Cookie Policy

Cookies we set

• pl_sid — a random session identifier used to count visits and see how far people get through the questionnaire. On its own it says nothing about you. If you go on to place an order it is stored with that order, so we can tell which advert or page brought you to us; until then it is not connected to your name. It expires after 30 minutes of inactivity.
• pl_consent — records your choice about advertising cookies, so we do not ask again. Lasts 180 days.
• pl-consent-later — set only if you press “Not now” on the cookie banner. It records nothing but the fact that you asked us later, so the banner stops appearing for the rest of your visit. It is not a decision: you have neither accepted nor declined, and you will be asked again next time. It holds a date and nothing else, is never sent to us, and disappears when you close the tab.
• pl_lead — set once you have given us your email address or telephone number. It tells our server which enquiry a saved update belongs to, and it is what proves this browser is yours when you follow a “continue where you left off” link from us and we send your saved answers back to it. The cookie itself carries none of your answers — it is only the proof of who is asking. Lasts 30 days and cannot be read by scripts in your browser.
• pl_fs — set only if you accept advertising cookies. It holds a random reference to the record of how you first arrived, not the advertising identifier itself. Lasts 90 days, matching Google's own measurement window.

Saved progress, which is not a cookie

The questionnaire saves your answers as you type, so that closing the tab does not lose your work. That saving uses your browser's own storage rather than a cookie, and it is worth being clear about what that means.

It stays on your device. It is never sent to us with a page request, the way a cookie would be, and we cannot read it. It is what makes the “continue where you left off” prompt appear the instant you return to the same browser, with nothing to wait for and nothing to sign in to.

No consent is needed for it, because it does only the thing you asked for by starting the questionnaire, and nothing else. It is not used to recognise you, to measure anything, or for advertising.

You can delete it whenever you like, by clearing this site's data in your browser. That removes the copy on your device immediately. You can also choose “Start fresh” on the prompt itself, which does the same thing for you.

It is not, however, the only copy. Once you have given us an email address or a telephone number we keep an encrypted copy of your answers on our servers for up to 90 days, so that a reminder you open on a different device can restore your work rather than showing you an empty form. Our Privacy Notice sets out what that copy holds, how it is protected and how to have it deleted, along with the separate and much smaller record of your enquiry that our team can see.

Advertising, and your choice

We advertise on Google, and on Meta — Facebook and Instagram. If you accept advertising cookies, we record which advert brought you to the site and, if you go on to buy or book, tell that company its advert worked. That is how we know which adverts are worth paying for.

Before you have answered the banner, Google's measurement tag does run, with every one of its permissions switched off. In that state it cannot write a cookie, cannot read one, and is not told the advertising identifier from the link that brought you here. What it sends is an anonymous note that a page was viewed, which lets Google estimate how well an advert is working without knowing anything about you. We would rather say this plainly than leave it out.

Meta's pixel is different, and stricter. It has no switched-off mode: it either runs and stores a cookie on your device or it does not exist at all. So it loads only if you accept, and never before — silence is not consent, and an unanswered banner leaves it off.

If you decline, none of that happens either: neither tag runs at all, the advertising identifier in the link is not stored against you, the pl_fs cookie is not set, and nothing is sent to Google or Meta about your visit. The site works exactly the same either way.

You can change your mind at any time. “Cookie settings” in the footer of every page reopens the same panel the banner offers, shows what you chose last time, and takes effect immediately — you do not need to clear anything in your browser.

Cookies set by other companies

• Google Analytics (_ga, and one beginning _ga_) — set only if you accept. They count visits and show which pages are read before people leave. Each holds a randomly generated number and nothing that identifies you, and we never send Google your name, email address or telephone number. They last up to two years, and the same button that declines advertising cookies declines these too.
• Meta (_fbp, and _fbc if you arrived from a Facebook or Instagram advert) — set only if you accept. _fbp is a randomly generated browser identifier; _fbc records the advert you clicked. Together they let Meta tell us that an advert led to an enquiry, and let Meta recognise you on Facebook and Instagram. They last up to 90 days, and declining advertising cookies stops both.
• Cal.com — if you choose to open the appointment calendar on our contact page, it is loaded from Cal.com and may set its own cookies. Nothing is loaded until you click, so if you never open it, it never runs.
• Stripe — when you pay, and again when you confirm your identity, you are taken to Stripe's own secure page, which sets cookies needed to process the payment, run the check and prevent fraud.

What we deliberately do not do

• We use Google Analytics to count visits and see which pages people read, and no other analytics product. We never send it your name, email address or telephone number.
• We do not store your IP address or browser fingerprint in our visit statistics.
• We do not build a profile of you ourselves, and we do not share cookie data for anyone else's advertising. If you accept advertising cookies, Meta may use its pixel to show you our adverts on Facebook and Instagram; that is the whole of what it is for, and declining stops it.

Managing cookies in your browser

Every browser lets you see and delete cookies and site data, and block them entirely. Clearing this site's data also deletes the saved questionnaire progress described above. Blocking the essential cookies will stop the questionnaire remembering where you are, but you can still use the site and telephone us instead.

If anything here is unclear, call 0800 246 1961 or email hello@pendragonlegacy.co.uk.