Cookie Policy | Hybytes

Introduction

Hybytes Ltd ("Hybytes", "we", "us", "our") uses cookies and similar technologies on hybytes.com to help the site function, understand how it is used, and support our marketing. This policy explains what cookies are, which ones we use, and your choices.

It should be read together with our Privacy Policy. We aim to comply with the UK Privacy and Electronic Communications Regulations (PECR), the EU ePrivacy Directive, UK and EU GDPR, and, for visitors from California, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).

1. What cookies are

Cookies are small text files placed on your device when you visit a website. They can be first-party, meaning set by Hybytes, or third-party, meaning set by an external provider we use, such as Google or HubSpot. Under PECR, we need your consent before setting any cookie that is not strictly necessary for the site to work, which is why you see a cookie banner on your first visit.

2. Categories of cookies we use

Essential (strictly necessary) cookies

These are required for the site to function and cannot be switched off. They do not require consent.

cookie_consent: remembers your cookie preference. Duration 12 months. Set by Hybytes.
__cf_bm: supports bot detection and mitigation to keep the site secure and available. Duration 30 minutes. Set by Cloudflare.
cf_clearance / Turnstile session token: confirms you passed the "Verify you are human" check on our forms, such as the call-booking form, so we can tell real enquiries from automated spam. Duration: session or short-lived. Set by Cloudflare Turnstile.

Analytics cookies

These help us understand how visitors use hybytes.com so we can improve it. Set only after you consent.

_ga: distinguishes unique visitors. Duration 2 years. Set by Google Analytics.
_ga_<container-id>: persists session state for Google Analytics reporting. Duration 2 years. Set by Google Analytics.
__hstc: tracks visitor, session, and campaign data. Duration 13 months. Set by HubSpot.
__hssc: session cookie tracking page views. Duration 30 minutes. Set by HubSpot.
__hssrc: detects whether a new browser session has started. Duration: session only. Set by HubSpot.

Functional cookies

These support features like our live chat widget remembering you between pages, and recognising returning visitors so a conversation can continue where it left off. Set only after you consent. If disabled, live chat may not carry your details between pages.

hubspotutk: identifies you across visits so live chat conversations and forms can recognise you. Duration 13 months. Set by HubSpot.

Marketing / advertising cookies

These measure and support our advertising, including how effective a campaign was at bringing you to the site. Set only after you consent.

_gcl_au: stores ad click information to measure Google Ads conversions. Duration 90 days. Set by Google Ads.
_fbp: used by Meta Pixel to measure and deliver advertising, including on Facebook and Instagram. Duration 90 days. Set by Meta.

Fraud prevention and device signals

With your consent, we may collect additional device and browser characteristics, such as screen and hardware details, to strengthen fraud detection on our forms and to help us understand how our pages perform. This is set only after you consent through the cookie banner. If this is delivered through a specific third-party tool, we will name that tool and its cookie details here.

We do not currently use a heatmap or session recording platform on hybytes.com. If we add one, we will name it here, describe what it collects, and gate it behind the same consent mechanism as our other analytics and marketing cookies.

3. Your choices and consent

When you first visit hybytes.com, a cookie banner lets you accept all cookies, reject non-essential cookies, or customise your preferences by category. You can change your choice at any time using the Cookie Settings link in the site footer, or by clearing cookies in your browser, which will show the banner again on your next visit. If you accept only essential cookies, the site continues to work normally but we will not collect analytics or marketing data about your visit.

We honour Global Privacy Control (GPC) and similar browser opt-out signals: if your browser sends one, we will not set analytics or marketing cookies for you even if you have not otherwise responded to the banner.

4. Third-party tracking: what to be aware of

Where you consent to analytics or marketing cookies, third parties such as Google and Meta may place their own cookies, combine what they collect with information already held in your own account with them (for example, a Google or Facebook account), and use it to build a profile of your activity across other websites, not just ours. This is how those companies' advertising and analytics products work generally, not something specific to hybytes.com. Hybytes does not control how these third parties process data collected this way. We recommend reviewing Google's and Meta's own privacy and cookie disclosures if you want the full picture before consenting.

5. Managing cookies in your browser

Most browsers let you block or delete cookies directly. Search your browser's help pages for "cookies" (Chrome, Firefox, Safari, and Edge each document this clearly), or use the cookie banner on our site, which is quicker for hybytes.com specifically.

6. Client portals and managed environments

Where an engagement gives you access to a separate client portal, ticketing system, or environment we manage on your behalf, cookies or session tokens used purely to keep you signed in and secure that access are strictly necessary for that system to function and are covered by our Acceptable Use Policy rather than this consent-based framework.

7. Changes to this policy

We may update this policy as our tools change. Material changes are announced through the cookie banner. The current version is always available at https://hybytes.com/legal/cookie-policy.

8. Contact

Questions about this policy can be sent through our contact form.