Identity Web Design — Cookie Policy

1. About This Policy

This Cookie Policy explains how Identity Web Design Ltd ("we", "us", "Identity") uses cookies and similar technologies on our website at https://www.identitywebdesign.com/ ("the Website"). It sets out what cookies are, which ones we use, why we use them, and how you can manage your preferences.

This policy should be read alongside our Privacy Policy at https://www.identitywebdesign.com/images/pdf/privacy-policy.pdf.

2. What Are Cookies

Cookies are small text files that are stored on your device when you visit a website. They allow the website to recognise your device and remember information about your visit, such as your preferences. Cookies are widely used to make websites work more efficiently and to provide information to the website owner.

Similar technologies we may use include:

  • Local storage — data stored on your device by your browser.
  • Pixel tags / web beacons — small graphic images used to track page visits.

References to "cookies" in this policy include these similar technologies where applicable.

3. Cookie Categories

Cookies fall into four categories:

Category

Description

Consent Required?

Strictly necessary

Essential for the Website to function; without them, you cannot use the Website properly.

No — they are necessary for the service.

Analytical / Performance

Collect information about how visitors use the Website; used to improve the Website.

Yes — unless anonymised to a standard that removes the need for consent.

Functionality

Remember choices you make, such as language preferences, to enhance your experience.

Yes.

Marketing / Targeting

Used to track visitors across websites to display relevant advertising or measure marketing activity.

Yes.

4. Cookies We Use

4.1 Strictly Necessary Cookies

These cookies are essential for the Website to function. They are set in response to actions you take, such as filling in a form, and cannot be turned off through the Website cookie preferences.

Name

Purpose

Expiry

First/Third Party

PHPSESSID

Maintains session state for form submissions and security.

Session (deleted when browser closes).

First party.

cookie_consent

Records your cookie consent preferences.

1 year.

First party.

Note: Identity to confirm exact session cookie names used by Joomla/website platform.

4.2 Analytical / Performance Cookies

These cookies help us understand how visitors interact with the Website so we can improve it. Analytical cookies require your consent unless they are configured in a way that does not require consent under applicable guidance.

Name

Purpose

Expiry

First/Third Party

_ga

Distinguishes unique visitors for Google Analytics.

2 years.

Third party (Google).

_ga_*

Maintains session state for Google Analytics 4.

2 years.

Third party (Google).

_gid

Distinguishes unique visitors for Google Analytics.

24 hours.

Third party (Google).

 

4.3 Functionality Cookies

We do not currently use functionality cookies. If we introduce them in the future, this section will be updated with details and your consent will be sought where required.

4.4 Marketing / Targeting Cookies

These cookies may be set by third-party marketing or widget providers. They may track browsing activity across websites and are used to display relevant content, measure marketing activity, or support embedded tools. Marketing cookies require your consent.

Name

Purpose

Expiry

First/Third Party

elfSight_viewed_recently

Tracks recently viewed items for Elfsight widgets or related marketing/widget behaviour.

30 days (typical — to be confirmed).

Third party (Elfsight).

5. Third-Party Cookies

Some cookies are set by third parties, such as Google and Elfsight. We do not control these cookies and recommend that you review the relevant third-party privacy policies for more information:

6. Managing Your Cookie Preferences

6.1 Cookie Consent Banner

When you first visit our Website, you will see a cookie consent banner. This allows you to:

  • accept all cookies;
  • reject all non-strictly-necessary cookies; or
  • manage your preferences by category.

You can change your preferences at any time by clicking the cookie settings link in the Website footer.

6.2 Browser Controls

You can also manage cookies through your browser settings. Most browsers allow you to:

  • view what cookies are stored and delete them individually;
  • block cookies from specific or all websites;
  • block all third-party cookies; or
  • clear all cookies when you close your browser.

Browser controls vary by browser. Useful links:

6.3 Impact of Blocking Cookies

If you block strictly necessary cookies, some parts of the Website may not function correctly. Blocking analytical or marketing cookies will not affect the basic functionality of the Website but may limit some features.

7. Changes to This Policy

We may update this Cookie Policy from time to time, for example when we add or remove cookies, or when the law changes. Any changes will be posted on this page with an updated effective date.

8. Contact

If you have any questions about our use of cookies, please contact us:

Identity Web Design Ltd
7 Wherry Lane, Ipswich, Suffolk, IP4 1LG
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.
Phone: 01473 807014

 

Appendix: Cookie Consent Banner — Implementation Guidance

This appendix is for internal use only and should not be published as part of the public Cookie Policy.

A1. Current Issue

The Identity website currently has no visible cookie consent banner. Under PECR, consent must be obtained before setting non-strictly-necessary cookies. The ICO has been actively enforcing this requirement.

A2. Quick-Win Implementation

Option A — Joomla Extension (Recommended for speed)

  • Install a GDPR/cookie consent Joomla extension.
  • Configure the extension to match the cookie categories in this policy.
  • Set analytics and marketing cookies to load only after consent.
  • Ensure no non-essential cookies are set before consent is given.

Option B — Custom Implementation

  • Add a cookie banner script to the site template.
  • Conditionally load Google Analytics and Elfsight scripts only after consent.
  • Store consent preferences in a strictly necessary cookie such as cookie_consent.
  • Provide a footer link to reopen cookie preferences.

A3. Key Compliance Requirements

  • No pre-ticked consent — consent must be an active, affirmative action.
  • Granular choice — users should be able to accept or reject cookies by category.
  • Easy withdrawal — users must be able to change their mind as easily as they gave consent.
  • Record consent — store a record of when and how consent was given.
  • No non-essential cookies before consent — analytics and marketing cookies must wait until consent is granted.

A4. Recommended Timeline

This should be addressed as a priority because the regulatory risk exists from the moment non-essential cookies are set without valid consent. Implementation can proceed independently of the document review.