Cookies Policy
Last updated: June 2026
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, remember your preferences, and provide basic analytics to site owners. Cookies cannot run programs or deliver viruses to your device.
This policy explains what cookies HeyComply uses on our marketing website (heycomply.co.uk) and web application (app.heycomply.co.uk), why we use them, and how you can control them.
2. Who we are
HeyComply ("we", "us", "our") provides workforce attendance compliance software. For questions about this policy, contact us at support@heycomply.co.uk.
2a. Legal basis for analytics cookies
Under the UK GDPR and Privacy and Electronic Communications Regulations (PECR), we rely on consent as the legal basis for analytics cookies. Analytics cookies are not set until you explicitly accept them via our cookie banner.
You may withdraw consent at any time by clearing your cookies or rejecting cookies via the banner on our website.
3. Cookies we use
We keep our use of cookies minimal. We do not use advertising cookies, retargeting cookies, or share data with social media platforms.
Essential cookies
These cookies are strictly necessary for the website and application to function. They cannot be disabled without breaking core features.
Session token — Keeps you logged in to the HeyComply application. Without this cookie you would be logged out on every page load. Duration: Session / 7 days (remember me). Provider: HeyComply.
CSRF token — Security cookie that protects against cross-site request forgery attacks. Duration: Session. Provider: HeyComply.
Cookie consent — Stores your cookie preference (accept/reject) so we do not ask again on every visit. Duration: 1 year. Provider: HeyComply / Framer.
Analytics cookies (optional)
These cookies help us understand how visitors use our marketing website, such as which pages are visited most often and how users navigate the site. We use this information to improve our website and user experience. The data collected is anonymised and aggregated.
Analytics cookies are only set after you explicitly accept them via our cookie banner. If you reject cookies, no analytics data is collected.
_ga — Distinguishes individual visitors for analytics reporting. Used to calculate visitor, session, and campaign data. Duration: Up to 2 years. Provider: Google LLC.
_ga_DBBFC723BN — Maintains session state and page analytics for HeyComply's Google Analytics 4 property. Duration: Up to 2 years. Provider: Google LLC.
We use Google Analytics 4 (GA4) via Google Tag Manager (GTM). GTM is configured to hold all tags until consent is granted — analytics scripts do not load if you reject cookies.
4. Cookies we do not use
We do not use any of the following:
Advertising or retargeting cookies
Social media tracking cookies (Facebook, LinkedIn, Twitter/X, etc.)
Google Ads or similar paid media tracking
Fingerprinting or cross-site tracking technologies
5. Third-party services
We use a small number of third-party services to run our website and application. Their roles in relation to cookies are described below.
Framer (website hosting) — Our marketing website (heycomply.co.uk) is built and hosted using Framer (Framer B.V., Amsterdam, Netherlands). Framer may set functional cookies as part of hosting the site. Framer does not set advertising or tracking cookies on our behalf. Privacy policy: framer.com/legal/privacy-statement.
Google Analytics 4 — We use GA4 (Google LLC, USA) to collect anonymised, aggregated analytics data about how visitors use our marketing website. Analytics cookies are only activated after you give consent via our cookie banner. Google's privacy policy: policies.google.com/privacy.
Google Tag Manager — We use GTM (Google LLC, USA) to manage analytics tags on our marketing website. GTM itself does not set analytics cookies; it is configured to block analytics tags until consent is granted. GTM only activates Google Analytics after you accept cookies.
Railway (application hosting) — Our web application (app.heycomply.co.uk) is hosted on Railway (Railway Corp, USA). Railway is an infrastructure provider and does not set cookies on end users' devices.
6. How to manage or disable cookies
You can control cookies through your browser settings. Most browsers allow you to:
View which cookies have been set
Delete individual or all cookies
Block cookies from specific websites
Block all third-party cookies
Browser-specific instructions:
Please note that disabling essential cookies will prevent you from logging in to the HeyComply application.
7. Changes to this policy
We may update this Cookie Policy from time to time. Any changes will be posted on this page with an updated date. If we introduce new non-essential cookies, we will update our consent banner accordingly.
8. Contact us
If you have any questions about this Cookie Policy, please contact us at support@heycomply.co.uk.
