Cookie policy

1. What cookies are

Cookies are small text files placed on your device when you visit a website. We also use similar technologies such as browser local storage and tracking pixels in emails. This policy covers all of them and should be read with our Privacy Notice.

Under the Privacy and Electronic Communications Regulations 2003, we set non-essential cookies only after you consent through our cookie banner.

2. Strictly necessary (always on)

These are required for the Directory to function and cannot be switched off. They do not track you across other sites.

• Authentication and session tokens - keep you signed in to an account or firm dashboard. Duration: session to 1 year.
• Security and anti-abuse tokens - protect forms and API requests against cross-site request forgery. Duration: session.
• Cookie consent record (ld_cookie_consent) - stores your consent choices so we do not ask again. Duration: 12 months.
• Interface preferences - remember basic display and search preferences. Duration: up to 12 months.

3. Analytics (consent required)

Analytics cookies help us understand how businesses find and use the Directory so we can improve search, categories and content. They are loaded through Google Tag Manager (container GTM-T5MQ958W) and only fire once you allow the analytics category.

• Google Analytics (_ga, _ga_*) - distinguishes visitors and sessions, measures page views, searches and profile views. Duration: up to 24 months.
• Internal usage events - searches performed, filters used and firm profiles viewed, recorded in aggregate.

4. Marketing (consent required)

Marketing cookies measure the effectiveness of campaigns that promote the Directory to law firms and businesses, and may be used for remarketing. They are only set if you allow the marketing category.

• Advertising and conversion tags deployed through Google Tag Manager. Duration: up to 24 months.
• Email tracking pixels in messages we send, recording delivery, opens and clicks. You can prevent these by disabling remote images in your email client.

5. Google Consent Mode

We implement Google Consent Mode with all non-essential storage denied by default. Your choices in the banner update analytics_storage, ad_storage, ad_user_data and ad_personalization signals immediately, and no analytics or advertising cookies are written until consent is granted.

6. Third-party services

Some pages rely on third parties that may set their own cookies when their features are used, including Stripe for checkout and billing (fraud prevention and session integrity) and Supabase for authentication. Firm websites you visit from our links set their own cookies under their own policies, over which we have no control.

7. Changing or withdrawing consent

Select Cookie settings in the footer at any time to review or change your choices. Withdrawing consent stops further non-essential cookies being set; cookies already stored can be cleared in your browser settings.

Most browsers also let you block or delete cookies entirely through their privacy settings. Blocking strictly necessary cookies will prevent sign-in, checkout and some search features from working.

8. Changes to this policy

If we add or change cookies, we will update this page and, where the change is material, ask for your consent again. We keep a record of the consent you give, including the version of this policy and the time it was given.