Cookies
Harper Macleod LLP Cookie Policy
1. Introduction
1.1 Harper Macleod LLP (HM) may collect information about you when you visit HM websites.
1.2 To do this we will use cookies which are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. Most browsers allow visitors some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit allaboutcookies.org.
2. Categories and Types of Cookies
2.1 Cookies on HM websites are categorised as either:
2.1.1 Session cookies which are temporary and are erased when the visitor closes their browser.
2.1.2 Persistent cookies which remain on the visitor’s device until they erase them or until they expire at a pre-set deletion date.
2.1.3 Third party cookies which are stored on behalf of third parties and may be either session or persistent.
2.2 HM uses the following types of cookies:
| Strictly necessary cookies | These cookies enable services the user has specifically asked for. They are essential in order to enable the user to move around the website and use its features, such as accessing secure areas of the website. Without these cookies services the user has asked for, like forms, cannot be provided. |
| Performance cookies | These cookies collect anonymous information on the pages visited. They collect information about how the user uses a website, for example, what pages did the user visit and go to most often and if they got an error message from any of the web pages. These cookies do not collect information that identifies a user. All information these cookies collect is aggregated and therefore anonymous. It is only used to improve how a website works. |
| Functional cookies | These cookies remember choices a user makes to improve user experience on the website. They allow the website to remember the choices a user makes, (user name, language, and region) and provide enhanced personal features. These cookies can also be used to remember changes you have made to text size, fonts and other parts of web pages that the user can customise. The information these cookies collect may be anonymised and they cannot track user browsing activity on websites. |
| Targeting or advertising cookies | These cookies are used to deliver relevant HM adverts to the user in relation to their likes and interests. They are also used to limit the number of times a user sees an HM advertisement as well as help measure the effectiveness of the HM advertising campaign. They are usually placed by advertising networks with the website operator’s permission. They remember that the user visited a website and this information is shared with other organisations such as advertisers. Quite often targeting or advertising cookies will be linked to site functionality by the other organisation such as advertisers. |
| Social Media Cookies | These cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools. |
2.3 HM uses a number of Google related cookies described below. Click here for an overview of privacy at Google. To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout. Users can also control the ads they see on Google and find out more about how the ads are selected for them by visiting google.com/adsettings. Alternatively, users can also manage and opt out of Google products and other third party cookies by visiting www.youronlinechoices.com/uk/your-ad-choices.
2.4 Cookie Script
| Cookie | Description | Category | Type |
| CookieScriptConsent | This cookie is used by Cookie-Script.com service to remember visitor cookie consent preferences. It is necessary for Cookie-Script.com cookie banner to work properly. | Persistent | Strictly necessary |
2.5 Google Analytics
| Cookie | Description | Category | Type |
| _Utma | This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017, no information is available from Google. It appears to store and update a unique value for each page visited. | Persistent | Performance |
| _Utmb | This cookie is part of Google Analytics and is used to measure how long the user stays on any website which uses Google Analytics: when a visit starts, and approximately ends. This cookie does not contain personal information other than the IP address of the user’s device. This is a third party cookie with a default expiration time of 30 minutes. | Persistent | Performance |
| _Utmc | This cookie is part of Google Analytics and is used to measure how long the user stays on any website which uses Google Analytics: when a visit starts, and approximately ends. This cookie does not contain personal information other than the IP address of the user’s device. This is a third party cookie and expires once the user ends their browsing session. | Session | Performance |
| _Utmv | This cookie is part of Google Analytics and is used to report the traffic that comes to the website, information on the source of where users come from or what campaign to explain how a user reaches the website. This is a third party cookie with an expiration time of 6 months. | Persistent | Performance |
| _ga, _gat_, gat_gtag_, _ga_xxxxxxxxxx | This cookie is part of Google Analytics and is used to report the traffic that comes to the website, information on the source of where users come from or what campaign to explain how a user reaches the website. This is a third party cookie with an expiration time of 2 years. | Persistent | Performance |
| _GRECAPTCHA | This cookie is set by Google reCAPTCHA, which protects our site against spam enquiries on contact forms. | Persistent | Strictly necessary |
| AEC | ‘AEC’ cookies ensure that requests within a browsing session are made by the user, and not by other sites. These cookies prevent malicious sites from acting on behalf of a user without that user’s knowledge. ‘AEC’ cookie lasts for 6 months. | Persistent | Performance |
| YSC | ‘YSC’ cookies ensure that requests within a browsing session are made by the user, and not by other sites. These cookies prevent malicious sites from acting on behalf of a user without that user’s knowledge. The ‘YSC’ cookie lasts for the duration of a user’s browsing session. | Session | Performance |
| _gid | This cookie name is associated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited. | Persistent | Performance |
| _gclxxxx | Persistent | Performance |
2.6 Google AdWords
| Cookie | Description | Category | Type |
| SID, SAPISID, APISID, SSID, HSID, NID, PREF | These cookies help to track the data linked to our Google ads in terms of impressions and clicks. These help from an experience point of view where we are then able to serve related content based on the users preferences and online behaviour. These are third party cookies and are stored up to a year and a half. | Persistent | Targeting or advertising |
| _gcl_au | Used by Google AdSense for experimenting with advertisement efficiency across websites using their services | Persistent | Targeting or advertising |
2.6.1 The website uses the Google AdWords remarketing service to advertise our services on other websites (including Google) to previous visitors to our website. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network. Any data collected will be used in accordance with our own Privacy Notice and Google’s privacy policy. The cookies are valid for 30 days from creation.
2.7 Google Tag Manager
| Cookie | Description | Category | Type |
| GTM | Google Tag Manager cookies are used on our website for targeting and advertising purposes but also for a performance perspective. Google Tag Manager is used to implement other performance cookies and third party cookies onto the website. Like other Google cookies, storage of these cookies can be managed from browser or mobile settings. | Persistent | Performance /Targeting/ Advertising |
| _gcl_au | It’s the first party cookie for “Conversion Linker” functionality – it takes information in ad clicks and stores it in a first-party cookie so that conversions can be attributed outside the landing page. | Persistent | Performance /Targeting/ Advertising |
2.8 Google Maps
| Cookie | Description | Category | Type |
| SID, SAPISID, APISID, SSID, HSID, NID, PREF | Various unique identifiers except for PREF which stores options such as preferred zoom level. Google stores up to 4 cookies and these are used on Contact Us pages to provide information on how to locate us. These cookies can last up to 10 years after you visit a page containing a map. | Persistent | Performance |
2.9 Google DoubleClickID
| Cookie | Description | Category | Type |
| Dsid, id, ide, _gads | DoubleClickID cookies are an anonymous, unique identifier used to track how successful our advertising is – how many times it was seen and clicked on. The Google DoubleClick cookie also enables Google and its partners to track and serve our advertisements on other websites across the internet based on user visit history (or behavioural profile) to our website or engagement within our online marketing which may include emails. Recent click history for the user’s device is also collected in encrypted form; this allows external advertisers to target users of the device with adverts based on perceived interests. The cookie doesn’t store the IP address but this is passed through to Google along with the cookie by the browser. Google then renders the IP address unreadable by removing the last 3 characters. No personally identifiable data is collected or stored. This is a third party cookie and is stored up to 10 years but can be erased within the browser. | Persistent | Targeting or advertising |
2.10 YouTube cookies
| Cookie | Description | Category | Type |
| SID, LOGIN_INFO, use_hotbox, PREF, SSID, HSID, watched_video_id_list, demographics, VISITOR_INFO1_LIVE | Various unique identifiers, as well as login information that may relate to a Google account. We embed videos from our official YouTube channel using YouTube’s privacy-enhanced mode. This mode may set cookies on the user’s computer once you click on the YouTube player, but YouTube will not store personally identifiable cookie information for playbacks of embedded videos using the privacy-enhanced mode. This cookie does not identify you personally unless you are logged into Google, in which case it is linked to your Google account. These cookies can last up to 10 years after you visit a page containing a YouTube video. | Persistent | Performance |
| VISITOR_PRIVACY_METADATA | Stores the user’s cookie consent state for the current domain | Persistent | Targeting Cookies |
| TESTCOOKIESENABLED | Used to track user’s interaction with embedded content. | Persistent | Performance |
2.10.1 This performance cookie allows users to view video content on our website without having to leave the HM website. YouTube’s embedded player currently creates and updates two Flash LSO objects from s.ytimg.com. The LSOs are soundData (which appears to store volume setting preferences) and videostats (which appears to store performance-related information). We have no direct control over YouTube’s use of the data stored in this object
2.10.2 Read more at YouTube’s embedding videos information page.
2.11 Bing Ads
| Cookie | Description | Category | Type |
| MUID, MC1, MSFPC, MR, CC, ANON, NAO, MH, | From time to time the website uses Bing Ads remarketing service to advertise our services on other websites (including Bing) to previous visitors to our website. This could be in the form of an advertisement on the Bing search results page, or a site in the Display Network. Any data collected will be used in accordance with our own Privacy Notice and Bing’s privacy policy. These cookies are valid for up to 13 months from the user’s first visit to the site. | Persistent | Targeting or advertising |
| SRM_B | This is a Microsoft MSN 1st party cookie that ensures the proper functioning of this website. Used by Microsoft Advertising as a unique ID for visitors. | Persistent | Targeting or advertising |
| _uetsid | This cookie is used by Bing to determine what ads should be shown that may be relevant to the end user perusing the site. | Persistent | Targeting or advertising |
| _uetvid | This is a cookie utilised by Microsoft Bing Ads and is a tracking cookie. It allows us to engage with a user who has previously visited our website. | Persistent | Targeting or advertising |
2.11.1 Click here for an overview of privacy at Microsoft or here for Bing privacy policy. To opt out of being tracked by Bing across all websites visit https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads. Alternatively, users can also manage and opt out of Microsoft products and other third party cookies by visiting youronlinechoices.com/uk/your-ad-choices.
2.12 ARRAffinity cookies
| Cookie | Description | Category | Type |
| ARRAffinity | This cookie is present in our contact/client portal and is set by websites run on the Windows Azure cloud platform. It is used for load balancing to make sure the visitor page requests are routed to the same server in any browsing session. Cookie expires after the user’s session has ended. | Session | Performance |
2.12.1 Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit allaboutcookies.org.
2.13 Social Media
2.13.1 From time to time, HM’s website uses Facebook, Twitter and LinkedIn remarketing services to advertise our content and services on these social media channels to previous visitors to our site. Any data collected will be used in accordance with our Privacy Notice and the social network’s privacy policy.
| Cookie | Description | Category | Type |
| _fbp | Used by Facebook to deliver a series of advertisement products such as real time bidding from third party advertisers. Purpose: to store and track visits across websites. | Persistent | Targeting or advertising |
2.13.2 Details about how users may opt out of receiving these cookies are found in the links below:
2.14 Social Sharing Cookies
2.14.1 HM is not responsible for and has no control over the use of cookies on third party websites. If users are concerned about the use of cookies on a third party website linked to the HM website the user should check the relevant third party policy before accessing its website or upon arrival at that website.
| Cookie | Description | Category | Type |
| psc, uit, uid, dt, di, uvc, xtc, atuvc | These cookies allow for sharing of a page on multiple social media sites (Facebook, Twitter, LinkedIn), and show content from those social media sites which we use to enhance the performance and experience of our website for our users. These social platforms all have their own cookies which are controlled by them and do not allow us access to your accounts or provide us with any confidential information relating to any of your accounts. | Persistent | Performance |
| Act, csm, fr, p, s, x-src | These Facebook cookies are used to make the ‘like’ button work so the user can share content from our websites on their Facebook page. The cookies show content from those social media sites which we use to enhance the performance and experience of our website for our users. They do not allow us access to your accounts or provide us with any confidential information relating to any of your accounts. | Persistent | Performance |
| c-user | This is created when a web browser accesses facebook.com (e.g. when the user hits the like button), it helps Facebook identify suspicious login activity to keep users safe. These cookies show content from those social media sites which we use to enhance the performance and experience of our website for our users. They do not allow us access to your accounts or provide us with any confidential information relating to any of your accounts. | Persistent | Performance |
| Datar | Another Facebook cookie which is used to create a unique ID for each session. These cookies show content from those social media sites which we use to enhance the performance and experience of our website for our users. They do not allow us access to your accounts or provide us with any confidential information relating to any of your accounts. | Persistent | Performance |
| Lu | Facebook uses this cookie to prefill the user’s Facebook email address on the login screen if the user is not explicitly logged out. These cookies show content from those social media sites which we use to enhance the performance and experience of our website for our users. They do not allow us access to your accounts or provide us with any confidential information relating to any of your accounts. | Persistent | Performance |
| Xs | Twitter cookies are used to allow content from twitter to be shown on website pages and pages to be shared by users on Twitter. These cookies show content from those social media sites which we use to enhance the performance and experience of our website for our users. They do not allow us access to your accounts or provide us with any confidential information relating to any of your accounts. | Persistent | Performance |
| guest_id, js, k, twitter_sess | Twitter cookies are used to allow content from Twitter to be shown on website pages and pages to be shared by users on Twitter. These cookies show content from those social media sites which we use to enhance the performance and experience of our website for our users. They do not allow us access to your accounts or provide us with any confidential information relating to any of your accounts. | Persistent | Performance |
2.15 Payment Portal Cookies
| Cookie | Description | Category | Type |
| ADRUM_BT | This cookie is used as part of online.worldpay.com which is embedded into the website to allow online payments to be made to HM. Information is stored for performance and analytical reasons. Any data collected will be used in accordance with our own Privacy Notice and Worldpay privacy policy which can be found at https://www.worldpay.com/uk/privacy-policy. The cookie expires after 30 seconds from being created. | Session | Performance |
| ASP.NET_SessionId | This cookie is used as part of HM’s online payment portal to provide secure communication with the user’s payment provider. The cookie expires after the user’s session has ended. | Session | Performance |
2.16 Contact / Client Portal
| Cookie | Description | Category | Type |
| ARRAffinity | We use this cookie as a unique random key to prevent replay attacks on requests with a nonce (one-time) token held and stored locally. | Session | Performance |
| com.auth0.auth | This cookie allows users to be redirected back to the page they were on prior to logging in and only the page URL data is held until the user ends their session. | Session | Performance |
| uk.co.hmengage.loginRedirect | This cookie allows users to re-authenticate the last used login credentials with the User ID and connection ID of the last user logged in stored locally to enhance user performance and experience of the website. | Session | Performance |
| auth0.ssodata | This cookie allows users to re-authenticate the last used log in credentials with the User ID and connection ID of the last user logged in stored locally to enhance user performance and experience of the website. | Persistent | Performance |
| uk.co.hmengage.session | This cookie provides an AccessToken to authenticate requests and the ID Token is a cached representation of a user’s account details as per IETF RFC with the AccessToken IDToken – IETF RFC 7519 stored until the user ends the session. | Session | Performance |
2.17 ProcessWire
| Cookie | Description | Category | Type |
| Wire | On HM’s estate agent websites, we use processwire performance cookies which don’t involve any personal data and the IP is only used to determine a user’s session. Data is erased once a session has ended. Wires_challenge is used to prevent brute force login attacks with the cookie stored for 30 days from user’s visit to the website unless the user overrides within the browser. | Session | Performance |
| Wires_challenge | On HM’s estate agent websites, we use processwire performance cookies which don’t involve any personal data and the IP is only used to determine a user’s session. Data is erased once a session has ended. Wires_challenge is used to prevent brute force login attacks with the cookie stored for 30 days from the user’s visit to the website unless the user overrides within the browser. | Persistent | Performance |
2.18 Hubspot
| Cookie | Description | Category | Type |
| messagesUtk | This cookie is used to recognize visitors who chat with you via the chatflows tool. If the visitor leaves your site before they’re added as a contact, they will have this cookie associated with their browser. If you chat with a visitor who later returns to your site in the same cookied browser, the chatflows tool will load their conversation history. The cookie is controlled by the Consent to collect chat cookies setting in your chatflow.If this setting is disabled, the cookie is controlled by the Consent to process setting in your chatflow.HubSpot will not drop the messagesUtk cookie for visitors who have been identified through the Visitor Identification API. The analytics cookie banner will not be impacted. This cookie will be specific to a subdomain and will not carry over to other subdomains. For example, the cookie dropped for info.example.com will not apply to the visitor when they visit www.example.com, and vice versa. It contains an opaque GUID to represent the current chat user. It expires in 13 months. | Persistent | Performance |
| __hstc | The main cookie for tracking visitors. It contains the domain, utk, initial timestamp (first visit), last timestamp (last visit), current timestamp (this visit), and session number (increments for each subsequent session). It expires in 13 months. | Persistent | Performance |
| hubspotutk | This cookie keeps track of a visitor’s identity. It is passed to HubSpot on form submission and used when deduplicating contacts. It contains an opaque GUID to represent the current visitor. It expires in 13 months. | Persistent | Performance |
| __hssc | This cookie keeps track of sessions. This is used to determine if HubSpot should increment the session number and timestamps in the __hstc cookie. It contains the domain, viewCount (increments each pageView in a session), and session start timestamp. It expires in 30 minutes. | Session | Performance |
| __hssrc | Whenever HubSpot changes the session cookie, this cookie is also set to determine if the visitor has restarted their browser. If this cookie does not exist when HubSpot manages cookies, it is considered a new session. It contains the value “1” when present. It expires at the end of the session. | Session | Performance |
| _conv_v | Convert.com cookie that tracks the visitor across multiple visits. | Persistent | Performance |
| _cf_bm | The __cf_bm cookie is a cookie necessary to support Cloudflare Bot Management, currently in private beta. As part of our bot management service, this cookie helps manage incoming traffic that matches criteria associated with bots. This is a CloudFoundry cookie. | Persistent | Strictly Necessary |
| cf_use_ob | This cookie is associated with sites using CloudFlare. It is used to improve page load times and to override any security restrictions based on the visitor’s IP address. It does not contain any user identification information. | Session | Strictly Necessary |
2.19 Wisepops
| Cookie | Description | Category | Type |
| wisepops | This cookie is used for the purpose of showing marketing pop-up windows on the Harper Macleod website, based on the users browsing behaviour. | Persistent | Functional |
| wisepops_visits | This is to resolve conditions such as “Display to the visitors who came 5 times in the last month”. Persistent cookie where the last 10 visits dates are stored. | Persistent | Functional |
| wisepops_visitor | Analytics identifier that provides reports on marketing campaign performance. | Persistent | Performance |
| wisepops_activity_session | Analytics identifier that provides reports marketing campaign performance. | Session | Performance |
| wisepops_session | This cookie provides initial referrer data (UTM parameters) of the first page of the visit, etc. Data is stored during the session and a maximum of 2 hours for targeting resolution. | Session | Performance |
| _cfuvid | This cookie is used for purposes of tracking users across sessions to optimize user experience by maintaining session consistency and providing personalized services. | Session | Performance |
2.20 Microsoft Clarity
Use of web beacons (spotlight tags). These are transparent image files used to understand how users interact with the pages and content on the pages of our website. We do not use web beacons to collect information about specific visitors.
| Cookie | Description | Category | Type |
| CLID | Identifies the first-time Clarity saw this user on any site using Clarity. | Persistent | Performance |
| SM | Used in synchronizing the MUID across Microsoft domains. | Persistent | Performance |
| ANONCHK | Indicates whether MUID is transferred to ANID, a cookie used for advertising. Clarity doesn’t use ANID and so this is always set to 0. | Persistent | Performance |
| _clck | Persists the Clarity User ID and preferences, unique to that site, on the browser. This ensures that behaviour in subsequent visits to the same site will be attributed to the same user ID. | Persistent | Performance |
| _clsk | Connects multiple page views by a user into a single Clarity session recording. | Persistent | Performance |
2.21 Call Rail
| Cookie | Description | Category | Type |
| calltrk_landing, calltrk_referrer, calltrk_nearest_tld, calltrk_session_id | This cookie is necessary for the call-tracking functionality used by the website operator – The cookie sets an ID for the specific user, which allows the company’s Enquiry Team to recognize the user when calling one of the Harper Macleod offices, as well as seeing the user’s navigation on the website. | Persistent | Performance |
2.22 Akamai
| Cookie | Description | Category | Type |
| ak_bmsc | This cookie is used by Akamai to optimize site security by distinguishing between humans and bots. | Persistent | Strictly Necessary |
2.23 Passle
| Cookie | Description | Category | Type |
| passleCookieControl | This cookie stores user consent selection while visiting the Perspectives microsite | Persistent | Strictly Necessary |
| _RequestVerificationToken | Security cookie for validation purposes (to prevent Cross-Site Request Forgery) | Persistent | Strictly Necessary |
| PassleSessionCookie.2 | Captures session data while browsing the Perspectives microsite | Session | Performance |
| .PassleASPXANONYMOUS | .NET framework cookie (more info can be found here) | Persistent | Strictly Necessary |
2.24 Review Solicitors
| Cookie | Description | Category | Type |
| SESSION | Preserves user states across page requests | Session | Performance |
2.25 Nitropack
| Cookie | Description | Category | Type |
| nitroCachedPage | This cookie sets the cached status of the viewed page. This speeds up page delivery. | Session | Performance |