Version	1.0	Effective date	October 2026
Classification	PUBLIC	Document owner	Company Management
Review	September 2027	ICO registration	ZB441034
Company number	13521468	Contact	team@ki-sl.co.uk

 

This policy explains how KI Sound & Light uses cookies, scripts, local storage, pixels and other technologies that store information on, or access information from, a visitor’s device. It should be read with our Privacy Notice.

1. What these technologies are

Cookies are small pieces of information that a website provides and a browser stores on a user’s device. Similar storage and access technologies include scripts, tags, local storage and pixels. They can be used to operate a website, remember choices, maintain security or measure website use.

2. Our website and consent tool

Our website is built using WordPress and hosted by IONOS. We use Complianz as our consent-management platform. Complianz is configured for the United Kingdom and is used to present the cookie banner, record and remember preferences, and block optional technologies until the required consent is obtained. Live browser testing carried out on 29 September 2026 confirmed that Google Analytics and Google advertising cookies were not set before a consent choice or after optional cookies were rejected. Site Kit Consent Mode is enabled and is reviewed as part of the website consent configuration.

The first layer of the banner must provide clear and equally prominent options to Accept and Reject, with an accessible route to Manage Preferences. Unless an exception applies, optional technologies must not be enabled before valid consent is obtained, and continuing to browse does not amount to consent.

3. Categories

Category	How we use it
Strictly necessary / functional	Required for core website, security, product catalogue/cart or consent-preference functions. These may operate without consent where the legal exception applies.
Statistics / analytics	Used to understand website performance. Google Analytics is treated as optional and is blocked until consent.
Marketing	No advertising/behavioural marketing technologies are intentionally enabled at the date of this policy. If introduced, this policy and consent configuration must be reviewed before activation.

 

 

 

 

4. Services currently relevant to the site

Service	Purpose	Technology/duration	Consent position
Complianz	Functional consent management	May use cmplz_* cookies and local storage to store consent choices/policy version. Exact names and configured duration are shown in the live Complianz cookie declaration; The consent-management cookies used to remember choices are configured for up to 365 days.	No consent required for strictly necessary consent-management functions.
Google Analytics 4	Website statistics	Common cookies include _ga and _ga_<property-id>; default cookie expiry can be up to 2 years, subject to browser/configuration changes.	Consent required under KI configuration; blocked until accepted.
WooCommerce / product catalogue	Product catalogue and enquiry/cart functionality	Functional cookies may be used when a visitor uses cart/enquiry functions. Exact cookies/durations are determined by the live Complianz scan.	Treated as functional where strictly necessary for the requested cart/enquiry function.
Contact Form 7	Plugin installed; no active public contact form at policy issue date	No contact-form processing is intended while no public form is active. If activated, a new scan and privacy review are required.	Change-control item.
WordPress / IONOS	Website operation, hosting and security	Server logs are not necessarily cookies. WordPress may use necessary cookies for administrative/security functions. Exact public-visitor technologies are shown in the live declaration.	Necessary functions where applicable.

5. Google Analytics

We use Google Analytics 4 to understand how visitors use our website and to help improve its performance and content. Google Analytics is treated as an optional statistics service and its normal analytics cookies are not enabled until the visitor has consented through our cookie controls.

Google Signals is disabled and Google Analytics advertising personalisation is disabled. We do not currently use Google Analytics for remarketing or personalised advertising, and our Analytics property is not linked to Google Ads, Merchant Center, BigQuery, Search Console or other Google products.

For visitors in the United Kingdom, Google Analytics does not log or store individual IP addresses. IP address information may be used transiently to derive approximate geographic information before being discarded.

Our GA4 property currently retains event-level data for up to 2 months and user-level data for up to 14 months. The user-data retention period is not reset when a user returns to the website.

We also use Google Analytics data-redaction controls to reduce the risk of personal information being collected inadvertently, including email-address redaction and selected URL query-parameter redaction.

 

6. Managing choices

Visitors can use the Complianz banner or Manage Consent control to accept, reject or change optional categories. Withdrawal applies to future access/use; a visitor can also delete existing cookies using browser controls. Strictly necessary technologies may still operate where required for the requested service or to remember the visitor’s choices.

7. Live cookie declaration

Because WordPress plugins and browser technologies can change, the live Complianz-generated cookie declaration on the website forms part of this policy. It is used to provide the current cookie/service names, purposes, providers and durations detected on the site. KI carries out a cookie/technology scan after material website changes and as part of periodic review.

8. International processing

Google and some other technology providers may process information outside the UK. Where personal information is involved, the international-transfer information in our Privacy Notice applies.

9. Email tracking technologies

We use Brevo to send email newsletters and marketing communications.

Brevo is configured to use anonymous email tracking so that campaign-level information about email opens and link clicks is not associated with individual recipients.

We also use Brevo’s per-contact tracking-consent controls. Individual-level open and click tracking is not enabled for contacts whose tracking preference is unknown or who have not consented to individual tracking.

KI’s approved default is anonymous campaign tracking. Brevo’s per-contact tracking-consent control is enabled and contacts whose tracking preference is unknown default to ‘No’. KI does not currently use individual-level open or click tracking as part of its standard marketing process. If individual tracking is introduced for a consented contact, the purpose, consent record, retention period and withdrawal mechanism will be documented before use.

Where individual tracking is introduced following explicit consent, the recipient will be able to withdraw that consent through the relevant controls or by contacting KI Sound & Light.

We periodically review our email-tracking configuration and will update this policy if we materially change the way email engagement information is collected or used.

 

10. Changes and contact

We review this policy and the Complianz scan when website technology changes and at least annually. Questions can be sent to team@ki-sl.co.uk. The current policy is published on www.ki-sl.co.uk.