Cookies Policy

Reviewed: 29 January 2026

At a glance

  • We use cookies and similar technologies to run our site, keep you signed in, improve performance, and (with your consent) to measure usage and personalise content.
  • Strictly necessary cookies are essential and do not require consent. All other cookies (e.g., analytics, advertising) require your opt‑in consent under PECR/UK GDPR.
  • You can manage your choices at any time via the Cookie Preferences link in our footer.

What are cookies and similar technologies?

Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as local storage, session storage, and pixels/tags. These help our website function, remember your preferences, and understand how the platform is used.

How we classify cookies

We group cookies as follows:

  • Strictly necessary – required for core site functionality and security (e.g., session management, load balancing, fraud prevention).
  • Performance/analytics – help us understand site usage and improve features (e.g., page performance, error diagnostics).
  • Functional – remember choices (e.g., language, accessibility preferences) and enhance your experience.
  • Advertising/marketing – measure campaign effectiveness and, where used, tailor content; we aim to minimise these and will only use them with your consent.

Legal basis

  • Strictly necessary cookies – placed on the basis of our legitimate interests in providing a secure, functional website and to deliver a service you request (PECR exemption).
  • All other cookies – placed only with your consent (opt‑in) collected via our Cookie Consent banner/Preferences Centre. You can withdraw consent at any time.

Your choices

  • Use the Cookie Preferences link (footer) to accept, reject or customise non‑essential cookies at any time.
  • Most browsers let you block or delete cookies via settings; doing so may affect site functionality.
  • We honour your latest choices and store consent logs to record when and how you gave consent. Consent records include: user session identifier, timestamp, country (inferred from IP), preferences selected, and policy version presented. Rejecting certain cookies may affect site functionality, such as remembering your preferences between visits.

Cookies we use (examples)

Cookie names may vary by environment. This list is reviewed quarterly; the live list in our Preferences Centre is authoritative.


Strictly necessary
.ASPXAUTH
Secure session cookie to keep you logged in
Session
ASP.NET_SessionId
Provides an anonymous sessionId to the current user
Session
AuthSession
Secure authentication cookie to store authorised credentials
Session
SessionState
Provides data about the current session
Session
cookiehub
Stores your cookie choices so we can honour them
12 Months
_cfuvid
Used by Cloudflare to distinguish individual users who share the same IP address and apply rate limits | Session
Session

Performance/analytics (consent)
_ga_*
Set by Google Analytics to track user session, page views and behaviour across a specific site
1 Month
_ga
Set by Google Analytics to track user session, page views and behaviour across different sites
1 Month
_gid
Set by Google Analytics to distinguish unique users
24 hours
_gcl_au
Set by Google Tag Manager to track conversions across different sites
3 Months
_dc_gtm_UA-*
Used to throttle the request rates to Google Analytics
1 minute

Functional (consent)
_hjSession_*
Set by Hotjar to hold current session data
30 Minutes
_hjSessionUser_*
Set by Hotjar to persist the Hotjar User ID. This ensures that behavior in subsequent visits will be attributed to the same user ID
12 Months

Advertising/marketing (consent, if used)
_fbp
Used by Facebook to track visits across websites
3 Months

Third‑party cookies and partners

We may use third‑party providers for analytics, performance monitoring, payments, or marketing. We conduct due diligence on third-party providers and require them to process data only on our instructions and in accordance with our privacy standards. Where third‑party cookies are used, they will only be set with your consent (unless strictly necessary for a service you request, e.g., payment fraud checks). Details and links to partner policies are shown in the Preferences Centre.

Managing consent and preferences

  • On your first visit, we display a cookie banner with options to Accept all, Reject non‑essential, or Manage preferences.
  • You can change your choices at any time via the Cookie Preferences link in the footer.
  • If you clear cookies or use a new device/browser, we will ask for your preferences again. We may periodically ask you to confirm your cookie preferences to ensure they remain current.
  • We record your consent status (timestamp, country, preferences) in a first‑party cookie and/or server log to evidence compliance.

Do Not Track (DNT) and Global Privacy Control (GPC)

  • We currently do not change our practices in response to Do Not Track (DNT) signals.
  • Where we detect a valid GPC signal, we treat it as an opt-out from non-essential cookies and do not set such cookies unless you explicitly override via our Preferences Centre.

International transfers

Some third‑party providers may process cookie‑related data outside the UK/EEA. Where this occurs, we implement appropriate safeguards (e.g., IDTA/UK Addendum to SCCs). For transfers to countries without adequacy decisions, we conduct Transfer Risk Assessments and implement supplementary measures where necessary.

Changes to this Policy

We may update this Policy to reflect changes to cookies, providers or law. We will post the revised version with a new Reviewed date and, where material changes affect registered users, provide notice (e.g., banner or in‑app message).

UK Postbox Limited

13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, Dorset, BH16 6FH, United Kingdom


Support: support@ukpostbox.com

Security: security@ukpostbox.com

Legal notices: legal@ukpostbox.com

Data protection: dpo@ukpostbox.com

Complaints: complaints@ukpostbox.com

Accessibility: accessibility@ukpostbox.com

Website: www.ukpostbox.com


Registered in England and Wales Company Number: 06723381

MLR registration no: XLML00000192390

ICO registration no: ZA038907