Cookie Policy

Last Updated: September 2026

1. INTRODUCTION

1.1. This Cookie Policy explains how Protect A Plate (“we”, “us”, “our”) uses cookies and similar technologies on our platform. It applies to all users of our website and services.

1.2. We comply with UK and EU law on cookies and similar technologies. We will only use non-essential cookies and similar technologies where you have given your consent.

1.3. You can change your cookie preferences at any time using the “Cookie settings” option (see section 6 below).

2. STRICTLY NECESSARY COOKIES

2.1. These cookies are essential for the website to function. They enable core features such as secure login and session management. You cannot opt out of these cookies without affecting how the site works.

2.2. We use the following strictly necessary cookies:

  • pap_customer — Used when you are logged in as a customer. Stores your authentication token (HttpOnly). Duration: session / 24 hours.
  • pap_admin — Used when you are logged in as an administrator. Stores your authentication token (HttpOnly). Duration: session / 24 hours.
  • pap_manufacturer — Used when you are logged in as a manufacturer. Stores your authentication token (HttpOnly). Duration: session / 24 hours.

2.3. These cookies are set with HttpOnly and Secure (in production) flags to protect your session from cross-site scripting. They are required to keep you logged in and to protect your account.

2.4. If we introduce additional security or CSRF-related cookies in the future, we will list them here and update the “Last Updated” date at the top of this policy.

3. FUNCTIONALITY COOKIES (PREFERENCES)

3.1. Functionality cookies allow the website to remember choices you make (such as language or region) and to provide enhanced features.

3.2. We do not currently use separate functionality or preference cookies. If we do in the future, we will describe them here and only use them with your consent.

4. ANALYTICS AND MARKETING COOKIES

4.1. Analytics cookies help us understand how visitors use our site (e.g. pages visited, time on site). Marketing cookies may be used to deliver relevant ads or track campaign effectiveness.

4.2. We use Google Analytics 4 and Google Ads on the public pages of our website and on the customer sign-up pages only. They are never loaded on sign-in pages or in account areas (the customer, supplier, insurer, police, press and admin portals). These are set by Google and are only enabled after you have given your consent through our cookie banner. If you decline, they are not used.

4.3. We use the following analytics and marketing cookies:

  • _ga, _ga_* — Google Analytics. Distinguishes visitors so we can measure how the site is used. Set only with your statistics consent. Duration: up to 2 years.
  • _gcl_* — Google Ads. Measures whether a visit that came from one of our adverts led to an action such as registering. Set only with your marketing consent. Duration: up to 90 days.

4.4. We use Google Consent Mode. Before you make a choice, and if you decline, Google’s tags are loaded in a restricted state that does not store cookies on your device or use your data for advertising.

4.5. These services involve Google Ireland Limited and may involve transfers of data outside the UK and EEA, protected by the safeguards described in our Privacy Policy. You can change or withdraw your consent at any time using the “Cookie settings” link described in section 6.

5. LOCAL STORAGE

5.1. In addition to cookies, we use your browser’s local storage and session storage for data the platform needs to work. Local storage stays until you sign out or it is cleared; session storage is deleted by your browser when you close the tab.

5.2. We use the following storage keys:

  • auth_session_customer, auth_session_admin, auth_session_manufacturer, auth_session_insurer, auth_session_police, auth_session_press (local storage) — Display data (e.g. email, name, company name) for the signed-in account so the interface can show who is signed in. This does not replace the secure HttpOnly cookie used for authentication, and is cleared when you sign out.
  • pap_pending_verification_email (session storage) — Holds your email address when you sign in before verifying it, so the verification page can show it without putting it in the web address. Cleared once you verify.
  • fleet_intent (local storage) — The fleet size you chose when registering, carried to the plan selection page. Removed once you choose a fleet plan.
  • mfr_reg_draft (session storage) — Your progress through the supplier registration form, so a page refresh does not lose it. Removed when registration completes.
  • pap_mfr_access (session storage) — Your supplier account’s last known search access level, so the search page can tell you when it changes.
  • pap_join_code (local storage) — A join code from an invitation link, kept while you sign in or register. Removed once used.
  • pap_press_last_spokesperson (local storage) — Press office only: the last spokesperson name you entered, pre-filled on your next release.
  • pap:evt:* (local storage) — Set only if you have accepted statistics cookies, on the public pages and customer sign-up. Records that a sign-up has already been reported, so it is not counted twice. Contains a one-way code, not your email address or any other personal details.

5.3. Apart from the pap:evt:* entries described above, this storage is used only to support the operation of the platform and is not used for analytics or marketing.

6. HOW TO CHANGE YOUR COOKIE SETTINGS

6.1. You can change your cookie preferences at any time:

  • Use the “Cookie settings” link in the footer of our website (or in the cookie banner when it is shown). This will open the cookie consent panel where you can accept or reject non-essential cookies.
  • If you have already made a choice, the banner will not show on every page; use “Cookie settings” to open it again and update your preferences.
  • Strictly necessary cookies cannot be disabled if you wish to use the logged-in areas of the site. You can avoid them by not logging in and only browsing public pages.

6.2. Your choices are stored in a cookie (e.g. consent preference) so that we remember them on your next visit. Clearing all cookies will reset your preferences and the cookie banner may appear again on your first visit.

7. MORE INFORMATION

7.1. For how we collect, use and protect your personal data, please see our Privacy Policy and our Terms and Conditions.

7.2. If you have questions about this Cookie Policy, please contact us using the details in section 8.

8. CONTACT

Protect A Plate

2nd Floor, 5 High Street, Westbury On Trym, Bristol, England, BS9 3BY

Phone: +44 20 3603 0567

You can also use the contact form on our website for general or cookie-related inquiries.

By continuing to use our website, you agree to our use of strictly necessary cookies and local storage as described in this policy. Non-essential cookies will only be used where you have given your consent.