Cookie Policy

Waymarq is operated by Tortoise IT Ltd, trading as Waymarq. This page explains the cookies and similar technologies we use, and how UK law applies to them. It sits alongside our privacy policy, which covers personal data more broadly.

Under the Privacy and Electronic Communications Regulations (PECR), cookies that are strictly necessary to deliver a service you asked for do not require your consent — but we still have to tell you about them, which is what this page does. Every other cookie, including analytics, does require your consent before it is set. Where a cookie also processes personal data, UK GDPR applies on top.

Session / authentication

Strictly necessary · no consent required. Keeps you signed in as you move between pages. Without it you would be logged out on every click. Expires when your session ends or you sign out.

CSRF protection

Strictly necessary · no consent required. A security token that stops another site submitting forms as you (cross-site request forgery). Expires with your session.

Analytics (Google Analytics)

Consent required · not currently in use. Analytics is an optional integration that is switched off unless it has been configured for this installation. When it is off — as it is by default — no analytics cookies are set and no usage data is sent to Google. Where it is switched on, it records which pages and features are used so we can improve the product.

We do not use advertising, retargeting or cross-site tracking cookies, and we do not sell or share cookie data with advertisers.

The session and CSRF cookies above are strictly necessary, so they are always set and PECR does not require us to ask you first.

Analytics cookies are different: PECR requires your consent before they are set, and withdrawing consent must be as easy as giving it. Analytics is therefore not loaded at all until you accept it on the cookie banner. If you decline, or simply never answer, no analytics script runs and no analytics cookies are set. If you see no banner, analytics is not configured on this site at all.

You can also block or delete cookies through your browser settings, and most browsers let you refuse third-party cookies entirely. Blocking strictly necessary cookies will stop parts of Waymarq working — you will not be able to stay signed in.

Where analytics is enabled, data may be processed outside the UK and EEA by the analytics provider under the safeguards described in our privacy policy.

The quickest way to reach us about anything in this policy — including a request to exercise your rights — is our contact form. Choose “Data / GDPR request” as the subject so it reaches the right person and we can respond within the statutory one-month deadline.

The data controller is Tortoise IT Ltd, trading as Waymarq, a company registered in England and Wales. Our company website is sean-barton.co.uk, where our registered postal address and company details are published. We have not appointed a Data Protection Officer — we are not required to — so requests are handled directly by the company.

If you think we have handled your personal data incorrectly, please tell us first so we can put it right. You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office (ICO), at any time — you do not have to come to us first.

ico.org.uk · helpline 0303 123 1113.