Cookies
Two things are set without asking because the site cannot work otherwise. Everything else waits for you to say yes, and refusing costs you nothing at all.
Why you are being asked at all
Regulation 6 of the Privacy and Electronic Communications Regulations prohibits storing information on your device, or reading information already there, without your consent. The prohibition covers cookies, but also local storage, tracking pixels, scripts, tags and device fingerprinting — the technique does not matter.
There are exceptions, listed in Schedule A1 to those Regulations since February 2026. Two of them apply to this site.
The exceptions we rely on
- Transmission — what is technically required to carry the page to you over the network
- Strictly necessary — what the site needs to function and stay secure, including remembering the choice you made about this banner
The exception we do not rely on
- Statistics — paragraph 5 permits first-party analytics collected purely to improve a website, on an opt-out basis
- We use Google Analytics, and an ordinary Google Analytics deployment does not satisfy that paragraph's conditions, because the data is shared with and used by a third party for its own purposes
- So we ask for consent instead. That is the stricter reading, and it is the correct one for our configuration
What is actually set
Grouped by whether it waits for your consent. Names and lifetimes are as the provider documents them; where a provider does not publish a lifetime we say so rather than guess.
| Name | Set by | Purpose | Lifetime |
|---|---|---|---|
| Set without asking — strictly necessary | |||
| bca_consent | This site | Remembers whether you accepted or refused analytics, so you are not asked again on every page | 6 months |
| Session and security | Our host | Short-lived values the platform uses to serve the page and protect the contact form from automated abuse | Session |
| Set only if you agree — analytics | |||
| _ga | Google Analytics | Distinguishes one browser from another so a visit can be counted once rather than on every page | 2 years |
| _ga_<id> | Google Analytics | Holds the session state for this specific property | 2 years |
| tildasid | Website platform | The platform's own request statistics. Its documentation classes this as analytical and consent-based | Session |
| tildauid | Website platform | The platform's own visitor identifier for its built-in statistics | Up to 90 days |
| TILDAUTM | Website platform | Records campaign parameters from the address you arrived on, so a referral can be attributed | Up to 90 days |
If you refuse, none of the second group is set and nothing in the first group changes. We re-check this list whenever we change a supplier, and the date of the last check is at the foot of this page.
Changing your mind, and what happens if you refuse
The reject control on the banner is the same size and weight as the accept control. The regulator requires it, and a banner built to make refusal tiring is an admission.
No page on this site behaves differently if you refuse. Nothing is hidden, nothing is slowed, and you are not asked again until the stored choice expires.
Use the cookie settings link in the footer at any time to change the answer, or clear the site's data in your browser to be asked afresh.
Browser-level controls. Every major browser lets you block or delete cookies for a specific site or for all sites, and most offer a setting that rejects third-party cookies outright. Those controls sit above anything this site does. We do not treat a browser setting as evidence that you have objected — the regulator says we must not — so if you want analytics off here, use the banner.
What this site does not run
Absent entirely
- Advertising or remarketing tags of any kind
- The LinkedIn Insight tag, the Meta pixel and their equivalents
- Cross-site tracking, device fingerprinting and session recording
- Chat widgets, heatmaps and A/B testing tools
- Any third-party font, script or style loaded from someone else's domain
Why that is worth saying
- Each of those would be a separate consent and a separate transfer to disclose
- Typefaces on this site are served from our own domain, so no request leaves it to render a page
- Fewer third parties is the only cookie policy that stays true without maintenance
- If any of this changes, this page changes before the tag goes live
Questions about any of this
The wider picture — what we collect, who sees it and where in the world it goes — is in the privacy notice.
Last checked 21 October 2026 · mail@bcabusiness.co.uk