01323 524000

Menu

Legal Cookie Notice

Cookie notice

This policy is effective from: January 2026

Cookie Policy for Zunoma Ltd

Legal framework

This cookie notice is provided in accordance with Regulation 6 of the Privacy and Electronic Communications (EC Directive) Regulations 2003 (“PECR”), as amended by Section 112 and Schedule 12 of the Data (Use and Access) Act 2025 (“DUAA 2025”). These regulations require us to obtain your consent before storing or accessing information on your device, except where specific exemptions apply.

Where cookies process personal data, the UK General Data Protection Regulation (“UK GDPR”) also applies, and we rely on your consent under Article 6(1)(a) for non-exempt cookies.

What are cookies and why do we use them?

Cookies are small text files that are placed on your device when you visit our website. We use cookies and similar technologies to improve your experience, analyse how you use our site, and for marketing purposes.

This notice explains what cookies we use, why we use them, and how you can manage your cookie preferences. Some cookies require your consent, whilst others are exempt from consent requirements under PECR but still require transparency.

Managing your cookie preferences

When you first visit our website, you’ll see a cookie consent banner powered by CookieYes that allows you to choose which types of cookies you wish to accept. You can accept all cookies, reject non-essential cookies, or customise your preferences by category.

You can change your cookie preferences at any time by clicking the “Cookie Settings” link in the footer of any page on our website.

You can also prevent cookies from being set by adjusting your browser settings. However, please note that disabling cookies may affect the functionality of our website and limit your ability to use certain features.

How we collect and store your consent

We use CookieYes, a consent management platform, to collect and record your cookie preferences. When you make a choice on our cookie banner, CookieYes records:

  • The date and time of your consent
  • Which cookie categories you accepted or rejected
  • The version of our cookie notice you consented to
  • Your consent method (Accept All, Reject All, or Custom preferences)

We retain consent records for three years to demonstrate compliance with data protection regulations. This record is stored in a cookie called “cookieyes-consent” on your device.

Consent refresh: Following ICO guidance, we may periodically ask you to review and refresh your cookie preferences to ensure your choices remain current.

Cookies that do not require your consent

Under Schedule A1 to PECR (inserted by Schedule 12 of DUAA 2025), certain technologies are exempt from consent requirements. However, we still disclose these cookies for transparency, and you retain rights to object to some of them.

The five categories of exempt cookies are:

  1. Communication cookies – Technologies used solely to transmit communications over an electronic network, such as load-balancing session cookies that route your connection to the appropriate server.
  2. Strictly necessary cookies – Technologies essential to provide the service you have requested, including shopping basket functionality, security measures, fraud prevention, authentication during login sessions, and storing your cookie consent preferences.
  3. Statistical purposes cookies – Technologies used solely to collect aggregate, anonymised information about how visitors use our website, with a view to making improvements. Important: We provide a simple and free way to object to these cookies through our cookie preference centre.
  4. Appearance cookies – Technologies used solely to adapt how our website appears or functions based on your preferences, such as language settings or responsive design detection. Important: We provide a simple and free way to object to these cookies through our cookie preference centre.
  5. Emergency assistance cookies – Technologies used solely to identify your geographical location when you request emergency assistance. (This exception does not apply to our website.)

Please note: Marketing and advertising cookies are never exempt from consent requirements and always require your explicit permission before they can be set.

Your right to object to all cookies

You have the right to control all cookies used on this website, including those we rely on under lawful exemptions:

  • For cookies requiring consent: You may refuse consent by clicking “Reject All” in our cookie banner, or by managing your preferences through the cookie settings. It is as easy to refuse cookies as it is to accept them.
  • For statistical purposes and appearance cookies: Even though these cookies are exempt from consent requirements under PECR, we provide you with a simple and free way to object. You can opt out at any time using our cookie preference centre by clicking “Cookie Settings” in the footer of any page.
  • To withdraw consent: You can change your cookie preferences at any time by accessing CookieYes’s cookie settings. When you withdraw consent, we will delete information gathered under that consent and cease processing.
  • For all Google Analytics tracking: You can opt out of Google Analytics tracking across all websites by installing the Google Analytics Opt-out Browser Add-on.

Note: Blocking strictly necessary cookies may prevent our website from functioning correctly. However, you can still block these through your browser settings if you wish.

Categories of cookies we use

We categorise cookies into four types. Some are essential for the website to function, whilst others require your consent.

Strictly necessary cookies (exempt from consent under PECR Schedule A1)

These cookies are essential for our website to function properly and do not require your consent. They are usually only set in response to actions you take, such as setting your privacy preferences or filling in forms. You can set your browser to block these cookies, but this may prevent parts of the website from working.

These cookies fall under the “strictly necessary” exemption in Schedule A1 to PECR. Whilst consent is not required, we disclose them here for transparency.

Cookie name: cookieyes-consent
Provider: CookieYes
Duration: 1 year
Purpose: Records your consent preferences including which cookie categories you have accepted or rejected

Cookie name: __cf_bm
Provider: Cloudflare
Duration: 30 minutes
Purpose: Bot management and security cookie that protects the site from spam and automated attacks

Cookie name: _cfuvid
Provider: Cloudflare
Duration: Session
Purpose: Session identifier used for bot detection and rate limiting

Cookie name: SIDCC, __Secure-1PSIDCC, __Secure-3PSIDCC
Provider: Google
Duration: 1 year
Purpose: Security cookies that provide cross-site request forgery (CSRF) protection

Cookie name: WordPress session cookies
Provider: Zunoma
Duration: Session
Purpose: Temporary cookies that maintain your session state whilst browsing the website

Functional cookies (may include appearance cookies exempt under PECR Schedule A1)

These cookies enable enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we have added to our pages. Some functional cookies may qualify as “appearance cookies” under PECR Schedule A1 and be exempt from consent requirements, but we still provide you with the ability to object to them.

If you reject these cookies, some or all of these services may not function properly.

Cookie name: SID, SSID, HSID
Provider: Google
Duration: 2 years
Purpose: Authentication and session management cookies set when you interact with Google services embedded on our site

Cookie name: APISID, SAPISID
Provider: Google
Duration: 2 years
Purpose: Authentication cookies for Google APIs used by embedded services

Cookie name: __Secure-1PSID, __Secure-3PSID
Provider: Google
Duration: 2 years
Purpose: Secure authentication tokens with enhanced security protections

Cookie name: __Secure-1PAPISID, __Secure-3PAPISID
Provider: Google
Duration: 2 years
Purpose: Secure API authentication tokens

Analytics and performance cookies (may qualify for statistical purposes exemption under PECR Schedule A1)

These cookies allow us to count visits and understand how visitors use our website. They help us measure and improve the performance of our site by showing us which pages are most and least popular, and how visitors move around the site.

Legal basis: Where analytics cookies collect only aggregate, anonymised information solely for the purpose of improving our website, they may qualify for the “statistical purposes” exemption under PECR Schedule A1. However, we provide you with a simple and free way to object to these cookies through our cookie preference centre, and you can also opt out using the Google Analytics Opt-out Browser Add-on.

If you do not allow these cookies, we will not know when you have visited our site and will not be able to monitor its performance to improve your experience.

Cookie name: _ga
Provider: Google Analytics 4
Duration: 2 years
Purpose: Google Analytics visitor identifier containing a randomly generated unique ID used to identify you across visits. IP anonymisation: Google Analytics 4 automatically anonymises your IP address before any data is stored—your IP address is truncated and cannot be used to identify you personally.

Cookie name: _ga_16J9GM9X99
Provider: Google Analytics 4
Duration: 2 years
Purpose: Google Analytics measurement cookie storing session data, timestamps, and engagement metrics. Data is aggregated to understand overall patterns of website usage.

Google Analytics opt-out options:

  • Use our cookie preference centre to reject analytics cookies by clicking “Cookie Settings” in the footer
  • Install the Google Analytics Opt-out Browser Add-on to block GA tracking across all websites

Important disclosures about our Google Analytics configuration:

  • Third party processor: This data is processed by Google LLC, which acts as our data processor and processes information only on our behalf to help us improve our website
  • Advertising features disabled: We do not use Google Analytics for advertising purposes, remarketing, or cross-site tracking. Google Signals and Google Ads integration are disabled
  • Anonymisation: All visitor IP addresses are automatically anonymised before storage, and the information collected is aggregated for statistical analysis only
  • More information: Google Privacy Policy | How Google uses data from sites that use Google Analytics

sc_is_visitor_unique StatCounter StatCounter unique visitor identification cookie helping us understand how many unique visitors view our site 2 years __hstc HubSpot HubSpot main visitor tracking cookie containing visitor token and timestamps to understand visitor behaviour 13 months hubspotutk HubSpot HubSpot visitor identity token used to track visitors across visits and deduplicate contacts in our CRM 13 months __hssc HubSpot HubSpot session tracking cookie that increments page view count within each session 30 minutes __hssrc HubSpot HubSpot browser session detection cookie determining if the visitor has restarted their browser Session

Marketing and advertising cookies (always require consent – no exemptions)

These cookies may be set by our advertising partners or used for our marketing purposes. They may be used to build a profile of your interests and show you relevant advertisements on other sites.

Legal basis: Marketing and advertising cookies are never exempt from consent requirements under PECR and always require your explicit permission before they can be set. These cookies will only be placed on your device if you accept marketing cookies through our consent banner.

If you do not allow these cookies, you will experience less targeted advertising.

Cookie name: messagesUtk
Provider: HubSpot
Duration: 13 months
Purpose: HubSpot Conversations (live chat) visitor tracking token used to identify you across chat sessions

Cookie name: NID
Provider: Google
Duration: 6 months
Purpose: Google advertising cookie used for ad personalisation, frequency capping, and measuring advertising effectiveness

Cookie name: DSID
Provider: Google DoubleClick
Duration: 2 weeks
Purpose: DoubleClick advertising identifier used for cross-site tracking, ad targeting, and remarketing campaigns

Cookie name: id
Provider: Google DoubleClick
Duration: 2 years
Purpose: DoubleClick preference cookie (when set to “OPT_OUT”, indicates you have opted out of personalised advertising)

Third-party service providers

We work with the following third-party service providers who may set cookies on our website:

Some of these service providers are based in the United States. International data transfers are protected by Standard Contractual Clauses approved by the UK Information Commissioner’s Office. Your rights under UK data protection law remain unaffected.

Data retention

Different cookies have different retention periods:

  • Session cookies: Deleted when you close your browser
  • Short-term cookies: 30 minutes to 6 months
  • Long-term cookies: Up to 2 years
  • Consent records: Retained for 3 years after your last interaction for compliance purposes

We review our cookie retention periods regularly to ensure they remain proportionate and necessary for the purposes for which they are processed.

Your data protection rights

Under UK data protection law (UK GDPR and PECR as amended by DUAA 2025), you have the following rights regarding the personal data we collect through cookies:

  • Right of access: You can request a copy of the personal data we hold about you
  • Right to rectification: You can ask us to correct inaccurate personal data
  • Right to erasure: You can ask us to delete your personal data in certain circumstances
  • Right to restriction: You can ask us to restrict the processing of your personal data in certain circumstances
  • Right to data portability: You can ask us to transfer your personal data to another organisation or to you
  • Right to object: You can object to the processing of your personal data in certain circumstances, including for marketing purposes. This right extends to all cookies, including those exempt from consent requirements
  • Right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time by adjusting your cookie preferences. Withdrawing consent is as easy as giving it—simply click “Cookie Settings” in the footer or click here. When you withdraw consent, we will delete information gathered under that consent and cease processing
  • Right to lodge a complaint: You have the right to complain to the Information Commissioner’s Office (ICO) if you believe we have not handled your personal data lawfully. Visit ico.org.uk/make-a-complaint or call 0303 123 1113

To exercise any of these rights, please contact us using the details below.

Data controller information

The data controller responsible for your personal data collected through cookies is:

Zunoma Ltd
45 Brampton Road
Eastbourne
East Sussex
BN22 9AH
United Kingdom

Company Registration Number: 00320785
Email: dataprotectionofficer@zunoma.com
Telephone: 01323 524000

Updates to this cookie notice

We may update this cookie notice from time to time to reflect changes in the cookies we use, for operational reasons, or to comply with legal or regulatory requirements including updates to ICO guidance on PECR and DUAA 2025. The current version is always available at this URL.

More information and contact

If you have any questions about our use of cookies or this cookie notice, please contact us:

For more information about your privacy rights, please see our Privacy Policy.

You can also find helpful information about cookies and how to manage them at: