Cookies, Website Storage and Third-Party Services

Last updated: 9 October 2026

1. Our approach to privacy

This website is powered by WholeSpace, a website and online services platform designed to minimise unnecessary cookies, tracking technologies and third-party data collection.

We use a privacy-by-design approach. Wherever practical, website content and functionality are provided directly from our own website infrastructure, without requiring visitors to accept optional cookies or third-party tracking.

In particular:

We do not require visitors to accept advertising or analytics cookies to browse the website.
We use cookies and browser storage where reasonably necessary for website security, sessions, bookings and requested services.
We avoid automatically loading optional third-party content.
Where external content requires a visitor's decision, we provide information and an appropriate control before activating it.

This approach reduces the need for conventional cookie-consent banners while preserving access to the website's ordinary functionality.

2. What are cookies?

Cookies are small pieces of information that a website can store in your browser. They can help maintain a secure session, remember a shopping basket or support a transaction.

Websites may also use other technologies, including browser storage, tracking pixels and externally hosted scripts, that can access information about visitors or their devices.

Our privacy approach covers these technologies, not just conventional cookies.

3. Cookies used by this website

WholeSpace uses a limited number of cookies to support necessary website functionality.

Session cookies

WholeSpace may use a PHP session cookie, commonly named PHPSESSID, to maintain session state and support functions such as security checks, form submissions, authentication and transaction continuity.

This cookie is session-based rather than deliberately retained for a fixed period after the browser session. It is configured with security protections, including HttpOnly, SameSite and Secure where HTTPS is used.

Booking and cart cookies

Where booking or cart functionality is available, WholeSpace may use a cookie named hs_cart_token to maintain continuity while a visitor completes a booking or purchase.

This cookie identifies the relevant server-side cart rather than storing booking details directly in the cookie. Its configured lifetime is one hour, consistent with the platform's reservation workflow.

Other necessary storage

Certain requested functions may use temporary browser or session state to maintain security, process forms or complete transactions.

These technologies are used for operational purposes, not as general advertising or visitor-profiling mechanisms.

4. Cookies we do not use by default

Under WholeSpace's standard privacy configuration, the website does not automatically deploy optional advertising, behavioural profiling or third-party analytics technologies as part of ordinary Managed page rendering.

WholeSpace also does not automatically retain visitors' booking contact details in a long-lived convenience cookie.

If additional analytics, advertising or tracking services are introduced by the website operator, their use must be separately assessed and disclosed, and any legally required permission obtained before activation.

5. Embedded videos and YouTube

Some pages may contain videos hosted by YouTube, a service operated by Google.

Under our standard configuration, these videos initially appear as locally hosted preview images. Simply viewing the page does not load the YouTube player.

Before activating a video, visitors are informed that playing it will connect their browser to YouTube and that Google may process information or use cookies and similar technologies.

Visitors can then choose Play using YouTube.

This action activates the selected video only. It does not establish permanent permission for other videos or future visits.

Visitors can select Stop using YouTube to remove the active player and return to the locally hosted preview.

Stopping the player prevents further interaction with that player through WholeSpace, but cannot remove information or cookies that Google may already have stored.

YouTube's subsequent processing is governed by Google's own applicable privacy terms and practices.

6. Maps and external websites

Where location information is provided, WholeSpace can display locally hosted location information and links to external mapping services.

Simply displaying this information does not require an embedded Google Maps connection.

If a visitor follows a link to Google Maps, Apple Maps or another external service, that service may process information according to its own privacy policy.

The same principle applies to other external websites linked from this site.

7. Payments

Where online payments are available, WholeSpace uses Stripe to provide secure payment functionality.

Stripe's browser-side payment components are loaded when a visitor enters the relevant payment process, rather than automatically during ordinary page browsing.

Stripe may use cookies, device information and other technologies for payment processing, authentication, fraud prevention and transaction security.

These activities are associated with providing the requested payment service. Stripe's own privacy information explains its processing practices.

8. Why we do not normally display a cookie banner

Many websites display cookie banners because they activate optional tracking, advertising or third-party technologies when a page loads.

WholeSpace takes a different approach.

Rather than asking visitors to consent to unnecessary technologies, its standard Managed configuration avoids activating them in the first place.

Consequently, a general Accept/Reject cookie banner is not required solely for the ordinary functionality described in this document.

Where a particular optional service requires consent or another informed visitor decision, that choice can instead be presented when the visitor requests the service.

9. UK and European Union privacy requirements

Our approach is designed with regard to the following regulatory frameworks:

The European Union General Data Protection Regulation (EU GDPR).
The EU ePrivacy rules, as implemented in applicable national legislation.
The United Kingdom General Data Protection Regulation (UK GDPR).
The United Kingdom Privacy and Electronic Communications Regulations (PECR).

These frameworks distinguish between technologies necessary for a requested service and technologies that require additional permission.

In general, non-exempt cookies and comparable storage/access technologies require valid prior consent. Consent must be appropriately informed, specific and freely given.

Technologies that are genuinely necessary to provide a service requested by the visitor may be used without separate cookie consent, subject to applicable legal requirements.

WholeSpace's standard configuration is intended to minimise the use of technologies requiring such consent.

This does not mean that all website processing is exempt from data protection law. Personal information collected through forms, bookings, payments, subscriptions or other services remains subject to applicable privacy and data protection obligations.

10. Your choices and controls

Visitors can control their interaction with optional external content.

For example, visitors can choose not to activate a YouTube video, or stop an activated player.

Visitors can also manage or delete cookies through their browser settings. Disabling necessary cookies may affect authentication, bookings, payments or other requested functionality.

Where personal information is collected, the website's Privacy Policy explains the relevant processing, retention and rights available under applicable law.

11. Changes to our use of cookies

We may update this statement when website functionality, third-party services or relevant privacy practices change.

If we introduce technologies requiring additional visitor permission, we will provide appropriate information and controls before using them.

12. Further information

For information about how personal information is collected, used, retained and protected, please consult this website's Privacy Policy.

For questions about this website's use of cookies or personal information, contact the website operator using the contact details provided on this website.