Cookie Policy

This Cookie Policy explains how Evistruct Limited ("Evistruct", "we", "us") uses cookies and similar technologies when you visit www.evistruct.co.uk and our client portal (the "Site"). It should be read together with our Privacy Notice and Terms of Use. We use cookies in line with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations 2003 (PECR).

1. What cookies are

Cookies are small text files placed on your device when you visit a website. We also use related technologies such as local storage and session storage — this policy covers all of them together. Cookies can be "first-party" (set by Evistruct) or "third-party" (set by a service we use, such as Stripe).

2. Categories of cookies we use

Strictly necessary (always on)

Required to operate the Site and the client portal — for example, keeping you signed in, remembering your cookie choices, securing form submissions, and processing payments through Stripe. These cookies do not require consent under PECR. Without them, parts of the Site will not work.

• sb-* (Supabase auth session — first-party)
• evistruct-cookie-consent (records your preferences — first-party, 12 months)
• __stripe_mid / __stripe_sid (Stripe fraud prevention during checkout — third-party)

Analytics (consent required)

Help us understand how visitors use the Site so we can improve it — pages viewed, traffic sources, errors encountered. These are only set if you accept analytics cookies. We do not currently use advertising or cross-site tracking cookies.

3. Your choices

When you first visit the Site you'll see a consent banner. You can accept all cookies, reject non-essential cookies, or open preferences to choose by category. You can change your decision at any time:

You can also control cookies through your browser settings — including blocking or deleting them. See the ICO's guidance on cookies for browser-specific instructions. Blocking strictly necessary cookies may break sign-in, uploads or checkout.

4. How long cookies last

Session cookies are deleted when you close your browser. Persistent cookies remain for a set period (we cap our own at 12 months). Third-party cookies expire according to the provider's own policy — see Stripe's cookie policy.

5. Changes to this policy

We may update this policy to reflect changes to the Site or the law. The "Last updated" date above shows when it was last revised. Material changes will be brought to your attention through the consent banner.

6. Contact

Questions about cookies can be sent to hello@evistruct.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.