Cookie Notice
Last updated: 31 October 2026
1. About this notice
1.1 This notice is issued by Brandian Ltd, a company registered in England and Wales under company number 11588933, whose registered office is at Brandian, 124 City Road, London EC1V 2NX ("Brandian", "we", "us" and "our"). It explains what cookies and similar technologies are used on brandian.uk (the "website"), who sets them, what they do, and how you can control them.
1.2 We use cookies in accordance with the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended by the Data (Use and Access) Act 2025, and the guidance of the Information Commission's Office (ICO).
1.3 Our privacy notice at brandian.uk/privacy-notice explains how we handle personal data generally, including the personal data that the components listed in this notice send to their providers. Questions about cookies should be sent to legal@brandian.uk.
2. What cookies are
2.1 A cookie is a small text file that a website stores on your device when you visit it, so that the website can recognise your browser from one page to the next or from one visit to the next. Similar technologies, such as local storage, pixels and scripts that read information from your device, store or read information for the same purposes, and this notice treats them in the same way.
2.2 Session cookies are deleted when you close your browser. Persistent cookies remain on your device until they expire or you delete them.
2.3 Some of the components on the website are provided by third parties. When a component loads, your browser sends that provider your IP address and standard technical information about your browser, whether or not the component sets a cookie. Section 5 says what each component sends.
3. How consent works on the website
3.1 The website uses a consent banner provided by Usercentrics. The banner sorts the components on the website into four categories: Essential, Functional, Marketing and Analytical.
3.2 Essential components load for every visitor, without consent. They are the components the website needs in order to work, to stay secure, to record your consent choice, and to run the contact form and the booking window when you use them.
3.3 Functional and Marketing components load only if you consent to that category. No component on the website is in the Analytical category.
3.4 When you first visit the website, the banner, headed Privacy Settings, offers three buttons: Accept All, which consents to every category; Deny, which continues with Essential components only; and Save Settings, which saves the choices you make category by category after opening More Information. The banner records your choice so that you are not asked again on every page.
3.5 You may change your choice at any time through the fingerprint button that remains at the bottom left of every page. It opens the same settings, with the same three buttons. Withdrawing consent to a category stops its components loading from that point. Cookies already set expire on their stated lifetime or when you delete them.
3.6 You may also block or delete cookies through your browser's settings. Instructions are in your browser's help pages. Blocking Essential cookies may prevent parts of the website from working.
4. Where the component list comes from
4.1 The components in section 5 are those found by the Usercentrics scan of the website and set in the banner on 31 October 2026. The cookie names and lifetimes stated were verified on the same date by a check of the live website in a browser, or are taken from the provider's own published documentation where the notice says so. Where a component runs inside a window embedded from another provider, the notice says what that provider's page loads, as observed on that provider's own page.
5. The components, category by category
5.1 Essential (load for every visitor)
Wix. Provided by Wix.com Ltd, the platform that hosts the website and delivers its images, video and typefaces. Wix's cookies keep the website secure, maintain the connection as you move between pages, and monitor that the platform is working. Wix also loads Sentry, an error-logging service, which receives a report when a page error occurs. Wix receives your IP address and technical information about your browser as part of serving the pages. None of these cookies is used to identify you, to measure how you use the website, or to follow you to other websites. Cookies, per Wix's published list, with lifetimes observed on the live website where they differ:
Name | Purpose | Lifetime |
|---|---|---|
sec-fetch-unsupported | Notes that a browser cannot support a security feature | Session |
wixSession | Security, stability and core site function | 12 months |
oAuthState | Identification during a session | Session |
client-session-bind | Protects the site's interfaces | Session |
server-session-bind | Protects the site's interfaces | Session |
_wixAB3 and variants | Wix platform experiments | 6 months |
fedops.logger.sessionId | Logs site errors so they can be fixed; also held in local storage | 12 months |
bSession | Measures whether the platform is working | 30 minutes, observed |
TS* | Security: detects attacks | Session |
SSR-caching | Records how the page was rendered | Wix's list says 24 hours; observed to expire within a minute |
svSession | Security, stability and core site function | 12 months |
hs | Security | Session |
XSRF-TOKEN | Protects against cross-site request forgery | Session |
Usercentrics for Wix. Provided by Usercentrics GmbH. The consent banner itself. It stores your consent choice so that the website can honour it on every page and on later visits, and records the choice, with its date and the banner version, so that we can show that consent was given. Verified on the live website:
Name | Type | Purpose | Lifetime |
|---|---|---|---|
ucString | Local storage | The encoded consent record | Until you clear your browser's site data |
ucData | Local storage | Your choice for each component, with its date | Until you clear your browser's site data |
consent-policy | Cookie | Your choice for each category | 12 months |
Deftform. Provided by Deftform. Runs the contact form on the Contact page, which loads inside a window embedded in that page from form.brandian.uk. What you type in the form is sent to Deftform when you submit it, as described in our privacy notice. Verified on form.brandian.uk: one cookie, XSRF-TOKEN, which protects the form against cross-site request forgery and expires at the end of the day it is set. No other cookie or storage was observed.
Simple Analytics, loaded by Deftform. Provided by Simple Analytics B.V. and loaded by Deftform on its forms; we did not add it to the website ourselves. Simple Analytics states that its service uses no cookies and collects no personal data. That is the provider's statement. No cookie or storage from Simple Analytics was observed in the check.
TidyCal. Provided by TidyCal (AppSumo). When you choose "Book a 45-minute video call" on the Contact page, a booking window opens on the page and shows TidyCal's booking page, tidycal.com/brandian, inside it. Everything in that window is TidyCal's own page, and TidyCal's privacy notice governs it. Verified on tidycal.com/brandian: the page sets TidyCal's own XSRF-TOKEN cookie (security, 12 months) and holds your display preferences in local storage, and it loads the following providers of TidyCal's, each of which receives your IP address and browser information when the window opens:
Provider, loaded by TidyCal | What it is | Cookies observed on TidyCal's page |
|---|---|---|
Cloudflare, Inc. | A security check that TidyCal's page may run to tell real visitors from automated traffic; it did not run during our check | Per Cloudflare's published list, where it runs: __cf_bm (bot protection, session) and cf_clearance (records that a challenge was passed, session) |
Chatbase | TidyCal's chat assistant | chatbase_anon_id (session) |
Google LLC: Google Fonts | The typefaces of TidyCal's page; Google states it sets no cookies | None |
Microsoft Corporation: Clarity | TidyCal's own recording of how visitors use its booking pages | The cookies listed in Microsoft's documentation (_clck, _clsk, CLID, ANONCHK, MR, MUID, SM), set in TidyCal's page |
Google LLC: Google Tag Manager and Google Analytics 4 | TidyCal's own analytics of its booking pages | _ga and ga followed by TidyCal's property identifier, both on tidycal.com; 2 years per Google, observed as 13 months, the browser's own limit |
Stripe, Inc. | Payment script. No payment is taken on our booking page; TidyCal loads it on every booking page | __stripe_mid (fraud prevention, 12 months); __stripe_sid (fraud prevention, expires the same day) |
The data these providers collect goes to TidyCal and to them, under TidyCal's privacy notice and theirs. It does not come to Brandian. Brandian receives only the booking you make.
jsDelivr. Provided by Prospect One (jsDelivr), a content delivery network from which an embedded element on the home page loads the three.js library used for its visual. jsDelivr receives your IP address and the request for the file. No cookie or storage from jsDelivr was observed on brandian.uk.
Trustpilot. Provided by Trustpilot A/S. The reviews widget that displays our Trustpilot rating, loaded inside an embedded element. When it loads, your browser requests the widget from Trustpilot's servers, which receive your IP address and the address of the page you are on, and the widget reports back to Trustpilot that it was displayed, with the page address and our Trustpilot account identifier, which Trustpilot counts as a view or impression. No cookie or storage from Trustpilot was observed on brandian.uk itself; what the widget holds inside its own frame is governed by Trustpilot's cookie policy.
5.2 Functional (load only with your consent)
Google Fonts. Listed by the scan because TidyCal's booking page loads its typefaces from Google. Brandian's own pages take their typefaces from Wix and load nothing from Google Fonts; see the TidyCal entry in section 5.1.
5.3 Marketing (load only with your consent)
Google Tag Manager, Google Tag Services and Microsoft Clarity. Listed by the scan because TidyCal's booking page loads them; see the TidyCal entry in section 5.1. Brandian's own pages load none of them: in the check of 31 October 2026, with every category accepted, no request to Google Tag Manager, Google Tag Services, Google Analytics or Microsoft Clarity was made by any Brandian page. Google Tag Services, the domain of Google's advertising library, was not observed on any page in the check, including TidyCal's.
5.4 Analytical
No component on the website is in this category.
6. Google Analytics
6.1 Brandian's own pages do not run Google Analytics. The check of 31 October 2026, with every category accepted, found no Google Analytics request from any Brandian page. The Google Analytics that runs inside the booking window is TidyCal's, measuring TidyCal's booking pages, as section 5.1 states. If we add Google Analytics to the website, it will run only with your consent and this notice will say so.
7. Keeping this notice current
7.1 We check this notice against the website whenever a component is added or removed, and update it when a cookie changes. The date at the top shows when it was last updated.