Sparks Accounting
02392 008 665

Legal

Cookie Policy

Updated 21 October 2026. This policy explains how Sparks Accounting LTD uses cookies and similar technologies, including our consent controls and services supplied by Google, Vercel and Portallo/HighLevel.

1. What cookies and similar technologies are

Cookies are small text files placed on your device when you visit a website. Similar technologies can include local storage, pixels, tags, software-development kits and identifiers that store or access information on a device or recognise a browser or service session.

    2. Why we use them

    Cookies and similar technologies can be used to operate and protect the website, remember a choice, deliver a form or session, measure performance and, where you consent, support analytics or marketing. We use only the categories that are necessary for the feature in use or that you have permitted.

      3. Cookie categories

      Necessary technologies support security, requested services and remembering your privacy choice. Optional Website analytics covers Google Analytics through Google Tag Manager, Portallo page views and Vercel Web Analytics. Optional External services covers HighLevel embeds. Google advertising permissions remain denied. HighLevel forms require both optional permissions because the provider stores session-history and device identifiers before submission. An email contact option remains available without these permissions.

        4. Portallo, HighLevel and LeadConnector

        We use Portallo for website and client-management features. Portallo is configured as a white-label Sparks sub-account on HighLevel/LeadConnector. Cookies or similar technologies from this platform may be strictly necessary to secure a form, deliver a requested service, maintain a session or record a cookie choice. Any optional analytics or marketing technology from the platform must remain off unless you have given the required consent.

          5. External services

          If you choose a link to WhatsApp, Instagram, Facebook, HMRC, Companies House or another external service, that provider may set its own cookies or use similar technologies under its own policy. The website does not treat a simple text link as consent to cookies set on an external website; those technologies are controlled by that provider when you visit or use its service.

            6. Consent and changing your choice

            Use Cookie settings on any website page to accept, reject, choose purposes or withdraw all optional consent. No optional tracker loads before a current permission is recorded. Choices last 180 days in this browser; a changed notice or purpose requires a fresh choice. Withdrawal stops future optional tracking, unloads external content and clears accessible first-party analytics storage. A page reload removes already-loaded tracking code. Other open tabs are notified. If recording fails, optional services stay off and a pending withdrawal is retried on reconnect or a later visit. Your browser prevents us from directly deleting storage belonging to another origin. We record relevant provider notification and erasure requests for staff to fulfil; these are not completed merely by clearing cookies. Already-sent requests cannot be recalled.

              7. Cookie register

              Consent storage: sparks_privacy is our necessary, signed, HttpOnly cookie, lasting 180 days; sparks_privacy_denied is a necessary denial-only cookie lasting up to 180 days, removed after a choice is recorded. sparks.privacy.v1 is necessary local storage for tab coordination and pending withdrawals; the saved preference includes a 180-day expiry. Google Analytics may use _ga and _ga_* analytics cookies after permission; their actual expiry depends on the Google configuration (normally up to two years), and withdrawal removes accessible copies. Portallo uses lc_session_* session storage and may use _ud local storage for analytics; session storage lasts for the tab session and local storage has no automatic browser expiry. HighLevel forms were observed using v2_contact_session_*, v2_history_*, v2_user_session_event_*_fingerprint, v3_first_session_event_* and v2_session_history_* local storage, plus ghl_geo_country_v1 and ghl_form_survey_event_v1 session storage. These are blocked by withholding the form until both optional permissions are granted. Local storage has no automatic browser expiry; providers may expire its values earlier. Embedded providers may set __cf_bm security cookies under their own domains. Vercel Web Analytics uses cookieless measurement and is nevertheless blocked until analytics permission. Authentication and partner-access security cookies are necessary for their requested features, not optional visitor analytics.

                8. Browser controls

                You can also manage cookies through your browser settings. Blocking or deleting strictly necessary cookies may stop parts of the website from working correctly. Browser controls do not necessarily remove information already held by a third party; refer to that provider’s privacy or cookie notice for its own controls.

                  9. More information

                  For information about how we use personal information, including data submitted through Portallo/HighLevel-supported forms or workflows, read our Privacy Policy. For questions about cookies or privacy, contact info@sparks2.co.uk.

                    10. Changes to this policy

                    We may update this policy if our website technology, Portallo/HighLevel configuration, suppliers or cookie use changes. The current version and its effective date will always be available on this website.

                      11. Consent records

                      We keep a random browser receipt ID, your choices, the notice shown, its version and language, and timestamps in a protected database. We do not collect your email or browsing history to prove consent. Receipt evidence is retained for 12 months; unresolved provider requests retain the necessary evidence until handled. Completed provider requests retain resolution evidence for 12 months, with captured identifiers removed on resolution. Access is restricted to authorised staff. A short-lived keyed address hash protects the consent endpoint against abuse; it is not used for analytics and expired entries are cleared daily. You can find your receipt ID in Cookie settings and contact info@sparks2.co.uk about your preferences or rights. Website tracking choices are separate from any email-marketing subscription or data you deliberately submit through a form.