Cookies

This policy explains what cookies and similar technologies are used on the Waterfall Works website, and why.

It should be read alongside our Privacy Policy, which explains more generally how we handle personal information.

1. What cookies are

Cookies are small text files placed on your device when you visit a website. They're widely used to make websites work, work more reliably, or to remember something about your visit. Some cookies are set directly by the site you're visiting (first-party cookies); others are set by a different service embedded on the page (third-party cookies).

2. The short version

We use Google Analytics to see how visitors use this site, and Calendly's scheduling cookies appear once you actually load our booking calendar on the Get in Touch page. Neither loads until you accept our cookie banner. We don't run advertising or behavioural-tracking cookies, and we haven't enabled Google's advertising features.

3. Cookies set directly by Waterfall Works

We use Google Analytics to understand how visitors use this site — which pages get read, roughly how many visitors we get, and general traffic patterns. It sets the following cookies on this site's own domain:

• _ga — distinguishes unique visitors. Expires after 2 years.
• _ga_[container-id] (e.g. _ga_TDP2C6W972) — persists Google Analytics' session state for a visitor. Expires after 2 years.

We have not enabled Google's advertising or cross-site remarketing features — this is usage measurement only, not ad targeting.

4. Cookies set by our booking tool (Calendly)

Our Get in Touch page embeds Calendly's scheduling widget so you can book an introductory call without leaving the site. When that widget loads, Calendly's own infrastructure sets the following cookies. We've verified these directly rather than relying on Calendly's general documentation:

• __cf_bm (domain: calendly.com) — set by Cloudflare, which provides security infrastructure for Calendly. Used to help distinguish real visitors from bots and protect the scheduling service from abuse. Cloudflare classes this as strictly necessary for the service it protects.
• _cfuvid (domain: calendly.com) — also set by Cloudflare, used alongside __cf_bm to apply rate-limiting and bot-management rules consistently for a visitor's session.
• m (domain: m.stripe.com) — set by Stripe. Calendly's platform loads Stripe's fraud-prevention scripts as part of its own infrastructure, regardless of whether a specific booking involves payment (ours doesn't — our introductory call is free). This cookie is part of Stripe's standard fraud-detection tooling.

None of these are set until you scroll to or interact with the booking widget — they're not loaded on page load elsewhere on the site. For more detail on how Calendly and Stripe each use cookies, see Calendly's own cookie notice and Stripe's own privacy and cookie information.

5. Choosing whether these cookies are set

The first time you visit, a banner at the bottom of the page asks whether you're happy for us to use cookies. If you Accept, Google Analytics starts running across the site, and if you later load our booking calendar on the Get in Touch page, Calendly's cookies are set at that point too. If you Decline, neither loads — the calendar simply won't appear, with the option to accept later or email us directly to book.

Your choice is remembered in your browser (not sent to us) so you're not asked again on later visits, until you clear your browser's storage.

6. Controlling cookies through your browser

You can also control or delete cookies through your browser settings at any time — most browsers let you see what's stored, remove individual cookies, or block them by default. Browser-level controls apply per browser and per device, so you may need to repeat this on each one you use.

7. Changes to this policy

If we add advertising or any other non-essential tracking technology beyond what's described here in future, we'll update this policy first and introduce consent controls where the law requires it, before those technologies are switched on.

We'll also re-check this page's cookie list periodically, since third-party services like Calendly and Google Analytics can change what they load without notice to us.

8. Contact

Questions about this policy can be sent to privacy@waterfallworks.co.uk.