Kallin Cookie Policy
This Policy explains how Kallin uses cookies and similar technologies on its website and relevant online services, why they are used and how you can control optional technologies. Read it with our Privacy Policy, which explains the handling of personal information.
Our website is https://www.kallin.co.uk. For questions about cookies or your choices, email info@kallin.co.uk.
1 What cookies and similar technologies are
A cookie is a small file that a website stores on your browser or device. It can help a service recognise a session, remember a choice or perform another specific function.
Similar technologies include local storage, session storage, pixels, tags, scripts, SDKs, identifiers and some forms of device fingerprinting. In this Policy, "technologies" covers these tools where they store information on, or access information from, your device. The relevant privacy rules can apply whether or not the information is personal data and whether or not the tool is called a cookie.
Session cookies generally expire when the relevant browser session ends. Persistent cookies remain for a stated period or until deleted. First party technologies are set through the service you visit; third party technologies involve another provider. These labels do not, by themselves, determine whether consent is required.
2 Why we use these technologies
Depending on the page or feature you use, technologies may support account authentication, security, session continuity, saving privacy choices, optional preferences, website performance measurement, embedded content or advertising measurement.
The specific technologies actually used, their providers, purposes and durations are identified in our cookie inventory and relevant consent information. A category description below does not mean every example is deployed on every page. We will not treat a technology as necessary merely because it is useful to our business.
3 Strictly necessary technologies
Strictly necessary technologies are limited to what is needed to provide a service you request or to transmit a communication. Depending on the actual implementation, this may include maintaining an authenticated session, protecting the requested service against relevant security threats, processing a requested checkout, or recording your privacy preference so it can be respected.
Where a lawful exemption applies, these technologies may operate without optional consent. They must not also be used for an unrelated advertising or tracking purpose under the same exemption. If you block them through your browser, an account, payment, security or requested session function may not work correctly.
The fact that a technology is exempt from a device storage consent requirement does not exempt associated personal information from data protection law. Our Privacy Policy explains the legal bases for the related processing.
4 Optional functionality technologies
Optional functionality technologies can remember non essential preferences or provide an optional enhancement. We ask for consent before using optional technologies that are not covered by a valid exemption.
A feature you actively request may need a limited necessary technology to work. That does not give permission for unrelated tracking, profiling or advertising. Where an optional embedded feature would set non exempt technologies, we will ask for the relevant permission before loading them.
5 Optional analytics technologies
Analytics technologies can help us understand use of pages and features, identify errors and assess performance. Depending on the actual provider and configuration, information can include page views, interactions, browser and device information, referrers, approximate location and identifiers.
For optional analytics technologies used on Kallin services, we ask for consent. Rejecting them does not prevent use of the core website or paid account service. Essential server operations and proportionate security records are distinct from optional behavioural tracking and are handled as described in our Privacy Policy.
Some laws provide a narrow exemption for certain statistical technologies under specific conditions. We do not assume that an analytics product qualifies merely because it produces statistics. Our consent approach for optional analytics applies unless we clearly notify you of a different lawful arrangement and provide any required objection control.
6 Optional advertising and campaign technologies
Where actually enabled, advertising technologies may measure campaign results, attribute a visit or enquiry to an advertisement, limit repeated advertising or support relevant advertising on another platform. They may involve identifiers and sharing information with advertising providers.
We ask for consent before enabling optional advertising technologies where required, and the relevant providers and purposes must be disclosed in the inventory and consent information. You may accept analytics while rejecting advertising, or reject both. Rejecting advertising technologies does not prevent you from using the core service.
In some United States jurisdictions, disclosures for cross context behavioural advertising or targeted advertising can be treated as a "sale" or "sharing" of personal information, even if there is no monetary payment. Where the relevant law applies, we provide the required privacy choices and respect applicable opt out requests and preference signals.
Moving an advertising event or identifier through a server rather than a browser does not automatically remove privacy obligations. We must not use that arrangement to bypass applicable consent requirements or your recorded choices.
7 Your choices and consent
When optional technologies are available, the consent controls provide clear choices to accept optional categories, reject them or customise them. Optional categories are off by default until you make the relevant positive choice. Necessary technologies may remain active where legally exempt and are explained separately.
Selecting "Accept all" enables the optional categories described at that time. Selecting "Reject optional" leaves only applicable exempt technologies active. Selecting "Customise" allows you to choose by purpose and save your preferences. Accepting and rejecting must be equally straightforward and clearly presented.
Silence, scrolling, continued browsing, closing a banner or accepting our Terms do not count as consent to optional technologies. Optional consent is not required simply to buy or use the core Kallin service. If you decline a particular optional feature, its necessary operation or embedded content may remain unavailable, and the relevant control should explain that consequence.
Where a technology has multiple purposes, consent must cover each non exempt purpose before it is used for that purpose. We keep the records needed to demonstrate and respect choices, including the relevant preference, time and notice version where appropriate.
8 Changing or withdrawing your choices
You can reopen Cookie settings from the website's privacy controls or footer to change or withdraw optional choices. Withdrawal must be as easy as giving consent. It applies to subsequent use and does not make earlier lawful processing unlawful.
After withdrawal, we stop the optional storage, access and related processing covered by your withdrawal. Where appropriate, we remove or disable identifiers that we control. We cannot always remove a third party cookie directly from your browser; you can also use your browser's deletion controls or the relevant provider's settings.
Choices are generally specific to a browser or device unless a setting clearly explains that it is saved to your account. You may need to repeat your choice on another device, in another browser, after clearing storage, or after a material change to the technologies or purposes.
You can also contact info@kallin.co.uk about a choice that is not working. An email support route supplements, and does not replace, an effective in service withdrawal or legally required opt out control.
9 Third party content and services
An embedded video, demonstration, support tool, sign in function or payment service may involve another provider. Before optional embedded content sets non exempt technologies, we will provide the relevant choice and information. Only genuinely necessary technologies for a requested function may be treated as exempt.
Providers may have separate controller responsibilities for their own services. Their privacy and cookie notices explain those activities. We remain responsible for the technologies deployed through our pages and for our own disclosures.
A link to another website is different from embedding its tracking tools on our page. If you choose to leave Kallin and use that website, its own notices and controls apply to its independent activity.
10 Browser settings and opt out signals
Most browsers let you inspect, delete or block cookies and other stored information. The precise controls vary; use your browser's privacy help. Blocking all storage may prevent sign in, reset privacy preferences or affect a function you request. Browser controls are additional to our consent settings and are not an excuse to load optional technologies before consent.
Where a law applicable to us requires recognition of an opt out preference signal, such as Global Privacy Control, we will apply a recognised valid signal to the covered sale, sharing or targeted advertising activity. The scope may be browser or account specific depending on the signal and relevant law. A generic "Do Not Track" setting is not the same as every legally recognised opt out signal.
Our ordinary optional consent controls remain available regardless of whether your browser sends a signal. Where there is a legally controlling opt out, it must not be overridden merely by a conflicting general consent setting.
11 Cookie inventory and durations
The inventory must identify each technology actually used on the relevant website or service. It must state its name or identifier, provider, purpose, category, duration and whether it is first or third party. Related details may also be displayed in Cookie settings.
We use only durations proportionate to the stated purpose. A security session, preference record and advertising identifier do not all require the same lifespan. A maximum cookie lifespan does not mean the related personal information must be retained for that entire period; our Privacy Policy and your applicable choices also govern retention.
Schedule 1 Current technology inventory
Vercel Web Analytics measures website visitors and page views after you consent to optional analytics, without setting analytics cookies. Its anonymous visitor identifier is discarded after 24 hours. Meta Pixel uses the advertising cookies listed below after advertising consent; their durations are provider defaults and may differ with configuration or browser limits. Meta's _fbc cookie is used only when a Meta advertising click identifier is available. The Cloudflare Turnstile entry applies only where the contact-form security check is enabled; its verification token is not a persistent cookie.
Name or identifier | Provider and domain | Specific purpose and category | Duration | First or third party and consent treatment |
|---|---|---|---|---|
Vercel Web Analytics (cookieless) | Vercel. Analytics requests are sent through the website domain to Vercel's Web Analytics service. | Measures page views and website visitors using an anonymous identifier derived from the request. Optional analytics. | Visitor identifier discarded after 24 hours. No analytics cookie is set. | Third-party analytics service without analytics cookies. Requires prior consent to optional analytics under our consent approach. |
_fbp | Meta Pixel (Meta). Cookie domain: kallin.co.uk; Pixel script from connect.facebook.net and event requests to facebook.com. | Identifies a browser to measure advertising performance and support advertising audiences. Optional advertising. | 90 days by default; browser limits may shorten this period. | First-party cookie supplied by Meta. Requires prior consent to optional advertising. |
_fbc | Meta Pixel (Meta). Cookie domain: kallin.co.uk; Pixel script from connect.facebook.net and event requests to facebook.com. | Records a Meta advertising click identifier to attribute subsequent website activity to that click, where available. Optional advertising. | 90 days by default; browser limits may shorten this period. | First-party cookie supplied by Meta. Requires prior consent to optional advertising. |
Cloudflare Turnstile verification token (contact form, when enabled) | Cloudflare. Security widget and verification service: challenges.cloudflare.com. | Checks whether a requested contact-form submission is genuine and helps prevent automated abuse. Contact-form security only, not advertising or analytics. | Single-use token valid for up to 5 minutes after generation; not a persistent cookie. | Third-party security service. Used without optional consent only where necessary to protect the requested form and a lawful exemption applies. |
kallin_cookie_consent | Kallin. Host-only cookie on the website hostname, normally www.kallin.co.uk. | Remembers your analytics and advertising choices, the time saved and the consent notice version, so we can respect your preferences. Essential privacy-preference storage only. | Up to 180 days from saving your choice. Replaced when you change your preferences; an outdated notice version requires a new choice. | First-party cookie. Necessary to record and respect your requested privacy choices; not used for analytics, advertising or identifying you across websites. |
12 Technologies on customer websites
A business customer may embed a Kallin chat or other supported tool on its own website. That business is responsible for explaining the technologies deployed on its site, assessing their purposes and ensuring that required choices operate before non exempt technologies are loaded.
A visitor's consent on the Kallin marketing website is not automatically consent for a separate customer's website. Kallin must provide the customer with relevant information about technologies used by the supplied tool and meet its own legal obligations. Customers must not categorise optional analytics or advertising as necessary simply because they are associated with a chat tool.
13 International users
Our approach includes prior consent for optional technologies and preservation of applicable local rights. UK rules include the Privacy and Electronic Communications Regulations as amended and relevant data protection law. EU, United States and other countries can impose different or additional requirements.
We apply mandatory requirements where they govern the relevant activity and provide additional controls or notices where required. Using this website does not waive a local privacy right. This Policy does not claim that every cookie practice is automatically lawful in every country.
14 Updates and contact
We may update this Policy and the inventory when technologies, purposes or legal requirements change. The date at the top shows when the Policy was last updated. We will request fresh consent before a new or materially changed optional use where required, and will not rely on an old choice for an unrelated new purpose.
For questions or concerns about this Policy, contact info@kallin.co.uk. The Privacy Policy explains further rights and regulatory complaint routes.
