Legal
Cookie policy
01 The short version
The public pages of this website set no cookies. There is no cookie banner, because nothing on them needs your permission before it runs.
The signed-in area is different, and section 06 says exactly how. Once you have an account, keeping you signed in and checking you own a document does need to store things on your device. None of it is tracking, and all of it is listed.
We do count visits, on our own server, to work out which pages are worth keeping. That stores nothing on your device and is explained in full below, along with a button to stop it.
Three things can load in response to something you choose to do, and they are listed below. Nothing loads on an ordinary public page view except the pages themselves.
03 How we count visits
We count visits to this site so we know which pages are worth keeping. It runs on our own server. No other company is involved and nothing is shared.
It stores nothing on your device. There is no cookie, no visitor number, and nothing that survives you closing the tab. To count a person once rather than five times in a day, our server turns your IP address and browser into a scrambled code that cannot be turned back. It changes at midnight and your IP address is never saved.
| What it records | What it does not |
|---|---|
| Which pages were read, and in what order during one visit | Your name, email or phone number |
| How far down a page people scrolled | Your IP address |
| Which buttons and links were clicked | Anything that follows you to another website |
| Which site or search sent you here | Anything that links today's visit to yesterday's |
Why there is no banner for this. Since 5 February 2026 the law here changed. A site measuring itself, on its own server, only to improve itself, no longer needs to ask permission first. It has to say so plainly and let you refuse easily. That is what this section and the button below are for.
If we ever used this data for anything other than improving the site, the exemption would not apply and the banner would come back. We do not, and it has not.
Refusing stores one small note on your device recording that you refused. That is the only way to remember it. Nothing else is kept, and the site works exactly the same either way.
04 What loads when you ask for it
Three things, each triggered by something you do, none present on a page at rest.
| What | When | Why |
|---|---|---|
Cloudflare Turnstilechallenges.cloudflare.com | When you open the free account form, not before | Checking a person is filling the form in rather than a script. It may store something of its own to remember the check passed |
| Netlify Forms | When you send the contact form | Delivering your message. Same website, so nothing goes to a third party |
HubSpotapi.hsforms.com | When you send the contact form and tick the updates box | Adding you to the mailing list you asked to join |
Leave the updates box unticked and nothing reaches HubSpot. Not your email, not your message, nothing.
These are not exempt because we say so. They run only when you ask for the thing they make possible, and each one is doing the job you asked for.
05 What we do not do
Everything in this list is about the public pages, the ones you can read without an account, including the page you are reading now.
- No cookies of any kind, for any purpose.
- No advertising, no profiling, and nothing sold or shared with anyone who would do those things. Our visit counting runs on our own server and goes nowhere else.
- No fonts, styles or scripts from Google, and none from any content network. Everything these pages need is served from this site.
- No embedded videos, maps or social widgets, which are the usual way third parties reach a page nobody meant to invite them to.
- Nothing loads from another company on an ordinary page view.
Two of these are not true of the signed-in area, and we would rather say so here than let you find it yourself: it sets one cookie, which is what proves you own a document before it opens, and it reaches Supabase, which is where your account lives. The third company that used to load there, and the fonts that came from Google, went on 26 August 2026. Section 06 has the detail.
Links to a booking page, to WhatsApp or to the ICO are ordinary links. Nothing loads from those sites while you are here. Click one and you are on their site, under their rules.
06 When you sign in
Your dashboard and the programme documents behind it are older pages than the ones you are reading, and they behave differently. Running an account needs your device to remember things, so this part of the site does store data and does load from other companies. Here is all of it.
Until 26 August 2026 these pages also showed a consent banner. It was left over from the previous version of the site, and by then nothing read the answer it stored, so rejecting changed nothing. Asking a question and ignoring the answer is worse than not asking, so the banner is gone and this page is the notice instead.
What is stored on your device
| What | Where | Why | How long |
|---|---|---|---|
sw_deliverable | Cookie | Proves you own a step before a document will open. It cannot be read by any script, only sent back to us | 12 hours |
| Your sign-in token | Local storage | Keeps you signed in between pages, so you are not asked for your password on every click | Until you sign out |
sw_purchased_email | Local storage | Fills in your email after a payment so you can get back into your account | Until you clear it |
gdpr_cookie_consent | Local storage | No longer set. It held your answer to a banner these pages used to show. If you answered one, it is deleted the next time you open any of them | Gone |
All four exist to run the account you asked us to run. None of them tracks you, follows you to another site, or is shared with anyone.
What loads from other companies
| Who | When | Why |
|---|---|---|
Supabasesupabase.co | Every dashboard page | The database holding your account and what you have bought. It works for us under a contract and does nothing else with your data |
Cloudflare Turnstilechallenges.cloudflare.com | When you open the sign-up form | Checking a person is filling the form in rather than a script |
| PayPal | When you pay | Taking the payment. You are on PayPal's own site by then, under their rules |
The last two you set off yourself. Supabase loads whether you meant it to or not, and it has to: it is where your account lives.
Two others used to be on this list and are not any more. Google Fonts served the typefaces, and jsDelivr served the small library the dashboard uses to reach the database. Both were replaced on 26 August 2026 with copies we serve ourselves. Nothing on this site now asks Google, or any content network, for anything.
That leaves one company receiving your IP address as a side effect of you using your account, and it is the one holding the account. Everything else comes from this domain.
07 Checking this yourself
You do not have to take our word for any of it, and you should not have to.
Open your browser's developer tools on any public page, go to the storage or application tab, and look at cookies and local storage. Both are empty. The network tab lists everything a page loads, and on this site everything in it comes from this domain.
This is the kind of check we run for clients in step 2 of the programme. It takes about a minute and it is the only way to know whether a cookie policy is describing the website or describing an intention.
08 Changes to this policy
This page was written by examining what the website does, one page at a time, not by filling in a template. If we add anything that stores data on your device or connects to another company, this page changes in the same release, and the banner comes back if consent is needed.
Questions go to contact@structured-pm.com. If it concerns your personal data specifically, the privacy notice covers your rights and how to use them.
A question about this document?
Write to contact@structured-pm.com and it reaches the person who wrote it. We answer within 48 hours.
Contact us