Cookie Policy

1. About cookies

Cookies are small text files placed on your device when you visit a website. Similar technologies, such as browser local storage, work in the same way. They help a site function, remember your choices, and understand how it’s used. This policy explains what The Wellness Lounge Leeds uses and how you can control it.

2. Your consent

We ask for your consent before setting any non-essential cookies. You can accept all, reject all, or choose which categories to allow. Essential cookies don’t require consent, as the site can’t work properly without them. You can change or withdraw your choices at any time via the “Cookie settings” link in the footer of every page. Withdrawing consent stops the relevant cookies and clears them where possible.

3. The cookies we use

These categories match the choices in our cookie banner.

Essential — always on, can’t be switched off

• Consent preference: remembers your cookie choices on your device until you clear your browser storage or this policy changes. First-party. You can change your choice at any time via “Cookie settings” in the footer.
• Secure session token: keeps a logged-in admin signed in to the private admin area. First-party. Only ever set for admin/staff users who log in — never set for normal visitors browsing the public site.
• HubSpot / Cloudflare bot protection (__cf_bm): set on our embedded HubSpot newsletter form to protect it from bots and abuse. Third-party (HubSpot / Cloudflare). Duration around 30 minutes. This is a strictly necessary security cookie.

Analytics — off by default

• Google Analytics (GA4): helps us understand how visitors use the site, for example which pages are viewed and general usage patterns. It sets cookies such as _ga and _ga_<id> to tell visitors apart and remember session information. Third-party (Google). Duration up to around 2 years. These load only if you allow the Analytics category.

Marketing — off by default

• Google Maps: our Contact page includes an embedded Google map. When loaded, Google may set its own cookies (e.g. NID) for its own purposes. Third-party (Google); duration set by Google, typically up to around 6 months. This loads only if you allow this category. If you withdraw consent, the map is removed, but our website can’t delete cookies set by Google itself. You can clear those in your browser settings.

4. Other third-party services

Google Fonts delivers our typefaces (Playfair Display and Lora). This sets no cookies, but your IP address is shared with Google to serve the fonts. We use no social media pixels, advertising tags, or session-recording tools.

Our newsletter signup form loads from HubSpot when the homepage is opened. As it loads, before you make any cookie choice, it contacts HubSpot’s servers (including its metrics address) and Google’s anti-spam services (google.com and gstatic.com). As with any website, your browser sends technical details, such as its IP address, to these services when the form loads. The details you type into the form are only shared with HubSpot when you submit it, so we can send you our newsletter. The form sets the bot-protection cookie__cf_bm as noted above; we do not load HubSpot’s wider website-tracking script, so no HubSpot tracking cookies are set.

5. Managing cookies in your browser

You can also block or delete cookies through your browser settings. Blocking essential cookies may stop parts of the site working.

6. Changes to this policy

We’ll update this policy when our cookies change. Please check the “last updated” date.

7. Contact

Questions about this policy or your data? Email welcome@thewellnessloungeleeds.co.uk. Data controller: The Wellness Lounge Leeds Ltd. See also our Privacy Policy.