Cookie Policy

1. What cookies and similar technologies are

Cookies are small files stored on your device when you visit a website. We may also use similar technologies such as pixels, tags, scripts, SDKs and local storage.

2.The legal standard (UK)

UK cookie rules are set out in the Privacy and Electronic Communications Regulations (PECR). In most cases, we must:

• • provide clear information about cookies/trackers; and
  • obtain consent before placing/reading non-essential cookies.

3. How we request and manage consent

3.1 When you first visit the Website, you should see a cookie banner that allows you to:

• • Accept all cookies;
  • Reject all non-essential cookies; and/or
  • Manage preferences by category.

3.2 Non-essential cookies (analytics/marketing) should not load until you have provided consent.

3.3 You can change your preferences at any time via Cookie Settings (recommended as a footer link).

4. Cookie categories we use

4.1 Strictly necessary (always on)

Required for the Website to work and for security, network management, and remembering cookie choices.

4.2 Functional (optional)

Enhance the Website by remembering preferences and improving user experience.

4.3 Analytics/performance (optional)

Help us understand how people use the Website and improve performance (e.g., GA4).

4.4 Marketing/advertising (optional)

Used to measure advertising and (where enabled) support remarketing (e.g., Meta Pixel, LinkedIn Insight Tag).

5. Cookies and tools used on this Website

Cookie names can change depending on provider updates and your configuration. You should confirm the final list by running a cookie scan.

5.1 Google Analytics 4 (GA4) — Analytics (optional)

Common cookies include:

• • _ga — distinguishes users — often up to 2 years
  • ga* — stores session state for GA4 — often up to 2 years

5.2 Meta Pixel (Facebook/Instagram) — Marketing (optional)

Common cookies include:

• • _fbp — ad measurement/attribution — often 3 months
  • fr — ad delivery/measurement — often 3 months (frequently third-party)

5.3 LinkedIn Insight Tag — Marketing (optional)

Common cookies include:

• • li_gc — stores consent preferences — often 6 months
  • lidc — routing/performance — often 24 hours
  • bcookie — browser identification — often 1 year
  • bscookie — security/auth — often 1 year

5.4 Stripe — Strictly necessary/security (as applicable)

Cookies may be set when payment elements are used:

• • __stripe_mid — fraud prevention — often 1 year
  • __stripe_sid — fraud prevention — often 30 minutes

5.5 GoHighLevel — Forms/CRM/Funnels (varies by configuration)

GoHighLevel may set first-party cookies and/or local storage items for:

• • form/session handling;
  • lead attribution (e.g., source tracking);
  • embedded widgets;
  • funnel performance measurement.

Action required: run a cookie scan on your site to capture the exact cookie names and durations GoHighLevel sets in your configuration.

6. Cookie table (recommended final format)

Cookie/Identifier	Provider	Category	Purpose	Duration
cookie_consent	aestheticsbusinesscoach-ydy.co.uk	Strictly necessary	Stores cookie preferences	6 months
_ga	Google	Analytics	Distinguishes users for analytics	2 years
ga*	Google	Analytics	Session state for GA4	2 years
_fbp	Meta	Marketing	Ad measurement/attribution	3 months
fr	Meta	Marketing	Ad delivery/measurement	3 months
li_gc	LinkedIn	Marketing	Stores consent preferences	6 months
lidc	LinkedIn	Marketing	Routing/performance	24 hours
bcookie	LinkedIn	Marketing	Browser identification	1 year
bscookie	LinkedIn	Marketing	Security/auth	1 year
__stripe_mid	Stripe	Strictly necessary	Fraud prevention	1 year
__stripe_sid	Stripe	Strictly necessary	Fraud prevention	30 minutes
GHL cookie	GoHighLevel	Strictly necessary	Stores cookie preferences	6 months

7. How to change or withdraw cookie consent

7.1 Use the Cookie Settings link on the Website to change your preferences.

7.2 You can also control cookies via your browser settings. Blocking cookies may affect site functionality.

8. Third-party cookies and embedded content

Third parties (Google, Meta, LinkedIn, Stripe and embedded media providers) may set cookies/identifiers. Their processing is governed by their own privacy policies.

9. Updates to this Cookie Policy

We may update this Cookie Policy as our technology changes and will update the “Last updated” date.

Glossary of Terms:

Here are all the abbreviations/acronyms used in the Cookie Policy section, with plain-English meanings:

• • PECR — Privacy and Electronic Communications Regulations (UK rules covering cookies, email/SMS marketing, etc.)
  • SDK — Software Development Kit (a bundle of code that can be used for tracking/analytics, often in apps and embedded tools)
  • GA4 — Google Analytics 4 (Google’s analytics product for measuring website/app usage)
  • Meta — Meta Platforms, Inc. (the company behind Facebook and Instagram)
  • CRM — Customer Relationship Management (a system for storing/managing leads and customer info, e.g., GoHighLevel)
  • GHL — GoHighLevel (often shortened to GHL; a CRM + funnels + marketing automation platform)

Cookie-name abbreviations (the actual cookie IDs)

These are cookie identifiers set by tools/providers. They aren’t “abbreviations” in the normal sense, but here’s what they mean:

• • _ga — Google Analytics cookie used to help distinguish users (analytics identifier)
  • ga* — GA4 cookie pattern (“*” means “varies”); e.g., _ga_XXXXXXXXXX, used to store analytics session state
  • _fbp — Meta Pixel cookie used for advertising measurement/attribution
  • fr — Meta cookie often used for ad delivery/measurement (commonly third-party)
  • li_gc — LinkedIn cookie related to consent preferences/state
  • lidc — LinkedIn cookie used for routing/performance
  • bcookie — LinkedIn cookie used for browser identification
  • bscookie — LinkedIn cookie used for security/authentication
  • __stripe_mid — Stripe cookie used for fraud prevention/device identification
  • __stripe_sid — Stripe cookie used for fraud prevention/session identification