Legal
Cookie Policy
What we set, why we set it, and how to change your mind, in plain English.
Last updated: 5 May 2026
Cookie Categories
Cookies are small files your browser stores on your device. We use them to make the site work, to understand how it’s used, and to deliver a better experience. We classify cookies into four categories aligned with the Information Commissioner’s Office (ICO) and Google Consent Mode v2:
- Strictly necessary, required for the site to function. These do not need consent. Examples: CSRF protection, session continuity.
- Functional, remember preferences such as your consent choice itself. Set only with consent or as part of strictly-necessary use.
- Analytics, measure how the site is used so we can improve it. Set only with explicit consent.
- Marketing, we currently do not set marketing or advertising cookies.
What We Set
The full inventory of cookies and local-storage entries used on this site.
| Name | Purpose | Category | Lifetime |
|---|---|---|---|
bw_consent |
Stores your consent choice (all, analytics, or none). |
Functional | 12 months |
bw_ga_cid (localStorage) |
Cookie-free GA4 client ID, used only when consent is granted. | Analytics | 24 hours |
bw_ga_sid (sessionStorage) |
GA4 session ID, rotates every 30 min of inactivity. | Analytics | Session |
_ga, _ga_* |
Google Analytics 4, measures usage. Loaded via Google Tag Manager and only when consent permits. | Analytics | Up to 24 months |
_clck, _clsk |
Microsoft Clarity, session replay and heatmaps. Loaded via GTM and only when consent permits. | Analytics | Up to 12 months |
| CSRF token (session) | Protects forms (e.g. /contact) from cross-site request forgery. |
Necessary | Session |
Consent & Google Consent Mode v2
On first visit you’ll see a cookie banner. We use Google’s Consent Mode v2 set to deny by default, analytics cookies are not set until you accept them. The defaults we ship are:
analytics_storage: deniedad_storage: deniedad_user_data: deniedad_personalization: denied
When you accept, we update the consent state and the analytics tags begin recording. When you reject, we send cookieless pings, Consent Mode v2 still permits aggregate measurement without identifying you.
Change Your Settings
You can change your consent choice at any time:
- Open the consent banner again, or click any “Cookie settings” link in the footer.
- Clear the
bw_consentcookie via your browser’s site-data tools and reload, the banner will return. - Block third-party cookies entirely in your browser settings.
Third Parties
Some pages embed third-party widgets that may set their own cookies when loaded:
- GoHighLevel booking iframe on
/schedule-call, sets cookies on its own domain when you book a call. - Trustpilot widget bootstrap, currently rendered hidden, but the script may load resources. We do not embed it on cold loads.
- Google Tag Manager / Analytics, loaded only after consent is granted (see Section 03).
Your Rights
Cookies that identify you are personal data under UK GDPR. You have the right to:
- Withdraw consent at any time without giving a reason.
- Access the data we hold and request a copy.
- Object to processing based on legitimate interest.
- Lodge a complaint with the ICO if you think we’ve handled your data unfairly.
The full rights list is covered in our Privacy Policy.
Contact
Questions about cookies or your data? Email privacy@bespokeworks.ai or use our contact form. We respond within one working day.
Quick actions
Change your consent choice or read related policies.
