Cookie Policy.

Cookies are small text files that are placed on your device (computer, smartphone or tablet) when you visit a website. They are widely used to make websites work, or work more efficiently, and to provide information to the website owner.

Cookies allow a website to recognise your device and remember information about your visit — for example, your preferred language, login state, items you've added to a form, or which pages you've already viewed. Similar technologies such as web beacons, pixels, local storage and session storage work in comparable ways and are covered by this Cookie Policy.

Cookies set by the operator of the website you are visiting are called "first-party cookies". Cookies set by parties other than the website operator are called "third-party cookies". Third-party cookies enable third-party features or functionality to be provided on or through the website — such as analytics, embedded video, or advertising.

We use cookies on our Website for the following purposes:

• To enable the Website to function: some cookies are essential for the Website to load, navigate and remain secure. Without them, key parts of the site simply will not work.
• To remember your preferences: functional cookies remember choices you make — such as language, region, or whether you've dismissed an information banner.
• To improve the Website: analytics cookies help us understand how visitors interact with the Website — which pages are most useful, where users come from, and where the experience can be improved.
• To deliver and measure marketing: with your consent, marketing cookies help us deliver relevant content and advertising on the Website and other platforms, and measure the effectiveness of our campaigns.

Cookies that are not strictly necessary are only set after you have given consent via our cookie banner. You can withdraw consent at any time using the controls in Section 06.

We classify the cookies we use into four categories:

• Strictly Necessary Cookies (Always On): required for the Website to function. They enable core features like page navigation, secure form submission, content delivery network routing, and remembering your cookie consent choices. These cookies do not require consent under PECR.
• Functional Cookies (Optional): remember preferences and choices to improve your experience — such as language, chat widget state, or whether you've already seen a notice. Set only if you consent.
• Analytics & Performance Cookies (Optional): help us understand how visitors use the Website by collecting aggregated, anonymised information about page views, traffic sources, time on site, and visitor flow. Set only if you consent.
• Marketing & Advertising Cookies (Optional): used to deliver advertising more relevant to you and your interests, to limit the number of times you see an advertisement, and to help measure the effectiveness of advertising campaigns. Set only if you consent.

Cookies can also be classified by their duration:

• Session cookies are temporary and are deleted from your device when you close your browser.
• Persistent cookies remain on your device for a set period of time or until you manually delete them.

The following table lists the cookies most commonly set on this Website. Our Website is built on the HubSpot CMS, which is also our customer relationship and analytics platform — the cookies below reflect HubSpot's standard tracking. Cookie names and durations are set by HubSpot and may change as HubSpot updates its platform.

Note: the marketing cookies above are listed because they are commonly used by Grant & Graham's marketing channels (LinkedIn, Google, Meta). They are only set on your device if the corresponding tracking is currently active on the Website and you have consented via our cookie banner. If you opt out of marketing cookies, none of the above will be set.

Some cookies on the Website are set by third parties — not by us directly. We use these third parties to provide functionality on the Website and to measure and improve our marketing. The main third-party providers we may use are:

• HubSpot, Inc. — CMS, CRM, analytics and chat widget. HubSpot Privacy Policy.
• Cloudflare, Inc. — content delivery, performance and security. Cloudflare Privacy Policy.
• LinkedIn (Microsoft Corporation) — if installed and you consent: Insight Tag for campaign measurement and retargeting. LinkedIn Privacy Policy.
• Google LLC — if installed and you consent: Google Analytics 4 and/or Google Ads. Google Privacy Policy.
• Meta Platforms, Inc. — if installed and you consent: Facebook Pixel for campaign measurement and retargeting. Meta Privacy Policy.

These third parties are independently responsible for the cookies they set and the data they collect. We recommend reviewing their privacy notices to understand how each one handles your data.

Some third-party providers (notably Google and Meta) may transfer personal data to jurisdictions outside the UK and the European Economic Area. Where this happens, we rely on appropriate safeguards as required under the UK GDPR, including UK International Data Transfer Agreements or equivalent mechanisms put in place by the third party.

You have full control over which optional cookies are set on your device. By default, only strictly necessary cookies are loaded. All other categories are off until you opt in.

You can change your cookie preferences at any time using the controls below. Changes take effect immediately and apply to future visits.

If the button above does not open the banner, your browser may be blocking the script that controls it. In that case, please use your browser's cookie controls (see Section 07) instead, or contact us using the details in the Contact Information block at the foot of this page.

Independently of the controls on this Website, every modern browser lets you view, delete and block cookies. The exact steps differ by browser, but most allow you to:

• View existing cookies stored on your device.
• Delete cookies individually or in bulk.
• Block all cookies, or block third-party cookies only.
• Send a "Do Not Track" signal with each request, or enable Global Privacy Control where supported.

Direct guidance from the most common browsers:

• Google Chrome — Clear, allow and manage cookies
• Mozilla Firefox — Cookies information and management
• Apple Safari (Mac) — Manage cookies and website data
• Microsoft Edge — Delete cookies
• Opera — Web preferences and cookies

Please note: blocking strictly necessary cookies may cause parts of the Website to stop working as expected — including form submissions, language switching, and chat functionality.

For all cookies that are not strictly necessary, we rely on your freely-given, specific, informed and unambiguous consent as the lawful basis for setting them — in line with the requirements of the UK GDPR and PECR.

Consent is collected via our cookie banner the first time you visit the Website. The banner gives you the option to accept all categories, reject all non-essential categories, or set granular preferences by category.

You can withdraw consent at any time by:

• Re-opening the cookie banner using the "Manage cookie preferences" controls in Section 06 of this Cookie Policy or in the page hero.
• Clearing the cookies your browser has stored for grant-graham.co.uk — the banner will reappear on your next visit.
• Contacting us using the details below to request withdrawal in writing.

Withdrawing consent does not affect the lawfulness of any cookie-based processing that took place before the withdrawal.

The duration for which each cookie is retained on your device is shown in the cookie tables in Section 04. Cookie durations are set by the cookie provider and are typically:

• Session cookies: deleted when you close your browser.
• Short-lived persistent cookies: 30 minutes to 7 days.
• Long-lived persistent cookies: typically 13 months — the maximum duration recommended by the UK ICO for first-party analytics cookies before consent is re-confirmed.

Personal data collected through cookies is retained in line with our Privacy Policy. Anonymised, aggregated analytics data is retained for as long as it remains useful for understanding and improving the Website.

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, the third parties we work with, or applicable law. The "Effective" date in the page hero indicates when the current version became effective.

If we make material changes, we will refresh the cookie banner so that you are asked to renew your consent under the updated terms. Continued use of the Website after a material update constitutes acceptance of the updated Cookie Policy in respect of strictly necessary processing only — consent for non-essential categories is always sought separately via the banner.