Legal
Cookie Policy
Last updated: 21 August 2026 · Version 1.0
This site sets only strictly necessary cookies. It runs no analytics, no advertising and no session recording, which is why you have not been interrupted by a consent banner. Everything below describes what is actually present, not what a template assumes.
What cookies are
A cookie is a small text file that a website asks your browser to store and to send back on later requests. Cookies can be useful — keeping you signed in, remembering a preference, telling a security system that a check has already been passed — and they can also be used to follow people between sites.
The law treats these uses differently. Under the Privacy and Electronic Communications Regulations, a cookie that is strictly necessary to deliver a service you asked for may be set without consent. Anything else — analytics, advertising, measurement of how you use a site — requires your consent before it is set.
Cookies used on this site
Thurloe Bancroft sets no cookies of its own. The site is static: there are no accounts, no sessions and no shopping basket to remember.
The site is served through Cloudflare, which provides DNS, content delivery and protection against automated attacks. Cloudflare may set the strictly necessary cookies below in the course of doing that. They exist for security and traffic management. They are not used to build a profile of you or to track you across other websites.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
__cf_bm |
Cloudflare | Bot management. Distinguishes automated requests from those made by a person, so that malicious traffic can be filtered without blocking real visitors. | Strictly necessary | 30 minutes |
cf_clearance |
Cloudflare | Records that a security challenge has been completed successfully, so that you are not challenged again on every page. Set only where a challenge has been triggered. | Strictly necessary | Set by the challenge configuration; typically 30 minutes |
Nothing is stored in your browser's local storage by this site. If a consent mechanism is ever introduced, your choice would be recorded there, and this page would say so before that happened.
Why there is no cookie banner
Because the only cookies involved are strictly necessary, consent is not required under PECR. A banner would ask you for permission we do not need, and would interrupt a page you came here to read.
So we do not show one. If that changes — if we introduce anything that requires consent — a consent mechanism will be in place first, and this page will be updated before the tool is enabled.
Analytics and measurement
- We do not currently use any analytics, heatmap or session-recording tool that requires consent. None is installed on this site.
- We may in future use a measurement tool to understand how the site is used — which pages are read, and whether people find what they came for.
- Where such a tool sets cookies or similar technologies that are not strictly necessary, or records how a visitor interacts with a page, it will not be enabled until a consent mechanism is in place. This page will be updated first, to identify the tool, its provider, its purpose and its retention period.
- Where a measurement tool sets no cookies and does not identify individual visitors, we will disclose it on this page, but consent will not be sought, because none is required.
We have deliberately not listed the tools we might use. Naming a product that is not installed would make this page inaccurate, and accuracy is the only thing that makes a cookie policy worth reading.
Managing cookies
Every major browser lets you see the cookies stored for a site, delete them, and refuse new ones. The controls are usually found under Settings, then Privacy, Security, or Site settings. Most browsers also allow you to clear everything for a single site without affecting others.
Blocking strictly necessary cookies is possible, but it has consequences. If the Cloudflare cookies above are refused, a security challenge may be repeated on every page, and access to the site may be slower or, in some cases, unavailable. That is a limitation of how the protection works, not a choice we make about you.
Contact
Questions about this policy, or about anything this site stores in your browser: privacy@thurloebancroft.co.uk.
How we handle personal data more generally is set out in our Privacy Policy.
This page describes our own practice. It is not legal advice. Any organisation setting cookies should obtain its own independent advice.