Legal

Cookie Policy

How we use cookies and similar technologies on this website.

1. About this Policy

This Cookie Policy explains how Beauty Within uses cookies and similar technologies when you visit https://beautywithinkingswood.co.uk (the “Site”). It should be read with our Privacy Policy and GDPR notice.

2. What are cookies?

Cookies are small files placed on your device. They often include a unique identifier and can be “session” cookies (deleted when you close your browser) or “persistent” cookies (stored until they expire or you delete them).

Similar technologies can include local storage, pixels or scripts that store or access information on your device. In this Policy, “cookies” includes those technologies where relevant.

3. Who sets cookies

  • First-party cookies - set by Beauty Within on our Site domain.
  • Third-party cookies - set by another domain when we use a service on our Site. We use Cloudflare Turnstile for bot protection on the booking form. We do not use advertising or analytics third-party cookies on the public Site.

4. Types of cookies

  • Strictly necessary - required for the Site to function (security, forms, load balancing).
  • Functional - remember choices (not currently used beyond essential session needs).
  • Analytics / performance - measure how the Site is used (not currently used).
  • Advertising / targeting - used for marketing (not currently used).

5. Cookies we use

We use strictly necessary first-party cookies on the public Site, and strictly necessary third-party cookies from Cloudflare Turnstile where bot protection is enabled on the booking form.

5.1 Strictly necessary cookies (first-party)

  • Name: bw_site
    Type: First-party, session, strictly necessary
    Purpose: Maintains a secure PHP session so booking and enquiry forms can include CSRF protection and process submissions safely.
    Attributes: HttpOnly; Secure on HTTPS; SameSite=Lax; path=/
    Duration: Session (expires when the browser session ends)

5.2 Cloudflare Turnstile (third-party, strictly necessary)

When you open the online booking form, we load Cloudflare Turnstile to help prevent automated abuse. Turnstile may set cookies or use similar storage on challenges.cloudflare.com and related Cloudflare domains.

  • Provider: Cloudflare, Inc.
    Type: Third-party, strictly necessary (security / bot management)
    Purpose: Distinguish legitimate users from bots before a booking is submitted.
    Where used: On-site booking modal
    Duration: Varies by Cloudflare (often short-lived session or preference cookies). See Cloudflare’s cookie policy for current details.

5.3 Server and security processing

Our hosting and security stack may process technical requests (for example TLS, firewalls, rate limiting). These are operational controls rather than marketing cookies. Where a provider sets its own strictly necessary cookies for security, they operate under that provider’s terms.

7. Technologies we do not currently use

  • Third-party advertising cookies
  • Social media tracking pixels for marketing attribution
  • Optional analytics cookies (for example Google Analytics tags on the public Site)
  • Non-essential marketing or profiling cookies

Turnstile is used for security only, not for advertising or analytics. Embedded third-party content you choose to open (for example following an external social media link) may set its own cookies under that third party’s policy.

8. How to manage cookies

Most browsers let you refuse or delete cookies via settings. Blocking strictly necessary cookies may prevent booking and contact forms from working, and may prevent Cloudflare Turnstile from verifying your booking request.

Helpful guidance:

9. Updates

We may update this Cookie Policy when our practices or the law change. The Effective date and Version above will be revised when we publish updates.