A short, honest account of what this website puts on your device.
Which cookies are set, who sets them, what each one is for, how long it lasts, and how to get rid of them if you would rather not have them.
Effective from · Version 2.0
Nothing is set until you say yes.
This Cookie Policy explains how The Vilij Limited (“The Vilij”, “we”, “us” or “our”) uses cookies and similar technologies when you visit our website.
It should be read together with our Privacy Policy, which explains how we handle personal data more generally, and our User Terms of Use.
This policy covers this website. Where the Platform sets cookies of its own, those are described when you create an account and sign in.
If anything in this policy is unclear, please contact us using the details in section 9.
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, to make them work more efficiently, and to give the site’s operator information about how the site is being used.
Where this policy refers to cookies, it also means similar technologies that do comparable things, such as pixels, tags, software development kits and browser local storage.
Cookies are usually described in two ways. By who sets them:
And by how long they last:
We use cookies to:
This website does not use advertising or ad-targeting cookies, and we do not sell information collected through cookies.
We do not use cookies to identify you personally on this website. The analytics cookies described in section 5 identify a browser, not a person.
Strictly necessary. Cookies that are required for the website to work, to keep it secure, or to remember that you have told us what you want. The cookie banner does not offer a switch for these, because switching them off is not something we can meaningfully offer: the site cannot be delivered without them, and the cookie that records your choice is what stops us asking you again. You can still block them in your browser, though the website may then not work properly, and we will have no way of remembering that you refused anything.
Functional. Cookies that remember choices you have made about how the site looks or behaves, so that you do not have to make them again. We do not currently use any. The cookie that records your cookie choice is treated as strictly necessary rather than functional, because without it we could not honour a refusal.
Analytics and performance. Cookies that tell us how the website is used: which pages are read, how long people stay and where they arrived from. These are not necessary for the website to work, and none of them is set unless you accept them.
Advertising and targeting. We do not use these on this website.
The cookie banner therefore offers one choice, not four: analytics cookies on, or analytics cookies off. Strictly necessary cookies are explained rather than offered, and the other two categories are not in use.
This website sets one first-party cookie of its own (vilij_cookie_consent, which records the cookie choice you made) and nothing else. Every other cookie in the table below is set by one of the third-party services described in section 6, and the analytics ones are set only if you accept them.
The cookies that may be set when you visit this website are:
| Cookie | Set by | Purpose | Category | Typical lifespan |
|---|---|---|---|---|
| vilij_cookie_consent | The Vilij | Records the choice you made in the cookie banner: whether you accepted or refused analytics cookies, the date and time you chose, and the version of this policy you were shown. It contains no identifier and nothing about you. | Strictly necessary | 6 months from the date you choose. If you closed the banner without choosing, it lasts only until you close your browser, and you will be asked again next time. |
| __hstc | HubSpot | The main analytics cookie. Records the domain, a visitor identifier, the first and most recent visit and the number of visits. | Analytics, only if you accept | 6 months |
| hubspotutk | HubSpot | Identifies a returning browser so that repeat visits are not counted as new ones. | Analytics, only if you accept | 6 months |
| __hssc | HubSpot | Tracks a single browsing session and whether the visit count needs incrementing. | Analytics, only if you accept | 30 minutes |
| __hssrc | HubSpot | Records whether the visitor has restarted their browser, so a new session can be started. | Analytics, only if you accept | Session |
| __cf_bm | Cloudflare | Distinguishes people from automated traffic. Set only where Cloudflare bot protection is active. | Strictly necessary | 30 minutes |
The four HubSpot cookies are not set until you accept analytics cookies. Until then the script that sets them is not loaded onto the page at all, so there is nothing to switch off. Cookie names and lifespans for the HubSpot and Cloudflare entries are set by those providers, not by us, and they may change them; the list is accurate to the best of our knowledge at the date of this policy.
You may see other cookies if you follow a link from this website to another organisation’s site. Those cookies are governed by that organisation’s own cookie policy, not this one.
HubSpot. We use HubSpot to understand how the website is used and to manage our newsletter. HubSpot sets the analytics cookies listed in section 5. HubSpot is a data processor acting on our instructions. Its own privacy notice is available at legal.hubspot.com/privacy-policy.
Google Fonts. The website loads its typefaces from Google Fonts. Google Fonts does not set cookies, but your IP address is sent to Google in order to deliver the fonts to your browser.
Cloudflare. The website is hosted and delivered through Cloudflare, which may set a strictly necessary cookie to tell real visitors apart from automated traffic and to protect the site from attack.
We do not use Google Analytics, advertising networks or social media tracking pixels on this website.
The first time you visit, a banner asks whether you are willing to accept analytics cookies. It offers two choices of equal prominence (accept or reject), and nothing is set while you decide. Refusing is exactly as easy as accepting, and takes the same single click.
You do not have to choose at all. Closing the banner, or pressing Escape, dismisses it without accepting anything: no analytics cookies are set, and every page remains fully readable. We will ask again next time you visit.
You can change your mind at any time. The “Cookie preferences” link in the footer of every page reopens the banner, and the choice you make there replaces the one before it. If you turn analytics cookies off having previously accepted them, we delete the four HubSpot cookies listed in section 5.2 and reload the page without the script that sets them.
We will also ask again if this policy changes materially. Your choice is stored with the version of this policy it was given against, so if we begin using cookies in a way this document does not describe, the old answer stops applying and the banner reappears.
If your browser sends a Global Privacy Control signal, we treat it as a refusal of analytics cookies. We do not set them, and we do not show you the banner: you have already answered the question at the browser level, and being asked again would be ignoring you. You can still override this deliberately using the “Cookie preferences” link if you want to. We do not respond to the older “Do Not Track” header, which has no agreed meaning and was withdrawn as a standard.
Separately from all of the above, you can control and delete cookies through your browser settings. Every major browser lets you see what has been set, delete it, block cookies from particular sites, or block all cookies. This works whatever we do, which is why it is worth knowing about, but on this website it should not be necessary to refuse analytics cookies.
Blocking all cookies will not stop you reading this website, but blocking strictly necessary cookies may affect how reliably it loads, and will stop us remembering that you refused analytics cookies, so you will see the banner on every visit.
Most browsers also offer a private or incognito mode, which clears cookies when you close the window. If you share a device, that may be the simplest option.
We may update this Cookie Policy to reflect changes to the website, the services we use or applicable law.
The current version is always the one published on this website, and it takes effect from the date shown at the top of this page. The version number is shown there too.
Where we make a material change (for example, if we begin using a new category of cookie) we will say so clearly, and we will ask you again rather than carrying your old answer forward. See clause 7.4.
This is version 2.0, effective 1 August 2026. Version 1.0, published on 29 July 2026, described a website that had no cookie banner and set analytics cookies without asking. That is what this version changes.
If you have any questions about this Cookie Policy or about how we use cookies, please contact us at privacy@thevilij.co.uk.
Our full company details are set out in section 2 of the Privacy Policy.
You also have the right to complain to the Information Commissioner’s Office, the UK regulator for data protection and electronic marketing, although we would appreciate the chance to put things right first.
Not sure what any of this means?
You should not need a law degree to know what a website
is doing. If anything here is unclear, tell us and we will explain.
Strictly necessary cookies keep the site working and secure. They are always on, and there is nothing to agree to: the site cannot be delivered without them.
Analytics cookies tell us which pages are read and how people arrived, so we can tell whether what we publish is reaching the families it is meant for. They are off unless you turn them on, and nothing is set until you do.
We use no advertising or targeting cookies. You can change your mind at any time using the Cookie preferences link in the footer. Read the Cookie Policy.