleted as described above.