Cookie Notice

What are cookies?

Cookies are small text files placed on your device when you visit a website or use an online platform. They help services work efficiently, remember preferences, and provide information to site owners.

Some cookies are set by us directly, and others are set by third-party services we use to operate the platform.

• Session cookies: deleted automatically when you close your browser.
• Persistent cookies: remain on your device for a set period or until deleted.

The legal position

Cookie use in the UK is governed by PECR, the UK GDPR, and the Data (Use and Access) Act 2025 (DUAA).

Under the DUAA, certain low-risk cookies do not require prior consent. These include:

• Cookies that are strictly necessary for the platform to function.
• Cookies used solely to collect aggregate, anonymised statistical information about how a service is used, where the data is not used to identify individuals.

All other cookies — particularly those used for marketing, tracking, or personalisation — require your consent before being set.

We have categorised our cookies below, with a clear indication of which require consent and which do not.

Category 1 - Strictly necessary cookies

These cookies are essential for core platform operation (such as login, navigation, and security) and do not require consent.

• __session / auth-token (Supabase, HTTP): maintains authenticated login session (session, no consent required).
• sb-access-token (Supabase, HTTP): stores access token for authenticated API requests (session, no consent required).
• sb-refresh-token (Supabase, HTTP): refreshes session to keep users logged in (persistent, up to 1 year, no consent required).
• __vercel_live_feedback (Vercel, HTTP): supports platform deployment/integrity checks (session, no consent required).
• _GRECAPTCHA (Google, if used, HTTP): bot detection and fraud prevention during sign-up/login (session or up to 6 months, no consent required).

Category 2 - Functional cookies

These cookies remember user preferences to improve experience. Under the DUAA, low-risk preference cookies that directly serve the user may be set without prior consent.

• landing_preferences (Landed Lab, HTTP): stores display preferences such as theme or language (1 year, no consent required).
• cookie_consent (Landed Lab, HTTP): records your cookie choices so prompts are not repeatedly shown (1 year, no consent required).

Category 3 - Analytics cookies

We use Vercel Analytics for aggregate, anonymised usage insights. It does not track individuals, store personal data, or use fingerprinting.

Under updated ICO guidance and the DUAA, this type of aggregate analytics is exempt from consent requirements.

• _va (Vercel Analytics, HTTP): aggregate anonymised page usage insights to improve the platform (session/30 days, exempt from consent).
• _vt (Vercel Analytics, HTTP): distinguishes new vs returning visitors for aggregate reporting only (1 year, exempt from consent).

Category 4 - Marketing and third-party cookies

These cookies are set by third-party services to measure marketing effectiveness and require consent before being set.

• brevo_cid / sib_cuid (Brevo/Sendinblue, HTTP): tracks marketing email opens and click-throughs to measure campaigns (13 months, consent required).
• _fbp (Meta, if activated in future, HTTP): measures advertising effectiveness on Facebook/Instagram (3 months, consent required if activated).

Managing cookies

You can control and manage cookies in several ways:

Cookie banner: When you first visit the Landed Lab website or platform, you will be shown a cookie banner. You can accept or decline non-essential cookies at that point. You can update your choices at any time via the cookie settings link in the footer of the website.

Browser settings: Most browsers allow you to refuse or delete cookies. The method varies by browser — please refer to your browser's help documentation. Please note that disabling all cookies may affect the functionality of the platform, including your ability to log in.

Links to cookie management guidance for common browsers:

• Google Chrome: support.google.com/chrome/answer/95647
• Mozilla Firefox: support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
• Safari: support.apple.com/en-gb/guide/safari/sfri11471
• Microsoft Edge: support.microsoft.com/en-us/windows/manage-cookies-in-microsoft-edge

Do Not Track

Some browsers include a Do Not Track (DNT) setting. We currently respond to DNT signals by limiting our analytics to aggregated data only. We do not use cross-site tracking technologies.

Changes to this Cookie Notice

We may update this Cookie Notice from time to time, for example when adding features, changing analytics providers, or in response to changes in the law.

The most current version is always available at landedlab.com/cookies. Where changes are material, we notify users via the platform or by email.

Questions?

If you have questions about how we use cookies, please contact us at info@landedlab.com or write to us at: Orum Consulting Ltd, Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, BL6 6HG.

For more information about how we handle your personal data more broadly, please read our Privacy Notice at landedlab.com/privacy.