Cookie Policy

Cookies are small files or similar technologies placed on a device when a person visits a website. They can help a website work, keep a user signed in, remember preferences, measure usage, or support marketing.

Under UK rules, strictly necessary cookies may be used without consent where they are required to provide a service requested by the user. Non-essential cookies generally require clear information and consent before they are used.

We use necessary cookies and similar storage to provide secure login, account sessions, fraud prevention, booking flows, payment handoff, cookie consent choices, security controls, and core website functionality.

These cookies are needed for the service to work and cannot usually be switched off through the LDA cookie controls. Users may block them in their browser, but parts of the website may stop working.

The first visit presents Cookie Settings, Reject All, and Accept All controls. Optional categories are off unless the user actively accepts them. Essential technologies remain active because the requested website and account services depend on them.

A permanent Cookie Settings control is available in the website footer. It reopens the same controls so a user can change or withdraw optional consent at any time. Withdrawing analytics consent removes LDA's browser analytics identifiers and prevents new optional analytics events from being accepted.

Cookie choices are normally remembered for 180 days. LDA may ask again sooner if its purposes, providers, or technologies materially change.

Analytics cookies help us understand how people use the website, which pages work well, where users experience problems, and how we can improve speed and reliability.

LDA's current website analytics are first-party. When analytics consent is enabled, LDA records page views, selected button or link interactions, engagement duration, page paths, referral information, viewport size, and browser information. Raw IP addresses are not stored in the analytics tables; a one-way IP hash may be used to count public-site visitors.

The browser analytics visitor identifier remains until consent is withdrawn or browser storage is cleared. The analytics session expires after 30 minutes of inactivity, and page-view deduplication information lasts for the current browser session.

The targeted advertising category is intended for campaign measurement, referral understanding, tailored LDA offers, and controlling repeated promotions. It remains optional and is disabled when a user selects Reject All or leaves the category unselected.

At the date of this policy update, LDA does not load a third-party advertising network tag on the public website. Selecting this category records the user's current permission, but does not itself load an unnamed advertising provider. LDA will update this policy, name the provider, explain its duration and purpose, and request fresh consent before activating a materially different third-party advertising service.

Supabase provides account authentication and database services. Supabase authentication cookies are used when a person signs in and are necessary to maintain and refresh the requested account session. Their duration follows the active account session and security configuration.

Stripe provides secure payment checkout. Stripe may set security, fraud-prevention, and checkout technologies when a user opens a Stripe payment flow. These are used to provide the requested payment service and are governed by Stripe's published privacy and cookie information.

Vercel hosts and delivers the website. LDA does not currently use a third-party analytics or advertising tag supplied by Vercel. Server-side hosting and security logs are handled separately under LDA's Privacy Policy.

lda_cookie_consent and lda-cookie-consent: LDA first-party essential consent records. They store whether analytics and targeted advertising were accepted. The consent cookie lasts 180 days; the matching browser record remains until changed or cleared.

lda-cookie-consent-id: LDA first-party essential anonymous identifier used to maintain a consent audit trail. It remains until browser storage is cleared and is not designed to contain a name or email address.

lda-analytics-visitor: LDA first-party optional analytics identifier. It remains until analytics consent is withdrawn or browser storage is cleared. lda-analytics-session expires after 30 minutes of inactivity, and lda-analytics-pageviews lasts for the browser session.

Supabase authentication cookies: Supabase strictly necessary account-session records. They are created for signed-in users and last for the active session or the configured secure refresh period.

LDA security, booking, payment-handoff, account-recovery, remembered-device, language, notification, calendar, lesson-progress, and support storage: first-party technologies used only when the corresponding feature is requested. Session records end with the browser session; persistent user preferences remain until changed, removed through the relevant control, account data is deleted where applicable, or browser storage is cleared.

Stripe checkout technologies: Stripe payment and fraud-prevention records activated when a user requests checkout. Stripe determines the individual names and durations under its current service documentation.

Use Cookie Settings in the footer to accept, reject, or change optional categories. Browser settings can also block, delete, or limit cookies and browser storage.

Rejecting or withdrawing optional consent does not prevent use of the public website or core account services. Blocking essential technologies in browser settings may affect sign-in, booking, payment, security, saved preferences, or support features.

Questions about LDA's use of cookies and similar technologies can be sent to info@ldrivingacademy.co.uk.