Lonsite Limited ("Lonsite", "we", "us" or "our") uses cookies and similar storage and access technologies on its website to operate the site, protect it, remember user choices where appropriate, and understand how the website is used in accordance with applicable law.
This policy explains what these technologies are, how Lonsite uses them, when consent is required, and the choices available to website users. It should be read together with the Lonsite Privacy / GDPR Policy.
1. Legal Framework (2026)
This policy supports compliance with, but is not limited to:
- Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), as amended, including relevant changes introduced by the Data (Use and Access) Act 2025
- UK General Data Protection Regulation (UK GDPR)
- Data Protection Act 2018
- Information Commissioner's Office (ICO) guidance on the use of storage and access technologies, finalised in April 2026
2. What Are Cookies and Similar Technologies?
Cookies are small text files that a website can place on a computer, phone, tablet, or other device. They can help a website operate correctly, remember settings, support security, and provide information about how the website is used.
PECR is not limited to traditional cookies. Similar rules can apply to other technologies that store information on, or access information stored on, a user's device, including local storage, tracking pixels, scripts, tags, and device identifiers.
3. Lonsite Principles for Use
Lonsite will:
- Identify storage and access technologies before they are deployed on the website
- Provide clear information about their purpose, provider, and duration where required
- Not pre-enable non-exempt technologies before the required consent has been obtained
- Rely on a statutory exception only where all conditions for that exception are met
- Use valid consent where consent is required and make it straightforward to change or withdraw choices
- Keep storage periods proportionate to the purpose for which the technology is used
- Review third-party services and keep the website cookie register up to date
4. Categories of Cookies and Technologies
Strictly Necessary
These technologies are essential to provide a service requested by the user or to support functions such as security, network management, form submission, or other core website operation. Consent is not required where the strictly necessary exception under PECR applies.
Statistical / Analytics
Lonsite may use analytics technologies to understand, in aggregate, how visitors use the website and to improve its performance or content. Where Lonsite relies on the PECR statistical purposes exception, the sole purpose must be to produce statistical information to improve the website or service; the use must not involve tracking, profiling, or advertising; and users must be given clear information and a simple, free means to object. If those conditions are not met, prior consent will be obtained.
Appearance / Preference
Technologies used solely to adapt the appearance or functionality of the website to a user's preference may fall within the PECR appearance exception. Where this exception is relied upon, Lonsite will provide clear information and a simple, free means to object. Other preference technologies will only be used where the appropriate consent has been obtained.
Marketing / Advertising
Marketing, advertising, remarketing, or cross-site tracking technologies are not treated as strictly necessary or statistical technologies. If Lonsite introduces such technologies, they will not be activated until the required prior consent has been obtained.
5. Consent and User Choices
Where consent is required, Lonsite will seek consent through an appropriate website control before the relevant technology is used. Consent must be freely given, specific, informed, and unambiguous.
Users must be able to change or withdraw consent as easily as it was given. Where Lonsite relies on the statistical purposes or appearance exceptions, users will be given a simple and free means of objecting, and the relevant storage or access will stop when an objection is made.
Browser settings can also be used to block or delete cookies. However, disabling strictly necessary technologies may prevent parts of the website from working correctly. Browser settings are not used as the sole method of providing choice where Lonsite is required to provide a consent or objection mechanism.
6. Third-Party Technologies
Some website functions may be provided by third parties. Where a third party stores or accesses information on a user's device, or receives information collected through a storage and access technology, Lonsite will provide appropriate transparency about the third party and the relevant purpose.
Where a third-party service is used under the statistical purposes exception, the provider must only use the information to assist Lonsite in improving the website or service. If a third party uses information for advertising, profiling, or other independent non-exempt purposes, the appropriate consent and data-protection requirements must be satisfied.
Live Jobs
The Live Jobs page uses an embedded service supplied by CV-Library to display Lonsite vacancies and support the CV-Library application journey. Loading this service connects the user's browser directly to `cv-library.co.uk`. CV-Library may set a `session` cookie, and its infrastructure provider Cloudflare may set a `__cf_bm` security cookie or run security checks. These technologies are controlled by those third parties, and their duration may be changed by the provider.
The production consent treatment for this embedded service must be approved before launch. If prior consent is required, the CV-Library service will not be loaded until that consent has been given.
7. Cookie Register and Retention
Lonsite will maintain a current record of the cookies and similar technologies used on the live website. Where applicable, the website cookie notice or settings area will identify the technology or cookie name, provider, purpose, category, and duration.
Storage and access technologies will only be retained for as long as is appropriate for their purpose. Lonsite will review durations when technologies are introduced or changed and will avoid retaining individual-level analytics information longer than necessary for permitted aggregation.
8. Personal Data and Privacy
Where information obtained through cookies or similar technologies is personal data, Lonsite will process it in accordance with the UK GDPR and Data Protection Act 2018. Further information about how Lonsite uses personal data, including data-subject rights and contact details, is set out in the Lonsite Privacy / GDPR Policy.
Questions about this policy or Lonsite's use of cookies can be sent to info@lonsite.co.uk.
9. Changes to This Policy
Lonsite may update this policy when the website, the technologies it uses, relevant third-party services, or applicable law and regulatory guidance change. Material changes will be reflected in the current version of the policy and, where necessary, in the website consent or objection controls.
10. Policy Review
This policy will be reviewed annually, or sooner where required by changes in legislation, regulatory guidance, website technology, or Lonsite business activities.
Signed: ____________________________________
Brian Harris
16th September 2026
Managing Director