Legal

Cookie Policy

The site works fully without optional cookies. This page lists every one it can set and what each does.

How this site approaches cookies

The site works fully without optional cookies. The consent banner offers three choices: “Accept all” (usage analytics and advertising: measuring whether our Google and Instagram adverts lead to enquiries, and showing our adverts to people who have visited), “Analytics only” (usage analytics, no advertising) and “Essential only”. Nothing optional loads until you choose. You can change your mind at any time via the “Cookie preferences” link in the footer.

Strictly necessary storage

hr-consent-v2 — remembers your consent choice (browser local storage, first-party only). The site also uses short-lived session storage to run the optional automated pre-checks you request on the snapshot thank-you page. hr-attribution-v1 is not strictly necessary and is set only if you accept analytics cookies: it remembers how you found us (including any Google Ads click reference) so that, if you enquire later, we know which marketing brought you (browser local storage, first-party only, sent to us only when you submit a form). Declining or withdrawing consent deletes it.

Strictly necessary — the application

When you sign in to the HighRegard application at /app/, a first-party session cookie (hr_session, HttpOnly, Secure, up to 30 days) keeps you signed in, and a short-lived cookie protects the Google connection flow against forgery. Both are required for the application to work and are not used for analytics or advertising. The public demo workspace sets no cookies.

Managing preferences

Use the footer link “Cookie preferences”, or clear this site’s data in your browser. Consent choices are stored per browser and device. When you withdraw consent, the site deletes the Google Analytics, Google Ads, Meta Pixel and Clarity cookies set on this website’s own domain, and the Google Ads click data Google’s tag keeps in your browser’s local storage (_gcl_ls). Cookies set on Microsoft’s and Meta’s domains (such as CLID and MUID) can only be removed in your browser settings, and withdrawing consent stops the Meta Pixel sending anything further.

The other documents

Everything that governs this website and the application, in one place.