Cookie Policy

1. Introduction and Scope

This Cookie Policy is published by Bovingdon-Gray Consultancy Limited ("Bovingdon-Gray", "we", "us" or "our"), a consultancy registered in Scotland, United Kingdom, with a principal place of business at 3 Fitzroy Place, 1/1 Sauchiehall Street, Glasgow, G3 7RH. It applies to all pages and content served through our website at bovingdon-gray.fit (the "Website").

This Cookie Policy explains what cookies and similar tracking technologies are, which of them we use on our Website, the purposes for which we use them, and how you can manage, restrict or withdraw your consent to their use. It should be read in conjunction with our Privacy Policy, which provides broader information about how we collect and use personal data, and our Terms and Conditions, which govern your use of our Website and services.

By continuing to browse and use our Website after having been made aware of this Cookie Policy, you signify your agreement to our use of strictly necessary cookies as described below. For non-essential cookies, we will seek your specific consent through a cookie notice presented to you on your first visit. You may withdraw or modify that consent at any time using the mechanisms described in Section 6 of this Policy.

If you have any questions about our use of cookies or wish to exercise any rights you may have in this regard, please contact us at info@bovingdon-gray.fit or by post at the address given above.

2. What Cookies Are and How They Work

Cookies are small text files that a website places on your device — your desktop computer, laptop, tablet, smartphone or other internet-enabled device — when you visit the website. Cookies are stored in your browser's designated storage area and can be read by the website that placed them or, in certain circumstances, by other websites. Each cookie typically contains a unique identifier and may also contain a name, an expiry date and information relevant to its purpose.

Cookies serve a variety of functions. Some are essential to the technical operation of a website and enable it to function at a basic level — for example, by maintaining the state of your session as you navigate from page to page. Others are used to remember choices you have made, such as language or display preferences. Still others are used to collect information about how visitors use a website, which helps operators understand user behaviour and improve the site. Finally, some cookies are used for advertising purposes, to build profiles of users and to deliver advertisements that are more likely to be relevant to them.

Cookies may be set either by the website you are visiting directly (first-party cookies) or by third-party services that the website uses (third-party cookies). Third-party cookies allow the third party in question to recognise your device across multiple websites, which is the basis on which many targeted advertising systems operate. We address our use of third-party cookies — and any associated considerations — in Section 5 of this Policy.

Cookies can be categorised by their duration. Session cookies are temporary files that are stored in your browser only for the duration of your visit and are automatically deleted when you close your browser. Persistent cookies remain on your device for a defined period of time, or until you manually delete them, even after you close your browser.

3. Similar Tracking Technologies

In addition to cookies in the conventional sense, websites may use other technologies that perform similar or related functions. This Cookie Policy covers all such technologies and uses the term "cookies" to refer collectively to cookies and these related technologies. For the sake of clarity, we explain the main additional technologies below:

3.1 Web Beacons and Pixel Tags

A web beacon (also known as a pixel tag, clear GIF or tracking pixel) is a tiny, typically invisible image or piece of code embedded in a web page or HTML email. When your device loads the page or message, the beacon sends a signal to the server on which the beacon is hosted. Web beacons can be used to track whether a page was viewed, whether an email was opened, and certain other user behaviours. Where we or our third-party service providers use web beacons, we describe this use and its purposes within this Cookie Policy.

3.2 Local Storage and Session Storage

Web Storage — which includes local storage and session storage — is a mechanism that allows websites to store data in a web browser without using cookies. Like cookies, web storage can be used to remember preferences and maintain session state. Unlike cookies, web storage data is not automatically sent to a server with each HTTP request, and it typically has a higher storage capacity than cookies. Session storage is automatically cleared when the browser session ends; local storage persists until it is cleared by the user or by application code.

3.3 Fingerprinting

Browser or device fingerprinting is a technique that collects information about your browser configuration, installed plugins, screen resolution, time zone and other settings, and combines them to create a unique "fingerprint" that can be used to recognise your device across sessions or websites even in the absence of cookies. Bovingdon-Gray Consultancy Limited does not use device fingerprinting on its Website.

3.4 Embedded Content

Our Website may include embedded content from third-party services — for example, Google Maps on our contact page. When you interact with embedded content, the third party that provides it may collect data about you in accordance with its own cookie policy and privacy policy, even if you are not logged into an account with that third party at the time. We identify any embedded third-party content on our Website and provide relevant information in Section 5 of this Policy.

4. Categories of Cookies We Use

We categorise the cookies used on our Website in accordance with the guidance published by the Information Commissioner's Office and the International Chamber of Commerce framework for cookie categorisation. The categories, and our use of each, are described below.

4.1 Strictly Necessary Cookies

Strictly necessary cookies are essential to the operation of our Website and cannot be switched off in our systems without rendering the Website, or significant parts of it, non-functional. These cookies are set in response to actions you take on the Website — such as setting your cookie preferences, submitting a contact form or navigating between pages — and they do not collect or store any personal data that could be used for tracking or marketing purposes.

Under the Privacy and Electronic Communications Regulations 2003 (PECR) as amended, strictly necessary cookies may be placed without user consent because they are essential to provide a service that has been explicitly requested by the user. Nevertheless, we are transparent about their use and list them in this Policy.

Examples of strictly necessary cookies on our Website include session management cookies that maintain continuity of your session as you navigate between pages, security cookies that help to protect the Website and its users against cross-site request forgery and similar threats, and load balancing cookies that ensure requests are efficiently distributed across our server infrastructure.

4.2 Performance and Analytics Cookies

Performance and analytics cookies collect information about how visitors interact with our Website — including which pages are visited most frequently, how long visitors spend on different pages, how they navigate through the site and whether they encounter any errors. This information is collected in aggregated form and, where possible, anonymised before analysis. It does not identify you as an individual. The sole purpose of these cookies is to help us understand how our Website is being used so that we can improve its design, content and performance.

Where we use third-party analytics providers — such as Google Analytics or equivalent services — to process analytics data on our behalf, we have put in place data processing agreements requiring those providers to process data only on our instructions, to maintain appropriate security measures and to not use the data for their own purposes or those of other parties.

Performance and analytics cookies are not strictly necessary and require your consent under PECR. Where they are in use on our Website, they will only be placed if you have given your consent through our cookie consent mechanism, or through the equivalent browser-level settings.

4.3 Functional Cookies

Functional cookies enable our Website to remember choices you have made in the past and to provide enhanced features and a more personalised experience as a result. For example, a functional cookie may remember your preferred language, your consent preferences, or display settings you have applied. Functional cookies may also be used to enable certain interactive features of the Website.

Functional cookies are not strictly necessary for the basic operation of the Website, though they may noticeably improve your user experience. Where they are in use, we will seek your consent before placing them. Functional cookies do not track your activity on other websites and are not used for advertising purposes.

4.4 Targeting and Advertising Cookies

Targeting and advertising cookies are used to build a profile of your browsing interests and to serve advertisements that are more likely to be of interest to you, both on our Website and on other websites you visit. They work by identifying your browser and device uniquely and by recording the websites you visit and the content you interact with.

As at the date of publication of this Cookie Policy, Bovingdon-Gray Consultancy Limited does not use targeting or advertising cookies on its Website and does not work with any advertising network that would place such cookies. We do not engage in behavioural advertising or retargeting. If our approach to this changes in the future, we will update this Cookie Policy, implement appropriate consent mechanisms before placing any such cookies, and inform you of the change.

5. Specific Cookies and Technologies in Use

The following describes the specific categories of cookies and tracking technologies that may be present on our Website. Because the exact cookies in use can change as we update our Website and the services it relies upon, we aim to keep this section as current as possible and will update it whenever a material change is made.

• Cookie consent record: A persistent first-party cookie that stores your cookie consent preference, allowing us to respect your choices on subsequent visits without presenting the consent notice repeatedly. Typically expires after 12 months.
• Session identifier: A temporary first-party session cookie that maintains the continuity of your browsing session. It does not contain any personal information and is deleted automatically when you close your browser.
• Contact form tokens: A short-lived first-party cookie used to provide basic protection against automated or fraudulent form submissions. It contains no personal data and expires at the end of your session.
• Analytics platform cookies: Where we operate an analytics service — currently Google Analytics or an equivalent — associated cookies may collect anonymised data about visitor interactions with the Website, including pages visited, referral source, session duration and approximate geographic location based on IP address. IP addresses are anonymised before storage. These cookies are only placed with your consent and may be blocked using the opt-out mechanism described in Section 6 of this Policy.
• Google Maps embed cookies: Our contact page includes a Google Maps embed that enables visitors to view our office location. When you interact with the map — for example, by scrolling or clicking — Google may place its own cookies on your device in accordance with its own Privacy Policy and Cookie Policy, which are available at google.com/policies/privacy and google.com/policies/technologies/cookies respectively. We have no control over the cookies placed by Google through this embed. If you prefer not to have Google cookies placed on your device via our Website, you may view our address details on this page without activating the map, or you may adjust your cookie preferences to block third-party cookies at the browser level.

We do not embed social media widgets or third-party video players on our Website in a manner that would cause third-party cookies to be placed without your knowledge. Where such features are added in future, this Policy will be updated accordingly.

6. Managing Your Cookie Preferences

6.1 Our Cookie Consent Mechanism

On your first visit to our Website, we will present you with a cookie notice that explains our use of cookies and invites you to accept non-essential cookies or to manage your preferences. Your choice will be recorded in a first-party consent cookie that expires after 12 months, so that you are not asked to make the same choice on every subsequent visit. You can withdraw or modify your consent at any time by contacting us at info@bovingdon-gray.fit or, where we have implemented a preference management interface, by using the cookie settings option available on our Website.

6.2 Browser-Level Cookie Controls

All mainstream web browsers allow you to manage cookies through the browser's settings or preferences interface. The options typically include accepting all cookies, rejecting all non-essential cookies, being notified before a cookie is set, or blocking cookies from specific websites. The method for accessing these settings differs between browsers and browser versions. We provide guidance on the main browsers below:

• Google Chrome: Select the three-dot menu in the top right of the browser window, then go to Settings, then Privacy and Security, then Cookies and other site data. Here you can manage general cookie settings, blocked sites and individual cookie data.
• Mozilla Firefox: Select the three-line menu in the top right of the browser window, then go to Options (or Preferences on Mac), then Privacy and Security. The Cookies and Site Data section allows you to manage your cookie preferences and to clear existing cookies.
• Apple Safari: Go to Safari in the menu bar, then Preferences, then Privacy. Here you can manage cross-site tracking, block all cookies and manage website data. On Safari for iOS, go to Settings, then Safari, then Privacy and Security.
• Microsoft Edge: Select the three-dot menu in the top right of the browser window, then go to Settings, then Cookies and site permissions. Here you can manage cookie settings for all sites or for specific sites.
• Opera: Select the Opera menu, then Settings, then Advanced, then Privacy and Security, then Site Settings, then Cookies and site data.

Please note that if you choose to block all cookies through your browser settings, some parts of our Website may not function correctly. In particular, if you block strictly necessary cookies, you may find that forms on our Website do not work as intended. We recommend that you review your browser settings carefully and consider allowing at least strictly necessary cookies from our Website.

6.3 Analytics Opt-Out Tools

Where we use Google Analytics, you can prevent your data from being used by Google Analytics by installing the Google Analytics Opt-out Browser Add-on, which is available at tools.google.com/dlpage/gaoptout. This add-on prevents the Google Analytics JavaScript (ga.js, analytics.js and gtag.js) from sharing information with Google Analytics about your visits. It does not prevent other data collection by Google on Google's own services or websites.

For other analytics services, equivalent opt-out tools may be available from the relevant provider. Where we use a specific analytics service, we will endeavour to link to the relevant opt-out tool within this Policy.

6.4 Device-Level Settings for Mobile Devices

If you access our Website through a mobile device, you may also be able to manage cookies through the privacy settings available in your device's operating system settings, or through the settings of your mobile browser. The exact options available will depend on your device manufacturer and operating system version.

In addition, many mobile operating systems allow you to reset the device's advertising identifier or to limit ad tracking. These controls, while primarily relevant to in-app advertising, may also affect how certain third-party cookies interact with your device. Consult your device manufacturer's documentation for guidance on how to access these settings.

7. Cookie Retention Periods

The duration for which a cookie persists on your device depends on whether it is a session cookie or a persistent cookie, and — for persistent cookies — on the specific expiry period set by the cookie when it was placed. Session cookies are automatically deleted when you close your browser and do not remain on your device beyond your browsing session. Persistent cookies remain on your device until their specified expiry date passes, or until you delete them manually.

The following general retention periods apply to the categories of cookies we use:

• Strictly necessary session cookies: Deleted automatically when you close your browser. Duration: session only.
• Cookie consent preference cookies: Retained for a period of 12 months from the date on which your consent preference was recorded. After this period, the cookie expires and you will be presented with the cookie consent notice again on your next visit.
• Functional preference cookies: Retention periods for functional cookies vary depending on their specific purpose. Where we use functional cookies, we aim to set retention periods that are no longer than is necessary for the relevant purpose, typically between 30 days and 12 months.
• Analytics platform cookies: Retention periods for analytics cookies depend on the specific analytics service in use. Google Analytics cookies typically have retention periods ranging from 24 hours to 26 months, depending on the specific cookie. We configure analytics services to apply the minimum retention period consistent with the analytical purposes for which they are used.
• Third-party cookies (including Google Maps): The retention period for third-party cookies, including those placed by Google through our Maps embed, is determined by the third party in question and may be outside our control. We encourage you to review the relevant third party's cookie policy for specific retention information.

We review our use of cookies at least annually to ensure that retention periods remain proportionate, that cookies no longer required are removed, and that our practices continue to comply with PECR and UK GDPR.

8. International Transfers Associated With Cookies

Some of the third-party service providers whose cookies may be placed on your device when you visit our Website process data outside the United Kingdom. Where this occurs — for example, in connection with analytics services operated by companies based in the United States of America — we rely on appropriate safeguards to ensure that your personal data receives a level of protection equivalent to that required by UK GDPR. These safeguards include the use of standard contractual clauses as approved by the Information Commissioner's Office, or reliance on adequacy regulations made under section 17A of the Data Protection Act 2018 where applicable.

For information about the international data transfer practices of specific third-party providers, we recommend that you consult their own privacy and cookie policies, links to which are provided in Section 5 of this Policy where relevant.

9. Your Legal Rights in Relation to Cookie Data

To the extent that cookies collect or process personal data about you, you have rights under UK GDPR in relation to that data. These rights include the right to access data held about you, the right to request correction of inaccurate data, the right to request deletion of your data in certain circumstances, the right to object to certain types of processing, and the right to withdraw any consent you have given. These rights are explained in full in our Privacy Policy.

To exercise any of these rights in relation to data collected through our use of cookies, please contact us at info@bovingdon-gray.fit. Please note that some data collected through cookies may be anonymised or aggregated in a manner that means it can no longer be attributed to you as an individual, in which case your data protection rights may not apply to that specific data.

You also have the right to make a complaint to the Information Commissioner's Office (ICO) if you are dissatisfied with how we use cookies or with our response to any cookie-related request or concern. The ICO can be reached at ico.org.uk or by telephone on 0303 123 1113.

10. Changes to This Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies and similar technologies we use, changes in the services provided by third parties whose cookies appear on our Website, or changes in applicable law or regulatory guidance — including guidance from the Information Commissioner's Office and the European Data Protection Board. The most current version of this Cookie Policy will always be available on our Website at bovingdon-gray.fit/cookie-policy.html.

When we make material changes to this Cookie Policy — for example, by introducing new categories of cookies or by adding new third-party services that place cookies — we will update the "last updated" date at the top of this page and, where practicable, take steps to notify you of the change. We encourage you to review this Cookie Policy periodically so that you remain informed about how we use cookies and how you can manage your preferences.

Your continued use of our Website following the publication of an updated Cookie Policy constitutes your acknowledgement of the updated terms. If you have questions about any update, please contact us at info@bovingdon-gray.fit.

11. Contact Us

If you have any questions, concerns or requests relating to this Cookie Policy or to our use of cookies and similar technologies, please contact us using the following details:

Bovingdon-Gray Consultancy Limited
3 Fitzroy Place, 1/1 Sauchiehall Street
Glasgow, G3 7RH, Scotland
United Kingdom

Email: info@bovingdon-gray.fit
Telephone: +44 7451 234890

For general enquiries about your data protection rights and our data processing activities, please refer to our Privacy Policy. For questions about your use of our Website, please refer to our Terms of Service. For the full contractual terms governing professional engagements with Bovingdon-Gray Consultancy Limited, please refer to our Terms and Conditions.