Built for UK businessesLast updated 28 September 2026.
This is a draft and hasn’t yet been reviewed by a solicitor. If anything here is unclear or looks wrong, tell us.
1. The short version
Cookies are small files a website stores on your device; similar technologies include your browser's local storage and tracking pixels. The law (the Privacy and Electronic Communications Regulations) lets us use the ones the site needs to work without asking. For everything else we ask first, and nothing in those categories loads until you say yes.
You can change your choice at any time: .
2. Needed for the site to work
We don't ask before using these, because the site needs them. They don't track you across other sites.
wh_consent
Set by
whitsun
What it does
Remembers your cookie choice
How long
6 months
whitsun-demo-call (local storage)
Set by
whitsun
What it does
Remembers a demo call in progress so the page can show your call if it reloads while you're on the phone
How long
Up to 1 hour, removed when you delete the call
Booking page cookies
Set by
HubSpot
What it does
Only if you open the booking page: security and keeping the booking form working
How long
Session to 6 months, set on HubSpot's domain
3. Analytics, only if you say yes
These tell us how the page is used, so we can make it clearer.
_ga, _ga_*
Set by
Google Analytics
What it does
Counts visits and which sections and buttons are used
How long
Up to 2 years
_hjSessionUser_*, _hjSession_*
Set by
Hotjar
What it does
Shows how people scroll and tap, including short session recordings with the phone number field hidden
How long
Up to 1 year; 30 minutes
4. Marketing, only if you say yes
These tell us which ads bring people here, so we stop paying for the ones that don't work.
_fbp, _fbc
Set by
Meta
What it does
Tells Meta that someone who saw our ad visited, asked for a demo call or booked a consultation
How long
90 days
__hstc, hubspotutk, __hssc, __hssrc
Set by
HubSpot
What it does
Connects your visit to your record in our customer relationship system if you book a consultation
How long
Up to 6 months
If you accept marketing cookies, our server also tells Meta when you ask for a demo call, when the call ends and when you book, with a one-way scrambled (hashed) copy of your number, so Meta can match it to the ad you saw even if your browser blocks the Pixel. If you don't accept, we don't send this.
Meta and Google also use this data for their own purposes under their own privacy policies.
5. What we record without cookies
If you arrive from an ad, the web address carries the campaign's name. When you ask for a demo call, we store that name with your number so we know which ad worked. Nothing is stored on your device for this, and it is covered by our privacy policy.
6. Changing your mind
Use at any time. Withdrawing consent stops those cookies being used from then on; you can also delete cookies in your browser’s settings.
Questions: privacy@whitsun.ai.