Legal
Cookie Policy
Last updated October 2026
This policy explains how Sure Formation Ltd ("we", "us") uses cookies and similar technologies on our website. Our privacy notice explains how we use personal data more generally.
What cookies are
Cookies are small text files that a website stores on your device. Similar technologies, such as local storage and tracking pixels, work in a similar way. In this policy, "cookies" covers all of them.
Some cookies are set by us (first-party cookies). Others are set by other organisations whose services we use, such as our payment provider (third-party cookies).
The law on cookies
The Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025, say that we must ask for your consent before storing or reading cookies on your device, unless an exemption applies.
The exemptions cover cookies that are:
- strictly necessary to provide a service you have asked for, such as keeping you logged in or remembering your basket;
- used for the security of our website or your account, or to prevent fraud;
- used only to collect statistical information about how our website is used, so that we can improve it;
- used to adapt the appearance or functionality of our website to your preferences, or to remember choices you have made.
The statistical and functionality exemptions apply only if we tell you clearly about the cookies and give you a simple and free way to object to them. Where we rely on them, we tell you so in the table below, and you can switch those cookies off in our cookie settings.
All other cookies, such as advertising cookies, are only set with your consent.
Cookies we use
| Cookie | Set by | Purpose | Duration | Category |
|---|---|---|---|---|
sure-formation-session |
Us | Keeps you signed in and remembers your order details as you move between pages | 2 hours of inactivity | Strictly necessary |
XSRF-TOKEN |
Us | Protects forms against cross-site request forgery (CSRF) attacks | 2 hours | Strictly necessary (security) |
remember_web_… |
Us | Keeps you signed in on this device, only if you tick "Remember me" when you sign in | Up to 400 days, or until you sign out | Strictly necessary |
sf_consent |
Us | Remembers your cookie choices, the policy version they were made under and when | 6 months | Strictly necessary |
flux.appearance (local storage, not a cookie) |
Us | Remembers the light or dark theme you chose | Until you clear it | Strictly necessary (a setting you asked for) |
_ga |
Google Analytics (Google) | Distinguishes visitors so we can count visits and see how our website is used | 2 years | Analytics (only if you allow it) |
_ga_<ID> |
Google Analytics (Google) | Keeps track of your session for analytics | 2 years | Analytics (only if you allow it) |
We do not use marketing or advertising cookies.
Payments and security checks
Card payments are taken on Stripe's own secure checkout page (checkout.stripe.com). Stripe sets its cookies there, on its own domain, to process the payment and prevent fraud; see stripe.com/cookies-policy/legal. Some of our forms use a bot check to tell people from bots: either Cloudflare Turnstile, which runs in a frame from challenges.cloudflare.com, or Google reCAPTCHA, which may set a _GRECAPTCHA cookie on google.com. The check is used only to protect the form you are sending, so we treat it as strictly necessary for security.
Analytics
We only set analytics cookies if you accept them. Analytics data is used only to understand how our website is used and to improve it. You can change your choice at any time in our cookie settings.
Other tools
Records of your choice
When you make a choice, we keep a record of it: a random identifier, what you chose, the policy version and the date, with scrambled (hashed) versions of your IP address and browser details, never the raw values. We keep this so we can show that we asked for and respected your consent.
Managing your choices
When you first visit our website, we show a cookie banner. You can:
- accept all optional cookies;
- reject all optional cookies, as easily as you can accept them; or
- choose which categories to allow.
Strictly necessary cookies are always on, because the website cannot work without them.
We remember your choice for 6 months, after which we ask again. We also ask again whenever we change the cookies we use.
Changing or withdrawing consent
You can change your mind at any time by using the "Cookie settings" link in the footer of every page. Withdrawing consent is as easy as giving it. If you withdraw consent, we stop setting those cookies from then on and delete the ones we can.
You can also control cookies through your browser settings, and delete cookies that are already stored. If you block strictly necessary cookies, parts of our website, such as the basket and checkout, will not work. For guidance, see your browser's help pages or ico.org.uk.
Changes to this policy
We may update this policy when we change the cookies we use or when the law changes. We will post the latest version on this page and change the date at the top. If we add a cookie that needs your consent, we will ask you again.
Contact us
If you have any questions about our use of cookies, contact us at [email protected].