Cookie Policy: how Layercake uses cookies

1. Introduction

This policy applies to cookies and other storage and access technologies used on our website. When you visit, a cookie banner lets you accept all cookies or manage your preferences for non-essential cookies. Essential cookies are required for the website to function and cannot be disabled. Functional, analytics and marketing cookies are only placed on your device after you have given consent via our cookie banner, and you may withdraw or amend that consent at any time via the cookie banner or your browser settings.

This policy is provided in accordance with the UK GDPR, the Privacy and Electronic Communications Regulations 2003 (PECR), and the Data (Use and Access) Act 2025.

2. Definitions

Cookie — a small text file stored on your device when visiting a website.
Cookie Law — the UK GDPR, PECR, the Data Protection Act 2018 and, where applicable, the Data (Use and Access) Act 2025.
Personal Data — information relating to an identifiable person as defined by UK and EU GDPR.
We / Us / Our — Layercake CX Ltd.

3. Information about us

Layercake CX Ltd, registered office 71–75 Shelton Street, London WC2H 9JQ. We comply with UK GDPR, PECR, and, where applicable, EU GDPR.

4. How we use cookies

We may place first-party cookies to support essential website functions, security protections, cookie preference storage, and session management. We may also use third-party cookies from integrated service providers to support features such as video playback, chat widgets, payment processing, analytics, and marketing automation. Not every cookie below will be set for every visitor — cookies are only set when the relevant platform feature is active.

5. Cookie categories

Strictly necessary — required for the site to operate.
Functional — remember preferences or enable features like chat.
Analytics — help us understand site usage to improve performance.
Marketing — used for interest-based advertising where enabled.
Session — deleted when the browser closes.
Persistent — remain stored for a set duration.

6. Cookies that may be set (as migrated from the current site)

Strictly necessary (first-party): XSRF-TOKEN (security token, session); DPSettings (saves cookie preferences, 12 days); slim_session (login/session consistency, 2.5 days); affiliate (tracks affiliate link usage, marketing, varies).
Payment & security (Stripe): js.stripe.com and m.stripe.network (script/network calls, no cookie); _stripe_sid (payment processing, 30 minutes); _stripe_mid (fraud prevention, 1 year) — where checkout is enabled.
Video hosting (Vimeo): vuid (analytics identifier, 2 years, requires consent); player (player preferences, 1 year); _cf_bm and cf_clearance (bot management / security challenge, 30 minutes / ~4 hours).
Notifications (Beamer): _beamer_first_visit, Beamer_userID, _BEAMER_* (65–300 days, requires consent).
Chat / support (only if enabled): Olark (hblid, wcsid, olfsk), TawkTo (twk_idm_key), Freshchat (pubsub_cookie), Zendesk (ZD-suid / ZD-buid).
Analytics (only if enabled): Google Analytics (_ga, 2 years; _gid, 24 hours; _gat, 1 minute); Mixpanel (mp_#_mixpanel, 1 year).
Security & infrastructure (Cloudflare): _cf_bm (30 minutes); cf_clearance (~4 hours).
Marketing (only if enabled): Facebook (_fbp, 90 days); HubSpot (_hstc, 6 months); Google Ads remarketing (session); Fomo notifications (persistent, varies).

Not all cookies will be present for all users or sessions — cookies are set only when the related feature is active.

7. Consent and control

You can manage cookie preferences via our cookie banner, or disable cookies in your browser settings. Blocking essential cookies may affect website functionality.

8. Changes to this policy

We may update this policy from time to time. Changes apply from the date posted on this page.

9. Contact us

If you have questions about cookies, please get in touch via our Contact Us form.

10. Data protection complaints

If you have concerns about how we use cookies or process your personal information, contact us via our Contact Us form. We will acknowledge and investigate complaints in accordance with applicable data protection legislation and respond without undue delay. If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).