Cookie Policy

1. Introduction

This Cookie Policy explains how NADVANCE LTD (“we”, “us”, “our”) uses cookies, local storage, and similar tracking technologies on the www.nadvance.co.uk website (“Website”). These technologies are used to ensure that the Website functions securely and efficiently, to support payment processing, to detect fraud and malicious activity, and to analyse aggregated usage patterns.

Under the UK GDPR, Privacy and Electronic Communications Regulations (PECR), and related legislation, we may place strictly necessary cookies without obtaining your consent. All other cookies require your permission, which you may give or withdraw at any time.

Your consent applies to: www.nadvance.co.uk

2. What Are Cookies and Similar Technologies?

A cookie is a small text file that websites store on your browser or device. Cookies may be set directly by us (“first-party cookies”) or by approved third-party providers (“third-party cookies”).

Other similar technologies include:

  • HTML Local Storage
  • Session Storage
  • Persistent Local Storage
  • HTTP Cookies
  • Secure HTTP Cookies

These technologies may store identifiers, security tokens, analytics data, and preferences depending on their function.

3. Categories of Cookies We Use

NADVANCE uses the following categories of cookies, strictly based on your uploaded dataset of 34 cookies. Each cookie is presented with the exact technical type (HTTP Cookie / HTML Local Storage / Session Storage).

A. Strictly Necessary Cookies

These cookies are essential for the Website to function and cannot be disabled, as they enable payment processing, security, bot-detection, and critical Webflow functions.

1. Webflow Security & E-commerce

Cookie Name

Provider

Purpose

Type

wf-csrf

Webflow

CSRF protection for form submissions.

Session

HTML Local Storage

wf-csrf.sig

Webflow

Validates integrity of CSRF token.

Session

HTML Local Storage

wf-order-id

Webflow Ecommerce

Tracks checkout order session.

Short term

HTML Local Storage

wf-order-id.sig

Webflow Ecommerce

Validates order token signature.

Short term

HTML Local Storage

2. Stripe (Payment Processing & Fraud Prevention)

Cookie Name

Provider

Purpose

Duration

Type

__stripe_mid

Stripe

Device / fraud prevention ID.

1 year

HTML Local Storage

__stripe_sid

Stripe

Session-based fraud protection.

Session

HTML Local Storage

cid

Stripe

Device fingerprinting for secure payments.

~1 year

HTML Local Storage

m

m.stripe.com

Determines device type for responsive checkout.

~400 days

HTML Local Storage

3. Cloudflare / hCaptcha (Security & Bot Management)

Cookie Name

Provider

Purpose

Type

_cfuvid

Cloudflare

Distinguishes legitimate users from bots.

Session

HTML Local Storage

_cf_bm

Cloudflare / hCaptcha

Bot mitigation scoring; prevents automated attacks.

Session

HTML Local Storage

__cflb

Cloudflare Load Balancer

Ensures consistent routing between servers.

Short term

HTML Local Storage

hmt_id

hCaptcha

Behaviour analysis for bot detection.

Session

HTML Local Storage

B. Performance & Analytics Cookies

These cookies collect anonymous information about Website usage to help us optimise performance, detect errors, and improve user experience.

1. Stripe CDN / Embedded Scripts Analytics

Cookie Name

Provider

Purpose

Type

_ga

stripe.com

Analytics for Stripe payment modules.

~2 years

HTML Local Storage

_ga

stripecdn.com

Duplicate GA identifier for embedded Stripe scripts.

~2 years

HTML Local Storage

_ga_SEKFWD1C9J

stripecdn.com

Session analytics for embedded Stripe resources.

~1–2 years

HTML Local Storage

_zitok

b.stripecdn.com

Performance telemetry and fraud-related metrics.

~2 years

HTML Local Storage

C. Google Identity, Fraud Prevention & Security Cookies

These cookies are placed when Google components (e.g., fonts, APIs, anti-fraud systems, embedded services) load within the Website.

Cookie Name

Purpose

Duration

AEC

Ensures user requests are legitimate; prevents malicious activity.

Months

HTML Local Storage

APISID

Stores encrypted Google account information.

2 years

HTML Local Storage

SAPISID

Enforces Google account security rules.

2 years

HTML Local Storage

HSID

Authentication + anti-fraud protection.

2 years

HTTP Cookie

SID

Prevents unauthorised access to Google services.

2 years

HTML Local Storage

SIDCC

Google account security enforcement.

Months

HTML Local Storage

SSID

Stores encrypted Google user preferences.

2 years

HTML Local Storage

SEARCH_SAMESITE

Prevents cross-site request vulnerabilities.

1 year

HTML Local Storage

__Secure-ENID

Anti-spam and security enhancement.

1 year

HTML Local Storage

__Secure-OSID

Ensures session integrity for Google login.

~1 year

HTML Local Storage

D. Google Advertising & Measurement Cookies (Play.Google)

Cookie Name

Provider

Purpose

Duration

Type

_gcl_au

play.google.com

Measures advertising performance and conversions.

3 months

HTML Local Storage

_ga

play.google.com

Tracks user behaviour on embedded Google components.

2 years

HTML Local Storage

lastExternalReferrer

play.google.com

Records last external URL before entering site.

Persistent

HTML Local Storage

lastExternalReferrerTime

play.google.com

Logs timestamp of referral source.

Persistent

HTML Local Storage

4. Why We Use Cookies

We use cookies for the following purposes:

  • Security and fraud prevention
  • Payment processing and checkout integrity
  • Ensuring Website stability and core functionality
  • Bot-detection and traffic validation
  • Analytics to improve performance and reliability
  • Enhancing user experience across devices

We do not use cookies to store sensitive personal data such as medical information, payment card details, or identity documents.

5. Managing Your Cookie Preferences

You may modify or withdraw your cookie consent at any time through our Cookie Control interface.

Additionally, most browsers allow you to:

  • Delete cookies
  • Block third-party cookies
  • Block all cookies
  • Clear local storage
  • Enable “Do Not Track” settings

Please note that turning off strictly necessary cookies may prevent the Website from functioning correctly, including checkout and security features.

6. Third-Party Cookie Policies

To understand how our partners process data through cookies, please refer to their respective policies:

  • Stripe: https://stripe.com/cookies-policy/legal
  • Google: https://policies.google.com/technologies/cookies
  • Cloudflare: https://www.cloudflare.com/privacypolicy/
  • hCaptcha: https://www.hcaptcha.com/privacy

7. Updates to This Policy

We may revise this Cookie Policy periodically to reflect changes in technology, legal requirements, or our Website’s functionality. The most recent version will always be published on this page.

    12. Contact Us

    For questions regarding this Cookie Policy, please contact:

    NADVANCE LTD

    2 Eaton Gate

    London, England, SW1W 9BJ

    Email: info@nadvance.co.uk

    Last Updated:
    20-11-2025