1. The short version
This website does not use analytics, advertising, social media or tracking cookies.
On most pages, the only thing stored on your device is a single flag that remembers you have dismissed the cookie notice. It lives in your browser's local storage and never leaves your device. The one exception is the contact page, where our spam-protection provider, hCaptcha, sets a short-lived security cookie so the form cannot be flooded by bots.
Both are strictly necessary: one stops the notice reappearing, the other protects a form you have chosen to use. Nothing optional runs on this site, so there is nothing for you to switch off. If that ever changes, we will ask for your consent before it loads — and this page will say so.
3. What we store on your device
This is the complete inventory. If we add anything to the site, we add it here at the same time.
| Name | Set by | Type | Purpose | How long |
|---|---|---|---|---|
| kozy_cookie_notice | Kozy Heating Solutions (this website) | Local storage | Remembers that you have seen and dismissed the cookie notice, so it is not shown on every page. | Until you clear your browser storage |
| __cf_bm | hCaptcha, via Cloudflare (hcaptcha.com) | Third-party cookie | Set only on the contact page when the spam-protection check loads. Helps tell real visitors from automated bots. | 30 minutes |
Strictly necessary storage like this does not require consent, because it is needed to provide what you have asked for or to keep the site secure. We still tell you about it. The hCaptcha cookie is set by a third party and is covered by hCaptcha's own privacy policy.
4. Third parties and embedded content
A few services help us run the site. Only hCaptcha sets anything in your browser, and only on the contact page:
| Service | What it does | What it receives |
|---|---|---|
| Web3Forms | Delivers messages sent through the contact form to our email inbox. | The name, email address, phone number, optional postcode and message you type into the form, plus the page it was sent from and the time. |
| hCaptcha (Intuition Machines, Inc.) | Checks that contact form submissions come from a real person, to block spam. | IP address, browser and device information, and how you interact with the captcha. |
| Website host | Serves the website and keeps short-term server and security logs. | IP address, browser type, requested page, date and time. |
We link to our Facebook page rather than embedding a live feed. A plain link means Facebook does not receive anything about you unless you choose to click through — at which point Facebook's own privacy policy and cookies apply.
Maps and video
We do not embed maps or video players on this site. If we ever do, they will be blocked behind a click-to-load placeholder so nothing third-party runs until you choose to load it.
5. Managing cookies and storage
Every major browser lets you view and delete cookies and site data, usually under Privacy and Security in its settings. Clearing site data for this website will remove the cookie notice flag, and the notice will appear again on your next visit.
You can also bring the notice back at any time:
Blocking storage for this site will not stop the pages working, but the cookie notice will not remember your dismissal. Blocking third-party cookies may stop the spam check on the contact form from completing. If that happens, you can always call, text or email us instead.