Cookie Policy

Your Cookie Choices & Controls

We believe in transparency and visitor autonomy. In compliance with UK PECR and Google Consent Mode v2, all non-essential cookies (including analytics and marketing tags) are disabled by default until you grant affirmative, explicit consent.

1. What Are Cookies & Browser Storage?

Cookies are small text files placed on your computer or mobile device when you visit websites. They are widely used to make websites work securely and efficiently, remember user preferences, and provide aggregated analytics to site owners.

In addition to standard HTTP cookies, modern web applications may use browser LocalStorage or SessionStorage to securely retain your interface settings (such as your cookie preferences) without transmitting personal identifiers to third parties on every network request.

2. Complete Cookie & Storage Inventory

The following schedule outlines all cookies, scripts, and browser storage keys utilised across our website:

• orama_cookie_consent_v1 (LocalStorage · 12 months · Strictly Necessary): Stores your privacy choices (whether you accepted or declined analytics and marketing cookies) so you are not repeatedly prompted on subsequent page visits.
• Session Integrity & Anti-CSRF (Session / Memory · Session · Strictly Necessary): Protects contact and consultation enquiry forms against automated spam attacks and cross-site request forgery.
• Server Rate Limiting & Security (Server Logs · Up to 24 hours · Strictly Necessary): Safeguards our infrastructure against denial-of-service attempts, brute force abuse, and malicious traffic.
• _ga (HTTP Cookie · 2 years · Performance & Analytics · Optional): Assigned by Google Analytics to distinguish unique website visitors anonymously. Strictly disabled until you grant Analytics consent.
• _ga_* (HTTP Cookie · 2 years · Performance & Analytics · Optional): Used by Google Analytics 4 to persist session state and page interaction events. Strictly disabled until you grant Analytics consent.
• gtm.js (Script Container · Session · Performance · Optional): Google Tag Manager container used strictly to trigger approved measurement events according to your Consent Mode v2 preferences.
• Google Reviews Widget via Elfsight (Functional Embed · Session): Embeds verified client reviews and ratings. Configured to minimise third-party requests and avoid cross-site tracking profiles.
• Cal.com Consultation Scheduling (Functional Embed · On-demand only): Zero third-party cookies or scripts are loaded on initial page load. Cal.com is only invoked dynamically when you interact with a consultation booking trigger.

3. Google Consent Mode v2 Implementation

Our website implements Google Consent Mode v2 natively. When you first visit our site, the following consent parameters are set to 'denied' by default before any measurement scripts are executed:

• analytics_storage: 'denied' (no analytics cookies read or written)
• ad_storage: 'denied' (no advertising cookies read or written)
• ad_user_data: 'denied' (no user data shared with Google advertising networks)
• ad_personalization: 'denied' (no personalised remarketing or ad profiling)
• functionality_storage: 'granted' (essential website functions only)
• security_storage: 'granted' (form security, fraud prevention, and session integrity)

4. Managing Cookies in Your Web Browser

You can adjust your cookie settings on our site at any time using the on-site preference manager above or by clicking the floating cookie icon in the bottom-left corner of the screen.

Alternatively, most web browsers allow you to control cookies through their browser settings. You can configure your browser to reject all cookies, notify you when a cookie is issued, or delete stored cookies. Guidance for major browsers is available on their respective support portals (Google Chrome, Apple Safari, Mozilla Firefox, Microsoft Edge).

Please note that disabling strictly necessary cookies may prevent enquiry form submission and degrade essential security protections.

5. Questions & Data Protection Contact

For any questions regarding our cookie practices, or to exercise your statutory data rights under UK GDPR, please contact our Data Protection lead, Costas Joannides, at costas@oramadesignbuild.co.uk or by telephone on 07940 077 994. For complete details on how we process your personal data, please review our Privacy Policy.