Cookies & Similar Technologies Policy

This Cookies & Similar Technologies Policy explains how Gatherstone Ltd (“Gatherstone”, “we”, “us” or “our”) uses or may use cookies and other technologies that store information on, or access information from, your device when you visit gatherstone.co.uk.

This Policy should be read alongside our Privacy Policy.

The rules governing these technologies include the Privacy and Electronic Communications Regulations (“PECR”), as amended, together with applicable UK data-protection law.

Gatherstone Ltd
Company Number: 17465110
Registered in England and Wales
Registered Office: 66 Paul Street, London, EC2A 4NA, United Kingdom

Website: www.gatherstone.co.uk
Email: hello@gatherstone.co.uk

Cookies are small pieces of information that websites can store on a visitor’s device and access when required.

Similar technologies can include:

• local storage;
• session storage;
• tracking pixels;
• scripts and tags;
• device or browser identifiers;
• link decoration;
• fingerprinting technologies; and
• other technologies capable of storing information on, or accessing information from, a user's device.

PECR is not limited to traditional browser cookies and can apply to these other forms of storage and access technology.

Not every cookie or similar technology requires consent.

Under current UK rules, a technology may be used without consent where its use satisfies the requirements of an applicable legal exception.

Current exceptions include technologies used:

• solely to transmit a communication;
• where strictly necessary to provide an online service requested by the user;
• solely for qualifying statistical purposes;
• solely for qualifying appearance or functionality purposes; or
• in qualifying circumstances to determine location for emergency assistance.

These exceptions are purpose-specific and their requirements must actually be satisfied. Gatherstone will not classify a technology as exempt simply because it is useful to us.

Where no applicable exception applies, we will obtain the required consent before using the technology.

We may use technologies that are genuinely necessary to provide functionality requested by a visitor or otherwise qualify for an applicable exemption.

These may include technologies required for purposes such as:

• website security;
• fraud or abuse prevention;
• essential website operation;
• authentication where applicable;
• maintaining essential sessions; and
• remembering a visitor's cookie or privacy choices.

Where a technology meets the requirements of the strictly necessary exception, consent is not required.

Gatherstone may use technologies to understand how gatherstone.co.uk is used and improve the website.

Following changes introduced by the Data (Use and Access) Act 2025, certain technologies used solely for qualifying statistical purposes may be used without consent where all requirements of the statutory exception are satisfied.

Where Gatherstone relies on this exception, we will provide clear and comprehensive information about the technology and provide a simple and free means of objecting.

We will not assume that every analytics service automatically qualifies for this exception.

If an analytics technology is used for additional purposes or otherwise falls outside the exception, we will obtain consent where required.

Certain technologies used solely to adapt or improve how the Website appears or functions according to a visitor’s preferences may also qualify for an exception.

This could include appropriate technologies used to remember certain display or functionality preferences.

Where Gatherstone relies on this exception, we will provide appropriate information and a simple and free means of objecting as required.

Technologies used to personalise content based on inferred interests or browsing behaviour do not automatically qualify for this exception.

If Gatherstone uses technologies for online advertising, behavioural tracking, advertising measurement or similar marketing purposes, we will assess whether consent is required.

The ICO’s current guidance states that storage and access technologies used for online advertising require consent.

Where consent is required, those technologies will not be activated before the appropriate consent has been obtained.

Gatherstone aims to ensure that its cookie information reflects the technologies actually operating on gatherstone.co.uk.

We will not list analytics, advertising platforms or other third-party technologies in this Policy simply because they might be used in the future.

Where appropriate, information about technologies actually in use should identify:

Name · Provider · Purpose · Category · Duration · Consent/exception status

The Website and its technologies may change over time.

Where consent is legally required, Gatherstone will request it before the relevant technology is used.

Consent must involve an appropriate positive action.

We will not treat the following alone as consent:

• continuing to browse the Website;
• scrolling;
• inactivity;
• ignoring a cookie notice; or
• simply visiting another page.

Non-exempt technologies requiring consent must not be enabled before that consent is obtained.

Where gatherstone.co.uk uses technologies requiring consent, visitors will be given an appropriate mechanism to make their choices.

Depending on the technologies in use, this may allow visitors to:

• accept optional technologies;
• reject optional technologies; and
• manage individual categories or purposes.

Where consent has been provided, visitors must also be able to withdraw it with the same ease with which it was given.

Some technologies may not require consent but may nevertheless require Gatherstone to provide visitors with a simple means of objecting.

In particular, where Gatherstone relies on the qualifying statistical purposes or appearance exceptions, we will provide a simple and free way for visitors to object to that use.

Where an objection is made, we will respect it in accordance with the applicable requirements.

We may store information necessary to remember your cookie or privacy preferences.

This helps prevent the Website from repeatedly asking for the same choice.

A technology used solely to remember a visitor’s cookie preference may itself qualify for an exemption where the applicable requirements are satisfied.

Gatherstone may use third-party services to provide website functionality.

Depending on the Website’s actual configuration, these could include providers of:

• hosting;
• security;
• analytics;
• forms;
• embedded media;
• maps;
• communications; or
• other website functionality.

The presence of a third-party provider does not automatically determine whether consent is required.

We will consider what the technology actually does and the purposes for which information is stored or accessed.

The Website may contain embedded content from external providers.

Some embedded content can cause third-party technologies to operate when it loads.

Where such technologies require prior consent, Gatherstone will take appropriate steps to prevent them from loading until the necessary consent has been obtained.

Gatherstone may provide links to social media services.

An ordinary link does not necessarily mean the social media provider is using tracking technology through gatherstone.co.uk.

Embedded social media functionality may operate differently and will be assessed according to the technologies actually used.

Your browser or device may provide additional controls allowing you to view, delete or restrict cookies and similar technologies.

These operate separately from any privacy controls provided directly by Gatherstone.

Blocking certain essential technologies through browser settings may affect Website functionality.

Some technologies operate only during a browser session.

Others may remain on a device for a specified period.

Gatherstone will seek to ensure that technologies are not retained for longer than reasonably necessary for their stated purpose.

Where appropriate, more specific duration information will be provided through our cookie information or preference interface.

Information generated through cookies and similar technologies may constitute personal information.

Where personal information is processed, our Privacy Policy also applies.

Compliance with UK GDPR does not remove any separate requirement to comply with PECR.

Some technology providers may process information outside the United Kingdom.

Where this involves personal information, Gatherstone will consider applicable UK data-protection requirements relating to international transfers.

Further information is provided in our Privacy Policy.

Before introducing materially different website technologies, Gatherstone should consider:

• what information is stored or accessed;
• why the technology is being used;
• whether personal information is involved;
• whether an applicable PECR exception genuinely applies;
• whether visitors must be given a means of objecting;
• whether prior consent is required;
• whether a third party receives information; and
• whether this Policy or our website controls require updating.

Gatherstone should periodically review the technologies operating on gatherstone.co.uk.

This includes checking that:

• technologies listed are actually present;
• obsolete technologies have been removed;
• their purposes are correctly described;
• exemptions relied upon remain appropriate;
• technologies requiring consent do not operate before consent;
• objection mechanisms work where required; and
• consent can be withdrawn where applicable.

We may update this Policy where our Website, technology providers, processing activities or applicable legal requirements change.

The latest version will be made available through gatherstone.co.uk.

Where a material change requires fresh consent, we will request it where legally required.

Questions about Gatherstone’s use of cookies and similar technologies can be sent to:

Gatherstone Ltd
Company Number: 17465110
Registered Office: 66 Paul Street, London, EC2A 4NA, United Kingdom
Email: hello@gatherstone.co.uk
Website: www.gatherstone.co.uk