1. Introduction
This Cookie Policy explains how Coontie Flow Ltd (“Coontie Flow”, “we”, “us”, “our”) uses cookies and similar technologies on coontieflow.digital. It should be read alongside our Privacy Policy, which explains how we handle personal data more generally.
We comply with the Privacy and Electronic Communications Regulations 2003 (PECR), the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and we follow the guidance issued by the Information Commissioner's Office (ICO). Where we use advertising or measurement technologies provided by Google (including Google Ads and Google Analytics), we also implement Google Consent Mode v2 so that no marketing or analytics signals are sent to Google until you have given your consent.
2. What is a cookie?
A cookie is a small text file that is placed on your device (computer, phone or tablet) when you visit a website. Cookies let a site recognise your device on subsequent visits and can be used to remember your preferences, keep you signed in, measure how the site is used, or deliver personalised advertising. We also use “similar technologies” such as localStorage, sessionStorage, tracking pixels and device identifiers. Throughout this policy, references to “cookies” include those similar technologies.
Cookies can be first-party (set by coontieflow.digital) or third-party (set by another domain, such as google.com). They can be session cookies (deleted when you close your browser) or persistent cookies (stored for a defined period).
3. Your consent and your choices
When you first visit coontieflow.digital you will see a cookie banner asking whether you accept optional cookies. Only strictly necessary cookies are loaded before you make a choice. You can:
- Accept all — turns on strictly necessary, analytics and marketing cookies;
- Reject all — keeps only strictly necessary cookies active;
- Customise — turn each optional category on or off individually;
- Change your mind later — click “Cookie settings” in the footer of any page at any time.
We store your choices in a small first-party cookie called bp_consent_v1 so we don't have to ask you again on every page. If you clear your browser data, or visit from a new device or browser, you will see the banner again and your choices will reset.
4. Our lawful basis
Under PECR, we may only store or read non-essential cookies on your device if you have given freely given, specific, informed and unambiguous consent. We rely on your consent for all analytics and marketing cookies. For strictly necessary cookies we rely on the PECR exemption that applies to cookies which are essential for a service you have explicitly requested (for example, remembering that you have already chosen your cookie preferences).
You do not have to accept optional cookies in order to access our content. Refusing them will not prevent you from browsing, reading our pages, or using our contact form.
5. The cookies we use
The tables below list the cookies we currently use and what they do. We review this list regularly. If we add a new cookie we will update this page and, where relevant, ask for your consent again.
5.1 Strictly necessary cookies (always on)
These cookies are essential for the site to function. They do not track you across other websites and they do not require consent.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
bp_consent_v1 |
coontieflow.digital (first party) | Stores your cookie-banner choices (accepted, rejected or customised categories). | 12 months |
PHPSESSID |
coontieflow.digital (first party) | Maintains a session while you fill in and submit our contact or booking form. | Session |
XSRF-TOKEN |
coontieflow.digital (first party) | Protects our forms from cross-site request forgery attacks. | Session |
5.2 Analytics cookies (optional — consent required)
If you accept analytics, we load Google Analytics 4 to help us understand which pages visitors read, how they arrived, and which parts of the site could be improved. Google Analytics is configured with IP anonymisation; we do not use it to identify individual visitors.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics (Google Ireland Ltd) | Distinguishes unique visitors by assigning a pseudonymous client identifier. | 24 months |
_ga_<container-id> |
Google Analytics (Google Ireland Ltd) | Persists session state for the Google Analytics 4 property. | 24 months |
_gid |
Google Analytics (Google Ireland Ltd) | Distinguishes visitors within a 24-hour window. | 24 hours |
5.3 Marketing cookies (optional — consent required)
If you accept marketing, we load Google Ads conversion tracking and related measurement tags so that we can see which of our ads lead to bookings, and so that we can stop wasting money on campaigns that don't work. We do not sell your data to advertisers. We do not use this data to build a profile for targeted advertising off our site, beyond what Google itself offers as part of its standard advertiser tools.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_gcl_au |
Google Ads (Google Ireland Ltd) | Stores click information to attribute conversions to specific Google Ads campaigns. | 90 days |
_gcl_aw |
Google Ads (Google Ireland Ltd) | Stores the Google Ads click identifier (GCLID) used for conversion measurement. | 90 days |
IDE |
doubleclick.net (Google Ireland Ltd) | Measures the effectiveness of Google Ads and helps limit how often you see the same ad. | 13 months |
NID |
google.com (Google Ireland Ltd) | Stores your Google advertising preferences and is used for ad measurement. | 6 months |
6. Google Consent Mode v2
We implement Google Consent Mode v2. Before you make a choice, our site sets the following default consent signals to “denied”:
ad_storage— storing advertising cookies and identifiers;ad_user_data— sending user data to Google for advertising;ad_personalization— using data for personalised advertising;analytics_storage— storing analytics cookies and identifiers.
If you accept the relevant category in our banner, we update the corresponding signal to “granted”. Until you do, Google receives only cookieless pings (basic, non-identifying signals) so that campaign modelling can continue without tracking you as an individual. If you reject, no personal data is shared with Google Ads or Google Analytics.
7. Third-country transfers
Google Ads and Google Analytics are provided by Google Ireland Limited, acting on behalf of Google LLC, which is based in the United States. When you consent to marketing or analytics cookies, some data may be transferred outside the United Kingdom. Where that happens we rely on the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or a UK adequacy decision, as appropriate, to ensure that your data is protected to the standard required by UK GDPR.
8. Managing cookies in your browser
Alongside our banner, you can also manage cookies at the browser level. Most modern browsers let you view, block or delete cookies, and tell sites not to track you. The exact steps depend on your browser:
- Google Chrome: Settings → Privacy and security → Cookies and other site data.
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
- Apple Safari: Settings → Privacy.
- Microsoft Edge: Settings → Cookies and site permissions.
Blocking strictly necessary cookies at the browser level may prevent parts of the site (especially forms) from working correctly.
9. Do Not Track and the Global Privacy Control
“Do Not Track” (DNT) is a browser setting that is not consistently implemented across the web. We do not currently change our behaviour in response to DNT. We do, however, respect the Global Privacy Control (GPC) signal where your browser sends it: if GPC is enabled when you first visit, we treat it as a rejection of marketing cookies and load no marketing tags.
10. Children
Our services are intended for adults. We do not knowingly target our site or our advertising at children under 16. If you are a parent or guardian and believe your child has interacted with our site, please contact us and we will delete any data we hold.
11. Your rights
Because some cookies involve processing personal data, you also have rights under UK GDPR, including the right to access, correct, delete or object to that processing. These rights, and how to exercise them, are explained in full in our Privacy Policy. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
12. Changes to this Cookie Policy
We review this Cookie Policy regularly and update it when we add, remove or change a cookie, when a vendor changes its behaviour, or when the law changes. Significant changes will be published on this page with a new version number and date. If a change affects the cookies that require consent, our banner will re-appear so that you can make a fresh choice.
13. Contact us
If you have any question about this Cookie Policy or about how we handle cookies:
Coontie Flow Ltd — Data Protection
10 Charlotte Square, Edinburgh EH2 4DR, United Kingdom
Email: [email protected]
Phone: +44 7555 445566