Cookie Policy

Last updated: 10 June 2026  |  This policy reflects the ICO's finalised guidance on storage and access technologies (published 29 April 2026) and the PECR amendments introduced by the Data (Use and Access) Act 2025.

1. What This Policy Covers

This Cookie Policy explains how LegalLens (LL AP Consulting Limited, trading as LegalLens, company number 15518876) uses cookies and similar storage and access technologies on our website at www.legallens.co.uk.

Under the Privacy and Electronic Communications Regulations 2003 (PECR), as amended by the Data (Use and Access) Act 2025 (DUAA), we are required to tell you about the technologies we use, why we use them, and how you can manage your preferences. This policy sets out that information clearly.

Please also read our Privacy Policy, which explains how we handle any personal data collected through or in connection with our website.


2. What Are Cookies and Storage and Access Technologies?

Cookies are small text files placed on your device when you visit a website. They allow the website to recognise your device and remember certain information about your visit.

Under the DUAA 2025, the scope of PECR has been broadened beyond cookies to cover all storage and access technologies -- meaning any technology that stores information on, or accesses information stored on, a user's device. This includes:

  • HTTP cookies (session and persistent)

  • Local storage and session storage (web storage)

  • Pixels and tracking tags

  • Browser fingerprinting

  • Any other technology that accesses or stores information on your device


This policy covers all such technologies used on our website.


3. The Legal Framework: PECR and the DUAA 2025

The use of cookies and similar technologies is regulated in the UK by PECR, which sit alongside the UK GDPR and the Data Protection Act 2018.

The DUAA 2025, which received Royal Assent on 19 June 2025, amended PECR in two significant ways relevant to this policy:

First, it introduced three new categories of cookies and technologies that are now exempt from the consent requirement under PECR, in addition to the existing 'strictly necessary' exemption. These new exemptions are explained in Section 5 below.

Second, it significantly increased the maximum fines for PECR breaches, aligning them with UK GDPR penalty levels -- up to £17.5 million or 4% of global annual turnover, whichever is higher. Previously the maximum PECR fine was £500,000. This change reflects the ICO's increased focus on cookie compliance as an enforcement priority.

The ICO published its finalised guidance on storage and access technologies on 29 April 2026. This policy has been updated to reflect that guidance.


4. How We Use Cookies on This Website

The LegalLens website is an information and enquiry platform. We do not operate an e-commerce store, run advertising campaigns, or build behavioural profiles of our visitors. Our use of cookies is therefore limited compared to many commercial websites.

We use cookies and similar technologies for the following purposes:

  • To ensure the website functions correctly and securely (strictly necessary)

  • To understand how visitors use our website so we can improve it (analytics)

  • To remember your cookie preferences (functionality)


We do not use behavioural advertising or targeting cookies. We do not sell data collected through cookies to third parties.


5. Categories of Cookies We Use


5.1 Strictly Necessary Cookies

These cookies are essential for the website to function. They enable core functionality such as page navigation, form submission, and security features. Without these cookies, services you have requested -- such as submitting an enquiry form -- cannot be provided.

Strictly necessary cookies do not require your consent under PECR and cannot be switched off through our cookie banner.


Cookie / Technology

Provider

Purpose

Duration

squarespace-visitor-id

Squarespace

Identifies your session to enable website functionality

Session

ss_cvr

Squarespace

Used for visitor session management and site security

1 year

ss_cvi

Squarespace

Enables Squarespace's visitor identification for site functions

Session

Cookie consent record

LegalLens / Squarespace

Stores your cookie consent preference so we do not ask again

1 year


5.2 Analytics Cookies

We use Google Analytics to understand how visitors interact with our website -- for example, which pages are visited most frequently, how long visitors stay, and how they arrive at the site. This information is collected in aggregate and is used solely to improve the website and our content.

Under the ICO's 2026 guidance, certain low-risk analytics cookies may fall within a new DUAA 2025 exemption for 'analytics and measurement of performance' where they do not involve cross-site tracking or the creation of personal profiles. We are assessing our use of Google Analytics against this exemption and will update this policy as our assessment is completed.

In the interim, we continue to request your consent for Google Analytics cookies through our cookie banner.


Cookie

Provider

Purpose

Duration

_ga

Google Analytics

Distinguishes unique users by assigning a randomly generated number as a client identifier

2 years

_gid

Google Analytics

Distinguishes users -- stores and updates a unique value for each page visited

24 hours

_gat

Google Analytics

Used to throttle request rate and limit data collection on high-traffic sites

1 minute


Google Analytics stores your IP address anonymously. LegalLens does not associate IP addresses with any personally identifiable information. For more information about how Google uses this data, visit: policies.google.com/technologies/partner-sites.


5.3 Functionality Cookies

These cookies allow the website to remember choices you make (such as your cookie preferences) and to provide enhanced, more personalised features. They do not track your browsing activity on other websites.


Cookie

Provider

Purpose

Duration

Calendly session

Calendly LLC

Enables the embedded consultation booking widget to function correctly

Session


5.4 Cookies We Do Not Use

LegalLens does not use the following types of cookies or technologies:

  • Behavioural advertising or targeting cookies

  • Cross-site tracking technologies

  • Social media tracking pixels (including Meta Pixel or LinkedIn Insight Tag)

  • Technologies that build personal profiles of individual users for commercial purposes


Note: The previous version of this policy listed LinkedIn, Bing, and DeskPro cookies. These are no longer in use on the LegalLens website as of June 2026.


6. The New DUAA 2025 Exemptions

The DUAA 2025 introduced five new categories of cookies and technologies that are exempt from the PECR consent requirement. These are purpose-limited exemptions -- if use goes beyond the stated purpose, consent is still required.

The five new exemptions cover:

  • Security: Storage or access solely for the purpose of protecting the security of the network or information system.

  • User safety: Storage or access solely to prevent or detect fraud, safeguard safety, or protect against malicious or deceptive activity.

  • Technical storage: Storage or access solely for the technical purpose of transmitting a communication -- for example, load balancing.

  • Analytics and measurement: Storage or access solely for statistical purposes relating to the performance or operation of the website, provided it does not involve cross-site tracking or the creation of personal profiles. This exemption may apply to certain of our Google Analytics cookies -- see Section 5.2.

  • Preference: Storage or access solely for the purpose of remembering user preferences -- for example, language settings or whether a cookie notice has been displayed.


These exemptions are in addition to the existing 'strictly necessary' exemption that applied under PECR before the DUAA.


7. Your Cookie Choices

When you first visit our website, you will be presented with a cookie banner that allows you to accept or decline non-essential cookies. You can change your preferences at any time by clicking the 'Cookie Preferences' link in the footer of our website.

Under the ICO's updated guidance, declining cookies must be as easy as accepting them. Our cookie banner is designed to meet this requirement -- the decline option is as prominent as the accept option.

You can also manage cookies through your browser settings. Most browsers allow you to:

  • View and delete cookies already stored on your device

  • Block cookies from specific websites

  • Block third-party cookies

  • Block all cookies (note: this may affect website functionality)


For guidance on how to manage cookies in common browsers, visit: www.allaboutcookies.org

Please note that blocking strictly necessary cookies may prevent you from using certain features of our website, such as submitting our contact form.


8. Third-Party Technologies

Some of the technologies on our website are provided by third parties. These third parties may set their own cookies or access information stored on your device in accordance with their own privacy policies. We have limited control over third-party cookies once set.

Third-party providers currently used on this website include:

  • Google Analytics (Google LLC) -- analytics and performance measurement

  • Calendly LLC -- consultation booking functionality

  • Squarespace -- website platform and hosting


We will update this list as our use of third-party technologies changes. If you discover a cookie or technology on our website that is not listed here, please let us know at contact@legallens.co.uk.


9. Data Transfers

Some of the third-party providers listed above are based outside the United Kingdom. Where personal data collected through cookies is transferred outside the UK, we ensure appropriate safeguards are in place under the DUAA 2025 framework, which applies the updated 'not materially lower' standard for international data transfers.

For more information about how personal data collected through this website is handled, please see our Privacy Policy.


10. Changes to This Policy

We will update this Cookie Policy from time to time as our use of technologies changes or as legal requirements evolve. The 'Last updated' date at the top of this policy will always reflect the most recent version.

Given the rate at which cookie regulation is changing in the UK -- including further ICO guidance on online advertising expected in 2026 -- we recommend checking this policy periodically.


11. Contact Us

If you have any questions about this Cookie Policy or how we use cookies on our website, please contact us at:


Email:   contact@legallens.co.uk

Website:   www.legallens.co.uk

Company:   LL AP Consulting Limited, trading as LegalLens, registered in England and Wales, company number 15518876


This Cookie Policy reflects the ICO's finalised guidance on storage and access technologies (29 April 2026) and the PECR amendments introduced by the Data (Use and Access) Act 2025. LegalLens is a specialist legal consultancy, not a regulated law firm. Last updated: 10 June 2026.