Cookie Policy

If cookies are blocked, your choice can apply in memory to the current page but may need to be made again after you move to another page or return later.

Live Quotes

When you first add a product to My Quote, the first-party tp_quote_basket cookie lets that browser return to the Quote. It lasts up to 30 days and is renewed when the Quote changes. It contains a random access token, not products, contact details or payment information. A private saved-Quote link or QR transfer can give another browser its own token.

Discount codes and mailing offers

When you apply a discount code, the first-party tp_discount cookie remembers the selected code for up to 30 days, or until the offer ends if that is sooner. The live Quote remains the final source of its availability and price. Reading a page does not extend the cookie.

A short mailing link can set the first-party tp_discount_offer session cookie so the same offer can be shown while you browse. It lasts for no more than 24 hours and normally ends with the browser session. Visiting a link does not apply the discount or use a single-use code.

These cookies contain signed offer references rather than contact details. An offer may separately show a welcome name supplied for that mailing. Our Privacy Policy explains how we use and remove that limited personalisation.

Private Order Request confirmations and payment receipts

A private Order Request link sets the tp_order_receipt cookie so you can return to your confirmation and, if you paid by card, your payment receipt. It contains an access token rather than Order or card information, works only in the Order Request area and expires when private access ends, normally after about 90 days.

Short-lived service and safety storage

Session storage helps prevent measurement on excluded pages and retry a privacy-rights request if delivery fails. It contains no form content or browsing history and normally ends with the tab. An undelivered rights request is discarded when next checked after seven days.

Security services may also process a short-lived request or IP-derived identifier to limit abuse. They do not put card details in our cookies.

Stripe’s secure payment fields may use cookies or similar technologies needed to process a card payment and prevent fraud. Stripe controls that service and explains its processing in Stripe’s Privacy Policy.

Staff measurement exclusion

Authorised developers can choose to inspect the website during maintenance. The first-party tp_maintenance_preview cookie remembers that access for up to 30 minutes. It contains signed account and session references, works only with that developer’s active sign-in and is removed when they choose End preview. It does not measure browsing or grant access after sign-out.

After a staff member signs in to our content-management system, the first-party tp_recent_staff_login cookie keeps website measurement off on that browser, including after sign-out. It lasts up to one year and contains no account or browsing history. It does not grant access or change saved privacy choices.

Remembered display choices

When you use a labelled display control, first-party cookies can remember:

• whether catalogue prices are emphasised including or excluding VAT;
• the quantity used for product-price comparisons; and
• dispatch or collection preferences used while browsing.

They are named tp_vat_display, tp_catalogue_price_* and tp_catalogue_dispatch_* and last for no more than one year. The relevant control explains that the change is remembered and the display preferences panel lets you forget saved choices.

These choices change only how the catalogue is displayed or configured. They do not decide whether VAT applies, change a contractual price or create an Order.

Anonymous site statistics

Our own daily counter uses no measurement cookie, visitor identifier or fingerprint. It sends small daily totals to PostHog Cloud EU, combining or withholding small groups. When enabled, Vercel Web Analytics also counts visits to approved public pages without an analytics cookie or permanent cross-site identifier. Its temporary daily visitor reference is discarded after 24 hours. Read Vercel’s Web Analytics privacy information.

The tp_statistics_choice cookie described above records an express allow or objection for both providers. Without a recorded choice, these statistics are on for eligible public traffic everywhere. Use Anonymous site statistics in the footer to change this. It does not enable detailed PostHog or Google measurement. Our Privacy Policy explains what is counted and why.

Detailed website analytics

With consent, PostHog Cloud EU and Google Analytics use pseudonymous browser and session references to measure visits and actions. Session storage keeps approved landing-source and campaign labels in the current tab for 30 minutes of inactivity; it clears on withdrawal. This does not create a permanent customer attribution record.

PostHog may also measure performance, heatmaps and a sample of masked replay. Our Privacy Policy explains the information used and the different areas covered by each measurement.

PostHog uses first-party ph_*_posthog and __ph_opt_in_out_* cookies, plus related session storage. Google Analytics uses first-party _ga and _ga_<stream> cookies. They are configured for up to 180 days without extending the Google Analytics expiry on later visits; browser restrictions may shorten this.

Read PostHog’s Privacy Policy and Google’s Privacy Policy for their own processing.

Advertising measurement

With separate consent, Google Ads uses _gcl_* first-party cookies to connect an advert click with a submitted business request. They are configured for up to 90 days. Google may also use storage on its own domains, which our website cannot remove directly.

We do not use these cookies for remarketing or personalised advertising. Read Google’s Privacy Policy for its own processing.

Changing or withdrawing a choice

Open Cookie choices or Anonymous site statistics in the footer. Withdrawal stops future collection for that purpose, clears optional storage where possible and discards unsent events. Essential service storage remains.

Changing a choice does not automatically erase information already received by a provider. If a PostHog or Google Analytics browser reference is available when you withdraw detailed analytics, we ask our compliance team to handle the available provider process. Anonymous reports cannot be traced back to one visitor. An already-started request cannot always be recalled, and you may need to remove a provider’s own cookies in your browser. For help, email compliance@thinkpromote.co.uk.

Managing cookies in your browser

You can use browser settings to view, block or delete cookies and other site data. Blocking all cookies can affect My Quote, remembered discount codes, mailing offers, remembered preferences and private Order Request pages.

To inspect this site’s cookies in Chrome, right click the page, select Inspect, then open Application → Cookies and choose this website. Browser menus can change, so use your browser’s site-data settings if these steps differ.

Removing a Quote cookie does not necessarily delete the Quote record from our systems. Our Privacy Policy explains how server-side information is kept and how to exercise a privacy right.

Changes to this policy

We may update this policy when our website, suppliers or use of cookies and similar technologies changes. We will publish the current version here and update the review date.

For privacy or cookie questions, email compliance@thinkpromote.co.uk.